Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/T3dmX9V9FATLOaP0qH-a3h9bU5U.roa
File: T3dmX9V9FATLOaP0qH-a3h9bU5U.roa (raw, json)
Hash identifier: PEttXam2sriyW6H/0uwMkZDEzbgjBWXeaWHKKud0Mqc=
Subject key identifier: 4F:77:66:5F:D5:7D:14:04:CB:39:A3:F4:A8:7F:9A:DE:1F:5B:53:95
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2789CB3D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/T3dmX9V9FATLOaP0qH-a3h9bU5U.roa
Signing time: Sat 01 Jan 2022 16:08:15 +0000
ROA not before: Sat 01 Jan 2022 16:08:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43309
IP address blocks: 146.120.170.0/24 maxlen: 24
146.120.168.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663341885 (0x2789cb3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f77665fd57d1404cb39a3f4a87f9ade1f5b5395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:a0:a8:82:3a:9c:60:64:f7:1a:28:1a:8d:
a7:bc:c5:23:4e:73:97:9c:66:51:49:1d:02:5b:20:
c1:42:26:5e:6a:a3:9a:a3:86:75:c3:00:c8:69:e2:
b2:a0:cf:6a:2e:57:4f:c5:0d:c2:18:28:e5:b5:e6:
2b:56:83:95:88:04:1e:e8:1f:5c:87:da:76:5a:59:
56:a9:b6:ee:1d:c2:49:45:96:e9:7b:d1:a0:ab:f8:
c2:90:f5:76:92:85:ff:2d:b3:22:67:04:02:ed:19:
2a:f5:3a:39:49:a1:50:44:5c:c5:9f:81:05:7c:c5:
ff:6a:e4:96:d1:e3:46:59:8c:44:99:77:a0:91:e8:
d8:e2:ae:3b:29:69:8d:d0:3e:df:2d:5b:68:ec:82:
b6:ac:18:06:cc:29:1c:d7:13:97:69:1f:ce:a8:c8:
7c:3a:60:af:14:e1:68:ce:ed:33:39:5a:d0:c7:da:
8e:64:e4:c7:e5:64:a7:e1:7d:52:a9:62:6c:ee:de:
5e:7d:88:af:f1:a9:a3:51:fa:c7:c8:ad:b3:24:19:
9d:69:af:d9:a2:f5:60:3f:77:3d:91:c4:6e:db:31:
a4:83:8e:6f:41:4b:5e:21:49:da:d0:04:09:ff:a8:
62:74:a5:19:58:ae:90:6e:ec:c7:a0:da:83:7d:a6:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:77:66:5F:D5:7D:14:04:CB:39:A3:F4:A8:7F:9A:DE:1F:5B:53:95
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/T3dmX9V9FATLOaP0qH-a3h9bU5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.168.0-146.120.170.255
Signature Algorithm: sha256WithRSAEncryption
41:2f:f6:ac:7c:13:bf:ec:81:11:0e:eb:3a:d2:f1:eb:03:4e:
3b:ba:bb:ff:08:e9:ac:5b:d0:61:0e:9e:21:46:6a:04:d2:7b:
0a:2d:86:e8:35:89:d5:90:85:e1:9e:aa:05:2d:7a:bc:4e:45:
b7:3d:61:bb:70:72:ce:a6:fe:5f:28:ae:cd:70:15:81:c9:d8:
be:9c:51:79:2c:8a:a2:dc:4a:1a:b1:4e:2d:63:79:07:c2:05:
83:df:a9:93:5d:e3:9a:97:50:ad:8c:cb:9d:e3:9d:bc:5b:7f:
ac:fb:8c:1b:18:66:be:e9:d0:b9:ca:10:25:09:24:99:15:6a:
c2:4b:0e:64:96:a3:47:ab:e6:93:2a:64:0a:e4:e6:b3:de:81:
04:ef:9f:54:f3:db:da:b3:ab:cc:9c:62:73:6f:95:90:a8:41:
53:71:e9:13:0d:c4:a2:ff:e7:fb:b0:21:0d:8a:4d:26:10:85:
81:ec:2f:f8:a5:d0:c7:c6:61:88:16:06:9e:0d:24:62:b4:62:
6b:11:cd:67:4a:b9:f4:40:67:7b:f4:c5:58:22:3b:69:90:73:
9d:41:45:82:d8:4a:fe:e5:c6:9c:da:27:23:02:6f:53:a4:69:
a8:78:1b:64:40:3d:52:8f:8c:df:3d:82:25:1b:fd:9a:5c:72:
de:e9:28:8d
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEJ4nLPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDgxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGY3NzY2NWZkNTdk
MTQwNGNiMzlhM2Y0YTg3ZjlhZGUxZjViNTM5NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK4coKiCOpxgZPcaKBqNp7zFI05zl5xmUUkdAlsgwUImXmqj
mqOGdcMAyGnisqDPai5XT8UNwhgo5bXmK1aDlYgEHugfXIfadlpZVqm27h3CSUWW
6XvRoKv4wpD1dpKF/y2zImcEAu0ZKvU6OUmhUERcxZ+BBXzF/2rkltHjRlmMRJl3
oJHo2OKuOylpjdA+3y1baOyCtqwYBswpHNcTl2kfzqjIfDpgrxThaM7tMzla0Mfa
jmTkx+Vkp+F9UqlibO7eXn2Ir/Gpo1H6x8itsyQZnWmv2aL1YD93PZHEbtsxpIOO
b0FLXiFJ2tAECf+oYnSlGViukG7sx6Dag32mQ88CAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBRPd2Zf1X0UBMs5o/Sof5reH1tTlTAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L1QzZG1YOVY5RkFUTE9hUDBxSC1hM2g5YlU1VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQDknioAwQAkniqMA0GCSqGSIb3
DQEBCwUAA4IBAQBBL/asfBO/7IERDus60vHrA047urv/COmsW9BhDp4hRmoE0nsK
LYboNYnVkIXhnqoFLXq8TkW3PWG7cHLOpv5fKK7NcBWBydi+nFF5LIqi3EoasU4t
Y3kHwgWD36mTXeOal1CtjMud4528W3+s+4wbGGa+6dC5yhAlCSSZFWrCSw5klqNH
q+aTKmQK5Oaz3oEE759U89vas6vMnGJzb5WQqEFTcekTDcSi/+f7sCENik0mEIWB
7C/4pdDHxmGIFgaeDSRitGJrEc1nSrn0QGd79MVYIjtpkHOdQUWC2Er+5cac2icj
Am9TpGmoeBtkQD1Sj4zfPYIlG/2aXHLe6SiN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:50 2024 by rpki-client on console-ams.rpki-client.org