Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/VoeF76XZbuOZrLqovTY7KiAt_x8.roa
File: VoeF76XZbuOZrLqovTY7KiAt_x8.roa (raw, json)
Hash identifier: H3zIh35iM39v37j9w+/MIBUbCaBhAfxO/4+Hl2oLW1Q=
Subject key identifier: 56:87:85:EF:A5:D9:6E:E3:99:AC:BA:A8:BD:36:3B:2A:20:2D:FF:1F
Certificate issuer: /CN=eba85586b991cf70e0af19c03a4376e27d026f43
Certificate serial: 61C1B4
Authority key identifier: EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66hVhrmRz3DgrxnAOkN24n0Cb0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/VoeF76XZbuOZrLqovTY7KiAt_x8.roa
Signing time: Sat 01 Jan 2022 02:59:37 +0000
ROA not before: Sat 01 Jan 2022 02:59:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6406580 (0x61c1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eba85586b991cf70e0af19c03a4376e27d026f43
Validity
Not Before: Jan 1 02:59:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=568785efa5d96ee399acbaa8bd363b2a202dff1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ea:b7:d6:11:23:f1:f0:8c:69:56:04:1f:09:
4d:0b:24:8c:27:ad:14:56:2e:f1:f6:cc:b1:27:a3:
cb:02:53:12:4d:bf:f6:71:70:ee:2f:2c:10:5f:07:
b0:14:62:e7:91:89:3e:9e:a2:ce:25:53:e3:84:18:
41:53:08:20:91:60:2d:01:18:e5:92:ca:12:e5:87:
dd:54:6d:b9:b9:4c:a8:2a:c7:01:0d:ac:8e:8c:9d:
9f:00:20:30:fa:e5:5a:15:f3:02:92:4d:44:52:e8:
b7:26:1d:7d:8f:3c:c5:11:7c:c9:62:38:c7:41:b6:
fc:0e:78:a8:32:26:9e:39:e5:f2:51:3c:7d:54:d8:
78:eb:ad:7d:0b:62:f0:f7:a2:cc:8b:87:9a:06:7f:
5f:66:85:d0:e2:02:b1:df:33:09:b1:79:34:c7:98:
6e:08:f9:a8:6b:bf:12:a4:54:1b:d3:db:4e:6d:84:
21:7a:62:32:13:79:d6:8b:96:6c:1a:90:e3:75:1c:
2b:96:db:d9:3d:af:b5:a5:21:28:eb:dd:c5:dd:92:
07:0c:c7:9f:ce:a8:7f:d3:a1:f1:a3:1d:04:28:ac:
c5:eb:2e:f6:02:ac:ab:69:34:92:73:aa:68:b9:5f:
da:26:39:c0:63:18:03:ef:fa:08:27:9d:cf:15:7f:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:87:85:EF:A5:D9:6E:E3:99:AC:BA:A8:BD:36:3B:2A:20:2D:FF:1F
X509v3 Authority Key Identifier:
keyid:EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66hVhrmRz3DgrxnAOkN24n0Cb0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/VoeF76XZbuOZrLqovTY7KiAt_x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/66hVhrmRz3DgrxnAOkN24n0Cb0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.149.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:fa:c2:f8:5f:8d:d3:43:9d:6d:c0:81:97:d5:ed:fb:36:61:
db:74:6c:b0:0c:f8:a0:c6:53:74:f6:92:bf:5c:67:be:d3:01:
70:ac:ce:b7:34:20:b2:a7:f0:81:80:b6:29:17:64:b8:ba:c2:
1e:ed:61:9f:0f:f4:06:99:a3:a7:c4:7a:fa:0e:cf:4f:a9:c5:
0b:1a:ca:c3:7c:12:e1:d7:ab:9c:b6:2f:1e:83:89:ac:bf:17:
5d:cc:8e:ef:b2:12:6d:6f:1a:4a:65:28:db:79:70:27:a8:65:
4f:4d:49:ef:62:56:98:cd:90:72:7c:7e:d3:18:67:04:c0:61:
eb:4c:86:61:22:f5:5e:bc:93:c9:1e:6d:6b:e2:02:30:14:13:
7a:7e:0b:e6:79:84:58:3d:fe:75:24:62:48:3d:03:dc:dd:d0:
c6:72:79:41:3f:56:a6:90:98:28:ea:e3:ce:a7:a7:cb:55:68:
a2:52:1e:2d:66:50:19:da:2b:69:52:47:91:4c:19:86:a5:5c:
1c:57:b7:b8:c7:06:c4:07:a3:6d:03:1a:9c:be:2e:2a:6f:c0:
08:80:10:94:32:b0:5a:55:d0:8e:0e:58:0f:be:7f:38:b9:74:
1c:77:ae:cd:aa:d1:fe:91:44:d6:a6:0a:60:63:c8:ae:48:46:
8f:94:a9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:16 2023 by rpki-client on console-fra.rpki-client.org