Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ef9b1a-a1e4-47cb-ac99-b6d4304b4369/1/RrBYUDAS9y4t8T3HGtM1lKgtCqw.roa
File: RrBYUDAS9y4t8T3HGtM1lKgtCqw.roa (raw, json)
Hash identifier: dhEpsvxMAXaY5A+OT9C3kUEB2t4DiOsVtQUeYGD+WOk=
Subject key identifier: 46:B0:58:50:30:12:F7:2E:2D:F1:3D:C7:1A:D3:35:94:A8:2D:0A:AC
Certificate issuer: /CN=367b114fac6bc5de335b0ecf460ef8beba3a5049
Certificate serial: 56F3AC
Authority key identifier: 36:7B:11:4F:AC:6B:C5:DE:33:5B:0E:CF:46:0E:F8:BE:BA:3A:50:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnsRT6xrxd4zWw7PRg74vro6UEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ef9b1a-a1e4-47cb-ac99-b6d4304b4369/1/RrBYUDAS9y4t8T3HGtM1lKgtCqw.roa
Signing time: Fri 25 Feb 2022 08:12:46 +0000
ROA not before: Fri 25 Feb 2022 08:12:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211611
IP address blocks: 146.19.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5698476 (0x56f3ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367b114fac6bc5de335b0ecf460ef8beba3a5049
Validity
Not Before: Feb 25 08:12:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46b058503012f72e2df13dc71ad33594a82d0aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:b7:cc:ad:6d:f6:4e:be:76:5c:31:cf:3c:
1f:cd:20:2f:a3:b9:f9:ac:60:72:7a:37:4f:e9:18:
0a:32:23:c1:0e:49:9f:c1:18:ea:4e:dd:71:71:a2:
be:b5:85:dc:56:16:0c:6c:32:8e:6e:f8:0e:8b:84:
8e:e5:66:bc:b2:30:c5:57:f9:1c:b9:a0:b4:e8:8f:
03:93:5b:7c:29:7d:16:65:54:c1:d4:7b:c8:45:f3:
3f:4e:b2:af:04:88:cd:c4:29:04:77:cf:4c:5d:36:
0a:c7:19:b4:1d:1a:7b:65:16:69:df:bf:b2:98:f2:
85:ff:f7:ad:59:f3:86:74:38:a1:ce:33:bb:4c:26:
da:97:8b:d2:af:92:6e:e2:ea:63:0b:99:e0:3c:dc:
59:72:79:4f:be:3b:68:62:a9:29:22:9c:92:b3:06:
a3:10:19:89:16:65:b6:e0:74:69:ed:f4:ea:d8:39:
14:df:57:3a:22:cd:a8:41:af:ac:c1:8f:cb:59:0d:
e4:59:b0:90:4b:65:29:39:4e:0c:b0:8a:1f:2d:4f:
20:37:ee:b6:d0:a0:12:93:e0:af:c2:7e:28:0e:f4:
f4:20:6c:b9:ec:47:c8:c7:9b:25:30:08:53:1e:40:
66:e4:88:e0:d5:42:22:7b:45:5e:f2:85:c7:39:a7:
d1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B0:58:50:30:12:F7:2E:2D:F1:3D:C7:1A:D3:35:94:A8:2D:0A:AC
X509v3 Authority Key Identifier:
keyid:36:7B:11:4F:AC:6B:C5:DE:33:5B:0E:CF:46:0E:F8:BE:BA:3A:50:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnsRT6xrxd4zWw7PRg74vro6UEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ef9b1a-a1e4-47cb-ac99-b6d4304b4369/1/RrBYUDAS9y4t8T3HGtM1lKgtCqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ef9b1a-a1e4-47cb-ac99-b6d4304b4369/1/NnsRT6xrxd4zWw7PRg74vro6UEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.133.0/24
Signature Algorithm: sha256WithRSAEncryption
54:41:23:45:0c:4c:fd:4a:3b:3b:2b:e7:14:db:1e:84:43:9c:
e6:19:aa:4c:a2:d2:1b:d2:41:a9:19:c1:e7:c9:f7:57:40:2d:
98:51:13:68:19:82:42:1e:88:e0:80:06:43:65:7d:ba:5d:25:
74:1d:e7:72:46:d3:d5:6d:d6:9e:e6:42:22:67:7a:7a:dd:39:
b4:66:6b:00:3e:f2:13:27:23:2a:36:23:31:a9:a8:b6:db:ca:
23:66:12:1d:49:7f:6f:15:ae:ef:b1:de:6c:62:cc:2f:5c:81:
48:95:40:12:99:1c:17:80:d0:cf:94:da:03:5b:1d:00:88:f2:
c0:68:f4:cb:c6:31:a5:cb:98:e1:46:8b:51:ec:5f:48:27:d7:
c1:da:f6:38:1b:50:71:18:98:c0:1a:8d:f6:bd:05:ca:4c:b9:
5e:58:e5:b8:bc:c5:f0:04:c3:7f:02:7a:f6:57:41:39:2b:49:
93:10:d2:94:da:9b:b2:3f:b8:e9:b9:58:6f:4b:7c:3c:b9:11:
8f:17:d0:e6:dc:a2:01:ed:40:0a:9d:05:24:11:68:37:2d:a4:
4f:b4:98:a1:49:fb:bb:7e:d0:d0:83:cc:3f:db:76:e4:24:b1:
b9:88:99:bc:b2:25:ab:07:3e:53:14:c3:49:24:e4:f6:eb:63:
5c:74:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:20 2023 by rpki-client on console-ams.rpki-client.org