Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/87d247-b05a-4d60-8ba7-9f4509c2ddc5/1/z6Rw9OenLMpiUn4wnU88Omht0NU.roa
File: z6Rw9OenLMpiUn4wnU88Omht0NU.roa (raw, json)
Hash identifier: Pnc7JVQVwROVqSxxGhsQWnOIAi0MPkvhY0EKXmJmaC8=
Subject key identifier: CF:A4:70:F4:E7:A7:2C:CA:62:52:7E:30:9D:4F:3C:3A:68:6D:D0:D5
Certificate issuer: /CN=f07d10e2f67bd207ef5e57d0531446ba74ca1b35
Certificate serial: 01931A66
Authority key identifier: F0:7D:10:E2:F6:7B:D2:07:EF:5E:57:D0:53:14:46:BA:74:CA:1B:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8H0Q4vZ70gfvXlfQUxRGunTKGzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/87d247-b05a-4d60-8ba7-9f4509c2ddc5/1/z6Rw9OenLMpiUn4wnU88Omht0NU.roa
Signing time: Wed 11 May 2022 21:55:03 +0000
ROA not before: Wed 11 May 2022 21:55:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 146.19.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26417766 (0x1931a66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f07d10e2f67bd207ef5e57d0531446ba74ca1b35
Validity
Not Before: May 11 21:55:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfa470f4e7a72cca62527e309d4f3c3a686dd0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c6:5c:e2:e0:03:1f:b7:17:b9:42:9b:28:cb:
e3:62:10:0f:b8:98:07:3a:60:43:f1:46:9e:38:eb:
71:db:b8:b1:0f:47:df:bc:16:9b:40:2b:3d:63:0d:
b0:7d:93:f6:c6:c8:be:e8:d4:cd:71:a1:e8:72:6c:
41:5f:ae:af:ba:a6:d3:a5:85:a2:e9:0a:ef:db:1d:
cc:62:8f:f7:93:97:1a:a4:63:a0:82:df:e2:eb:48:
8a:a6:69:e0:0c:43:e5:22:ef:05:8d:b2:01:5f:54:
9b:1c:04:5a:61:9a:4d:12:80:14:7e:fe:db:d7:c1:
c1:40:08:f9:3a:8f:3f:67:6f:09:b2:af:12:79:7f:
37:c3:3d:d2:4f:f2:8e:08:78:ab:98:ed:2c:1a:81:
64:96:4b:34:4f:de:1d:6e:3d:77:df:da:f6:09:5f:
6a:3a:a2:80:33:7d:51:22:d5:71:8d:e8:60:a2:c5:
1a:12:0d:ad:8e:37:e0:e2:4f:c9:65:dd:65:53:e9:
09:33:9b:0c:3d:50:55:80:0f:3c:2b:f5:b0:88:be:
87:dd:91:b1:0d:80:c2:25:22:ed:a2:dc:1e:59:68:
2c:59:df:cf:6d:5d:ea:90:22:05:f1:64:e8:48:0b:
c4:7d:f8:8e:bf:24:a9:44:ec:24:af:fa:46:b8:1b:
d6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A4:70:F4:E7:A7:2C:CA:62:52:7E:30:9D:4F:3C:3A:68:6D:D0:D5
X509v3 Authority Key Identifier:
keyid:F0:7D:10:E2:F6:7B:D2:07:EF:5E:57:D0:53:14:46:BA:74:CA:1B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8H0Q4vZ70gfvXlfQUxRGunTKGzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/87d247-b05a-4d60-8ba7-9f4509c2ddc5/1/z6Rw9OenLMpiUn4wnU88Omht0NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/87d247-b05a-4d60-8ba7-9f4509c2ddc5/1/8H0Q4vZ70gfvXlfQUxRGunTKGzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.194.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:f2:25:c9:a0:ea:b0:b4:76:b7:18:0f:64:a5:bd:ba:d9:64:
6e:6a:d1:5e:f9:8e:b1:92:b8:50:e0:9c:82:32:1f:d8:fb:19:
96:de:63:30:50:c8:ea:3e:05:f2:25:91:9a:aa:ff:ce:78:4c:
af:62:5f:a6:8a:b2:80:12:34:3a:d9:6d:21:45:4d:87:09:97:
70:de:3b:f2:13:23:46:a3:6d:e9:a1:49:23:92:c2:d4:ff:40:
54:95:c0:21:b0:a4:96:6e:44:9f:41:8c:09:fc:24:4d:1e:2e:
2b:bb:10:86:dd:ce:95:ef:ab:2c:26:0a:98:21:c1:d3:8b:d9:
9e:0f:b7:0e:a2:45:34:6c:9f:1c:c3:11:61:f7:6e:89:d9:93:
f3:44:9d:1f:6c:11:cd:68:dd:71:35:96:60:59:84:9b:d6:69:
c5:f4:40:0c:92:e6:d3:c7:bf:08:93:1b:01:10:1e:51:31:d5:
78:a6:f7:f4:e2:65:76:36:cf:ef:b3:ae:19:f1:b4:49:8c:bb:
50:e8:46:a2:3b:b9:4e:1c:b3:71:f1:fe:3f:68:55:bb:e3:a6:
33:51:ce:d1:17:3a:b9:6c:6c:d9:8c:18:99:e1:9d:de:57:55:
52:22:bb:63:d5:4b:47:1e:93:81:26:8d:61:d6:8e:6a:1d:57:
2f:8c:f0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:17 2023 by rpki-client on console-ams.rpki-client.org