Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/oA-seWv3KYcq952Z3xpycpWphK0.roa
File: oA-seWv3KYcq952Z3xpycpWphK0.roa (raw, json)
Hash identifier: L/YIwyfS43cn3k5q9ApCHHVeEO1P/1Igchv7RSrBnY0=
Subject key identifier: A0:0F:AC:79:6B:F7:29:87:2A:F7:9D:99:DF:1A:72:72:95:A9:84:AD
Certificate issuer: /CN=8b10ac33e2036d2ab633417170fd546a86deb142
Certificate serial: 60FE2E
Authority key identifier: 8B:10:AC:33:E2:03:6D:2A:B6:33:41:71:70:FD:54:6A:86:DE:B1:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixCsM-IDbSq2M0FxcP1UaobesUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/oA-seWv3KYcq952Z3xpycpWphK0.roa
Signing time: Sat 01 Jan 2022 01:53:19 +0000
ROA not before: Sat 01 Jan 2022 01:53:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6356526 (0x60fe2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b10ac33e2036d2ab633417170fd546a86deb142
Validity
Not Before: Jan 1 01:53:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a00fac796bf729872af79d99df1a727295a984ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:be:12:be:76:10:ff:1b:27:8b:92:a3:02:
3f:f8:6f:ba:ec:c4:6d:05:c4:6b:e9:f3:ca:9b:ab:
17:09:98:ce:db:3f:91:eb:1f:e7:79:fe:57:4c:1e:
1c:81:58:42:f6:e7:8c:82:c1:a4:c2:0a:04:fb:c3:
e3:ab:5d:91:56:e8:26:a1:e8:f4:15:21:c4:02:2e:
ed:71:79:73:23:5d:49:3d:fe:b6:6a:95:8a:86:3d:
16:6c:9e:4e:37:8b:32:59:82:b6:9d:a2:2d:18:ad:
3f:67:b0:40:66:ff:a0:d1:e9:77:c5:fc:1e:c9:f7:
cd:9a:fe:f0:6b:45:bd:08:26:b0:a3:ff:f7:b3:4b:
9c:a9:a9:d4:55:df:81:bb:b2:ca:2d:b6:3d:d6:ec:
d6:1a:88:5b:ab:46:d8:07:d7:39:f0:7c:95:2d:d7:
89:c8:2c:0b:92:f9:65:a2:3a:8c:b5:e2:ec:ea:11:
f1:b9:53:99:72:cc:7d:5e:90:a3:87:34:b4:82:53:
79:5e:a3:d1:05:26:13:ed:e5:40:25:2f:bd:96:ac:
65:0d:7d:0e:ed:af:15:b1:a3:de:5f:89:e4:b3:62:
54:57:78:32:56:47:bb:1a:2b:1d:09:fe:f3:99:33:
ff:45:32:9a:1b:8f:16:3f:05:d5:66:fd:6f:c4:b2:
8f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0F:AC:79:6B:F7:29:87:2A:F7:9D:99:DF:1A:72:72:95:A9:84:AD
X509v3 Authority Key Identifier:
keyid:8B:10:AC:33:E2:03:6D:2A:B6:33:41:71:70:FD:54:6A:86:DE:B1:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixCsM-IDbSq2M0FxcP1UaobesUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/oA-seWv3KYcq952Z3xpycpWphK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/87c662-4a22-4b35-867d-a178366761a9/1/ixCsM-IDbSq2M0FxcP1UaobesUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.182.0/24
Signature Algorithm: sha256WithRSAEncryption
02:9b:00:09:c0:c3:81:a1:78:56:38:8f:35:8e:7f:a2:e0:3a:
04:c7:3c:ee:81:a7:d7:fb:4f:93:52:c0:4c:a2:73:fa:06:b0:
7b:25:e3:f6:d9:9d:98:99:3d:b8:66:00:1a:e6:84:0e:a7:5a:
22:0b:1e:16:8d:bf:79:0c:4c:2d:6c:bf:ea:0e:f1:e3:86:a7:
66:c5:7a:bb:c0:ad:71:5f:c2:05:f9:d3:39:98:5e:69:fe:fe:
7c:9d:08:c8:db:4e:bb:22:f5:15:4e:ad:32:72:2b:6e:de:e7:
19:a5:4b:08:73:8b:af:9f:97:89:75:6e:cf:04:bc:7f:0e:06:
c1:f4:85:15:00:e7:e9:6d:27:96:3a:c3:37:2b:10:db:5c:79:
6e:09:ba:99:1f:bf:1f:a2:df:5f:53:88:06:c2:5a:ef:f5:c1:
e5:df:f5:fb:3a:17:a5:4e:4a:24:ce:22:0a:c5:21:a4:c7:e2:
39:e7:71:13:c8:9c:52:8c:04:c3:1b:1a:27:54:97:78:56:25:
d5:de:74:4e:76:58:fb:fd:4d:0d:42:62:39:c1:df:df:6c:ef:
32:68:98:86:ad:2d:89:50:a6:d1:a4:53:e7:4d:2e:2a:d5:5f:
bb:ba:e7:4d:19:46:2f:4a:e4:8e:45:6f:b4:a3:3d:a1:18:73:
de:83:ea:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:26 2023 by rpki-client on console-fra.rpki-client.org