Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/nEYbIGg9GuFMPxF9IGAS3grRby4.roa
File: nEYbIGg9GuFMPxF9IGAS3grRby4.roa (raw, json)
Hash identifier: 7QGLvH1584dS1J86yPAUTqyScqE73FB8isUMf1uS77c=
Subject key identifier: 9C:46:1B:20:68:3D:1A:E1:4C:3F:11:7D:20:60:12:DE:0A:D1:6F:2E
Certificate issuer: /CN=eba85586b991cf70e0af19c03a4376e27d026f43
Certificate serial: F9F310
Authority key identifier: EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66hVhrmRz3DgrxnAOkN24n0Cb0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/nEYbIGg9GuFMPxF9IGAS3grRby4.roa
Signing time: Mon 07 Mar 2022 17:31:12 +0000
ROA not before: Mon 07 Mar 2022 17:31:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16380688 (0xf9f310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eba85586b991cf70e0af19c03a4376e27d026f43
Validity
Not Before: Mar 7 17:31:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c461b20683d1ae14c3f117d206012de0ad16f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:3b:11:1c:d5:f9:57:5e:af:02:14:90:76:
40:04:34:b2:6c:ef:3b:95:c6:eb:13:36:4d:60:df:
0e:4a:21:27:5e:92:75:4f:13:a1:93:ba:27:d1:8a:
b5:8c:1f:69:22:9f:95:c2:aa:be:a5:c8:3a:68:d8:
59:c2:ab:87:fa:42:7d:bb:d6:22:c9:54:75:60:f6:
61:fb:36:92:9a:73:40:72:2b:ea:02:81:6e:9d:b8:
65:a9:85:c9:81:24:5c:bb:56:dd:86:96:f8:00:69:
e1:50:48:32:11:dd:95:c5:50:6a:88:a4:c7:0f:04:
5c:a4:c1:79:0a:d5:1d:4c:03:43:ac:71:7f:ba:19:
b5:fd:d5:41:4a:d6:92:61:22:48:fd:5f:47:ab:64:
0a:d5:41:09:0c:92:1d:86:cb:c8:fa:3a:b5:95:2e:
8c:36:21:62:f2:ab:45:c6:bf:ee:10:99:17:1e:7c:
bd:f1:ba:47:7f:a1:b8:66:b0:ad:8d:e0:a9:d0:09:
9f:3e:6e:e7:63:88:ee:9e:c9:c6:7f:92:b9:9f:6d:
df:5d:cd:5f:d0:76:c8:01:bb:0b:04:e7:91:76:c0:
7b:65:4b:b9:02:65:6b:c4:43:3a:34:d0:9f:bd:45:
f8:66:a1:56:0d:25:52:e2:9e:b7:9a:f4:10:27:a7:
cf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:46:1B:20:68:3D:1A:E1:4C:3F:11:7D:20:60:12:DE:0A:D1:6F:2E
X509v3 Authority Key Identifier:
keyid:EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66hVhrmRz3DgrxnAOkN24n0Cb0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/nEYbIGg9GuFMPxF9IGAS3grRby4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/66hVhrmRz3DgrxnAOkN24n0Cb0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.149.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:2b:ef:f1:01:b6:a4:59:b7:b3:77:49:be:88:5d:ce:31:76:
25:53:83:d7:0b:91:80:ae:12:53:33:f9:22:7c:ac:36:f5:a3:
9a:7d:d5:9f:45:66:0e:2f:7b:38:fe:ad:49:6c:b1:cf:0b:ec:
2f:af:38:65:95:f1:4f:e5:26:2b:5f:4b:2d:52:9a:65:79:3b:
76:60:dd:04:11:f4:1b:26:5a:bb:9a:73:ad:9c:f4:ee:dc:81:
3f:a1:4d:ec:fa:69:a3:79:64:df:8b:dd:f7:10:81:0a:40:88:
8f:a8:4d:0e:1c:4e:08:d3:ed:19:96:1f:3c:b8:8c:85:26:d1:
52:ac:ca:69:f1:f8:ee:87:c0:5c:65:0e:eb:38:06:db:08:11:
a4:39:2a:59:43:8c:da:9e:97:17:e2:93:93:c6:a1:d5:fe:eb:
04:52:82:88:a9:87:85:4c:02:46:61:38:82:3d:70:50:99:ed:
2f:9c:ba:34:fe:ba:b1:bc:cb:51:29:92:d0:7e:3e:f5:23:0e:
3c:d4:d1:b5:3a:24:9e:20:2c:44:dc:f6:fa:13:3b:14:3f:9b:
b2:d0:b9:39:a9:76:15:18:34:3d:b0:de:1e:1d:e6:b9:d3:c7:
5a:1d:36:54:3f:7d:83:92:c9:51:ca:bc:4d:15:44:05:dd:6c:
58:a6:68:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:53 2023 by rpki-client on console-ams.rpki-client.org