Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d354b5-9031-45ef-8b4f-02d1f71208d0/1/pnGYb1xh7oI-1o1ImLeHBivjTtc.roa
File: pnGYb1xh7oI-1o1ImLeHBivjTtc.roa (raw, json)
Hash identifier: wV1wIlVEtjKasSgmD41BtASwIJ/s43AzT6l3YssJ5yw=
Subject key identifier: A6:71:98:6F:5C:61:EE:82:3E:D6:8D:48:98:B7:87:06:2B:E3:4E:D7
Certificate issuer: /CN=f5f6a2ccd3b2e51d19cf38fc141ec9425d77cf2a
Certificate serial: 023ECC
Authority key identifier: F5:F6:A2:CC:D3:B2:E5:1D:19:CF:38:FC:14:1E:C9:42:5D:77:CF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9faizNOy5R0Zzzj8FB7JQl13zyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d354b5-9031-45ef-8b4f-02d1f71208d0/1/pnGYb1xh7oI-1o1ImLeHBivjTtc.roa
Signing time: Wed 02 Feb 2022 06:29:10 +0000
ROA not before: Wed 02 Feb 2022 06:29:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 146.19.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147148 (0x23ecc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f6a2ccd3b2e51d19cf38fc141ec9425d77cf2a
Validity
Not Before: Feb 2 06:29:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a671986f5c61ee823ed68d4898b787062be34ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:76:03:b2:57:e9:d4:63:34:8d:68:75:29:cd:
05:ed:f5:3c:93:cc:e2:69:6e:d0:c0:35:53:8c:42:
4c:99:66:3b:bb:0e:08:0c:d9:b5:2e:a4:cd:73:67:
0f:b3:d5:e9:6e:b9:0b:a7:7f:c8:53:ae:93:38:16:
2f:33:0b:74:28:19:03:49:34:1a:4f:f8:bb:ca:d2:
06:0a:cd:63:e1:f3:e6:d9:98:15:ab:ba:01:41:43:
d5:8f:26:91:52:e3:ec:43:0b:cb:89:10:b6:3e:b9:
88:03:e8:00:33:37:96:6d:6f:f7:f8:3b:16:ed:fd:
81:84:26:5b:75:7e:be:67:ce:40:83:85:0c:0a:2e:
b8:e5:f2:af:06:e6:32:f4:26:34:df:36:dd:42:03:
bb:8b:de:32:78:2c:c3:a5:b4:70:38:e3:97:9b:82:
4c:73:76:c9:dd:2a:bb:d1:23:6a:01:58:f0:72:7a:
35:39:82:85:31:96:90:dc:8a:fd:c4:c8:d4:b4:76:
4a:71:11:1f:d1:34:b7:0d:d4:60:6d:42:67:1e:19:
97:9d:d5:91:0c:e7:3b:18:00:c2:17:9b:12:5f:39:
f9:2f:ba:36:68:e9:ab:c2:44:f5:1d:dc:4e:ad:27:
57:f4:c6:81:72:84:ce:52:42:22:05:0d:54:2c:6a:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:71:98:6F:5C:61:EE:82:3E:D6:8D:48:98:B7:87:06:2B:E3:4E:D7
X509v3 Authority Key Identifier:
keyid:F5:F6:A2:CC:D3:B2:E5:1D:19:CF:38:FC:14:1E:C9:42:5D:77:CF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9faizNOy5R0Zzzj8FB7JQl13zyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d354b5-9031-45ef-8b4f-02d1f71208d0/1/pnGYb1xh7oI-1o1ImLeHBivjTtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d354b5-9031-45ef-8b4f-02d1f71208d0/1/9faizNOy5R0Zzzj8FB7JQl13zyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.39.0/24
Signature Algorithm: sha256WithRSAEncryption
06:17:ad:f4:bd:4b:7a:5b:b3:3a:38:8a:39:bb:dc:7d:e4:36:
7a:ec:2b:6a:f6:60:94:1c:a0:ec:0f:15:cf:54:19:90:09:d8:
22:72:bb:e6:b5:db:7b:9f:1d:b4:f1:78:bd:75:94:58:4f:98:
b1:9d:b1:85:bd:11:02:ba:74:ea:cc:9a:88:86:22:2d:a4:32:
d9:ca:d9:2c:b6:c3:a8:0b:c9:7a:65:78:d2:4a:ff:c9:fc:0c:
ea:f4:8c:33:0e:38:40:c6:d6:e2:b7:13:05:00:7b:70:4e:f0:
86:48:88:3d:9d:9e:9b:a4:43:e4:21:6b:7c:f2:1d:31:5a:fa:
f9:0a:31:97:18:86:a5:c0:d1:20:d5:fc:6c:8b:38:1b:e9:11:
87:72:bd:36:43:2a:7a:b9:2c:83:bb:93:2f:d3:4f:77:50:90:
be:01:1c:b2:99:8b:f3:3d:9a:ea:ee:19:5f:0a:2f:5d:b8:9c:
91:80:fe:f0:52:51:55:f2:d6:7a:38:86:39:2a:dc:b0:18:80:
b8:19:d3:33:23:5d:5a:8b:76:d5:d3:16:74:9e:d8:ba:79:1e:
be:0e:80:b4:6e:ff:f1:86:74:bf:80:b9:7a:9a:b0:8e:6a:fb:
d5:54:d5:ee:25:19:52:48:52:db:31:fb:d6:56:c7:61:eb:26:
40:81:93:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:49 2023 by rpki-client on console-ams.rpki-client.org