Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7bdkHunHj-LPyMwi96q8q70C9bo.roa
File: 7bdkHunHj-LPyMwi96q8q70C9bo.roa (raw, json)
Hash identifier: i78DLu/fc26kZmSiQrtmvwUnbJjDbAZ8kw1fqKoNej8=
Subject key identifier: ED:B7:64:1E:E9:C7:8F:E2:CF:C8:CC:22:F7:AA:BC:AB:BD:02:F5:BA
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27A984C6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7bdkHunHj-LPyMwi96q8q70C9bo.roa
Signing time: Sat 01 Jan 2022 16:08:32 +0000
ROA not before: Sat 01 Jan 2022 16:08:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49376
IP address blocks: 146.120.206.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665420998 (0x27a984c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edb7641ee9c78fe2cfc8cc22f7aabcabbd02f5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:35:a0:ba:c9:01:55:31:1a:50:60:da:4c:92:
69:7a:7e:c7:d1:55:9c:8a:81:e8:59:f5:1c:17:6a:
a2:6d:e6:33:15:ca:b5:8b:5c:e4:4a:35:1c:51:3d:
d6:c9:24:5c:41:de:56:31:a1:83:f4:5f:a3:2a:42:
42:74:9d:3b:03:b6:9e:73:ef:59:c0:22:b3:7e:9e:
cf:17:dc:28:d5:9c:35:e6:ce:22:f9:e8:6e:e4:ec:
03:b3:ee:3f:3b:b7:9f:8f:c7:d2:6a:aa:61:7d:49:
2b:4b:48:d8:09:10:1c:21:bb:85:3d:19:96:5c:7c:
6c:09:6a:9e:64:9a:6f:f1:9d:42:f5:e0:13:ca:81:
1b:ec:ab:72:1c:ee:c1:f4:98:65:c9:52:61:87:ee:
c4:25:58:5c:ef:68:ed:65:4a:20:68:99:b0:42:fa:
75:4e:d5:e0:41:54:58:78:92:17:2f:cf:f2:e5:30:
2a:87:1a:d0:78:12:fd:ff:f1:89:9c:e7:2b:88:64:
f6:aa:45:17:5a:62:71:f7:f9:68:19:5e:b3:c1:4a:
cf:2c:27:5d:ab:fe:87:97:b4:a3:f5:ef:90:d0:97:
39:06:3b:88:e9:68:40:69:98:29:a8:78:8e:34:24:
a7:58:7f:34:62:3e:92:7c:3e:1e:a4:52:b9:67:ce:
e6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B7:64:1E:E9:C7:8F:E2:CF:C8:CC:22:F7:AA:BC:AB:BD:02:F5:BA
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7bdkHunHj-LPyMwi96q8q70C9bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.206.0/23
Signature Algorithm: sha256WithRSAEncryption
90:8a:d5:43:90:a1:e0:9e:bd:09:c5:92:2b:0f:d6:b0:68:65:
02:ca:60:e2:fd:0f:58:dd:be:8d:e0:31:33:a5:cb:fd:51:0d:
8d:3b:2b:29:05:94:36:a6:ec:a5:3b:e0:81:7b:3f:01:b4:b7:
c7:29:65:b4:c6:64:63:ac:c6:f7:03:59:45:a5:46:e1:4b:99:
47:25:0f:e3:0c:75:90:7e:e7:fa:67:e6:3b:bd:77:f9:a9:82:
a5:4b:ea:40:c2:62:fd:f3:27:fe:e0:e8:1f:6f:74:3f:b3:bb:
ea:59:78:59:4d:00:2d:cf:d3:18:f6:6e:ad:ec:b2:8b:97:f7:
a8:b6:1d:b6:93:0f:8f:ef:e1:16:d0:75:50:f4:60:5b:e7:10:
76:0f:6d:47:92:f0:92:1f:7a:4f:00:ca:c8:52:fa:0a:f7:8a:
6a:76:ae:2b:52:6a:f2:c4:eb:a9:9f:68:d7:4c:04:74:3d:c4:
35:31:38:e3:cd:14:c6:fc:e6:23:9b:60:c7:54:ed:32:16:92:
a2:f5:eb:e9:b3:07:d4:90:af:78:65:44:6b:c2:7f:cd:a6:8b:
de:fa:e1:18:f3:2e:a1:63:46:ec:6a:e9:2e:c8:6b:4a:e8:43:
d8:88:98:a5:d9:57:7a:19:d7:db:9b:0f:2f:21:44:9b:e2:f2:
b6:35:90:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:49 2024 by rpki-client on console-ams.rpki-client.org