Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/onqymknDiG_JFYijJ4ErvDAkrB4.roa
File: onqymknDiG_JFYijJ4ErvDAkrB4.roa (raw, json)
Hash identifier: ETj+cv03aYPNXJCAYj80u3nguW0Lhlebhl6BwTVpNfM=
Subject key identifier: A2:7A:B2:9A:49:C3:88:6F:C9:15:88:A3:27:81:2B:BC:30:24:AC:1E
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018332F439D27993DC86220E446841A886D4
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/onqymknDiG_JFYijJ4ErvDAkrB4.roa
Signing time: Mon 12 Sep 2022 18:26:49 +0000
ROA not before: Mon 12 Sep 2022 18:26:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 185.173.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:32:f4:39:d2:79:93:dc:86:22:0e:44:68:41:a8:86:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Sep 12 18:26:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a27ab29a49c3886fc91588a327812bbc3024ac1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:07:d4:3c:41:44:51:8f:c7:2d:5f:65:7f:1f:
76:a5:17:ee:04:10:51:ad:42:a4:c7:ee:ae:d8:3e:
f5:40:f3:d7:27:c5:2f:9d:73:30:cf:d1:b2:df:7c:
d9:ae:ab:1d:2a:5f:53:a9:7e:bf:be:c3:b9:31:9e:
00:03:25:0e:4f:d8:4f:be:50:cd:8a:0e:66:15:c6:
d5:ab:4c:f8:2c:85:27:46:bd:5a:14:a8:74:a5:95:
b7:e0:75:3f:90:82:83:e6:c0:8c:2e:1e:c5:40:0f:
71:60:99:71:ec:8f:ba:7f:0a:5c:c4:b1:1c:98:3f:
dd:6d:58:50:a6:dd:6a:32:d0:46:8e:0f:97:0a:09:
f0:29:12:b6:0b:08:ab:06:e4:51:bb:7a:2f:2b:31:
d5:2a:06:97:db:b5:93:ef:f2:6f:55:d6:35:9e:0d:
94:85:3d:32:1e:6a:c7:e6:33:21:85:04:68:04:5a:
a0:0c:4c:c7:a8:8c:58:13:21:46:6c:2c:e6:8d:9d:
4f:2d:3c:c6:ae:e0:0a:30:c7:ce:32:45:c8:df:94:
7d:a3:47:07:19:eb:78:d4:b5:c9:8b:23:23:66:a0:
66:68:68:a0:b2:d8:7c:2b:2e:a7:64:9c:e3:37:fe:
05:6d:4e:10:7e:ee:97:3b:7d:9e:c4:96:99:a5:38:
6d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7A:B2:9A:49:C3:88:6F:C9:15:88:A3:27:81:2B:BC:30:24:AC:1E
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/onqymknDiG_JFYijJ4ErvDAkrB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.146.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9b:55:fe:17:04:03:1a:f1:22:d8:e1:27:9a:bb:b5:39:44:
13:15:25:bf:38:d0:24:63:7a:b6:43:b6:b8:c6:e1:b8:72:72:
7c:a7:81:0e:a0:fd:08:4b:2a:2e:c2:83:ac:c3:e3:eb:a8:b1:
3f:94:d3:24:5b:47:bc:1d:d2:cd:91:21:4b:a2:32:29:12:bd:
a2:01:ce:b0:22:75:e1:ac:3d:d7:b7:d6:55:54:4f:57:e0:91:
f1:49:90:b0:c8:bb:fd:5b:9d:73:a6:db:48:55:a2:ab:ce:25:
83:e6:f0:99:ef:d0:f2:37:b8:b2:83:7d:10:42:b2:d8:29:1c:
bb:c1:37:b3:cc:85:60:34:0c:a1:89:d3:68:f4:6f:01:08:bc:
5d:7c:7f:06:c3:69:1d:aa:79:9e:b5:ba:9e:f3:de:3e:38:15:
55:3d:02:c5:ca:9d:12:7e:c7:99:6a:b0:ce:54:0c:05:59:be:
21:41:59:2a:5f:d8:ac:f6:a4:91:c6:f6:a0:44:ff:40:ad:d2:
92:fb:7a:18:c1:f5:a9:3b:04:2c:56:7a:b3:9d:48:fd:72:94:
da:41:03:a4:f2:8d:01:d9:15:b7:90:70:2c:43:6b:29:f6:b9:
0a:18:ef:af:9f:42:1a:75:0f:6e:ca:69:46:d4:30:64:02:a9:
02:77:a8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:34 2023 by rpki-client on console-ams.rpki-client.org