Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/Ti0UbAJanVDlEuRRluQctmgeyWM.roa
File: Ti0UbAJanVDlEuRRluQctmgeyWM.roa (raw, json)
Hash identifier: m4XHuvSxq/7nN3GlU37xLFg0ABY5Ka6XZliUr86APe4=
Subject key identifier: 4E:2D:14:6C:02:5A:9D:50:E5:12:E4:51:96:E4:1C:B6:68:1E:C9:63
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 0A8CB264
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/Ti0UbAJanVDlEuRRluQctmgeyWM.roa
Signing time: Sat 01 Jan 2022 00:54:54 +0000
ROA not before: Sat 01 Jan 2022 00:54:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2852
IP address blocks: 146.102.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176992868 (0xa8cb264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: Jan 1 00:54:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e2d146c025a9d50e512e45196e41cb6681ec963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:84:be:68:7f:2b:64:d9:7f:4f:87:66:d0:
22:a8:f5:08:73:5b:9f:5e:61:c6:94:b4:16:68:1d:
d9:81:60:b4:e1:46:e7:76:36:95:4f:2f:c0:2e:bd:
06:ea:1f:f4:af:9f:f3:1d:52:40:62:c5:60:71:38:
58:37:5a:b6:57:ff:ef:f2:5d:63:f8:41:54:bd:54:
22:a2:47:bf:60:d0:66:6b:91:d2:67:af:c1:6a:fb:
65:3e:b7:fb:e8:83:18:4a:f6:36:d1:88:6a:72:27:
c1:cd:17:8b:8d:da:e0:ae:a2:56:3b:70:46:ff:ed:
da:79:2a:fc:8f:41:18:e7:f4:ac:ed:b0:4f:38:20:
93:75:f2:5c:06:7e:2f:ea:4c:e4:5b:71:92:e2:4f:
50:5e:65:5b:a9:72:cc:43:38:ee:8b:2d:0d:05:c5:
ef:58:a2:fb:41:f0:1f:c8:7f:aa:0d:c6:a6:28:2a:
c0:db:98:b3:53:fd:4f:71:5c:50:36:fd:ec:53:06:
a6:36:e1:d7:2b:99:a8:ad:cb:69:a2:af:cb:d5:6d:
58:cf:25:bf:e1:cc:77:26:77:9e:b7:e8:ae:c2:5f:
9e:38:6e:ca:67:03:36:89:ab:57:d3:56:67:a2:bb:
98:ea:9b:df:aa:42:7e:cc:b6:d5:1e:c2:87:92:67:
b3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2D:14:6C:02:5A:9D:50:E5:12:E4:51:96:E4:1C:B6:68:1E:C9:63
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/Ti0UbAJanVDlEuRRluQctmgeyWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:c5:26:93:77:8d:9b:30:36:30:6a:ea:e5:73:26:76:84:00:
27:61:a9:c1:ad:40:c0:01:be:2e:c1:91:ab:b2:a5:56:6f:f6:
47:73:5a:55:93:6b:18:ab:f4:f4:1f:8d:cc:72:fb:c6:77:f9:
96:95:f9:23:bb:c4:3c:2c:72:02:e3:9c:3b:82:83:c4:0e:58:
fd:87:b8:94:8b:e2:85:54:51:a3:15:4f:68:dd:72:d1:f2:6b:
7a:e6:13:86:e3:c2:69:3d:90:41:01:58:cc:36:d7:53:50:67:
10:22:f2:03:99:36:63:d9:4d:7f:26:63:cd:bb:dc:b8:e3:a3:
97:f7:dd:0f:34:3c:d1:ef:d4:0c:68:57:f4:87:b5:48:a0:2d:
e0:ba:06:ee:c5:ba:09:50:6f:a6:bb:6c:b6:f4:78:fa:f6:0d:
ff:3c:df:7c:32:df:4c:10:67:34:d4:0b:97:0b:0b:5f:55:a9:
82:c7:67:44:29:65:44:16:14:0f:b3:2b:8f:f7:ef:98:67:18:
93:0b:b6:4e:51:97:d6:cb:fa:54:ee:66:70:7a:f7:9f:9d:28:
ff:12:cc:ac:4e:d8:0a:43:b5:bf:1c:5f:91:ec:e3:5a:a8:df:
f0:19:44:eb:25:1d:4d:b5:8e:b7:e3:22:1b:a4:eb:05:2b:9b:
4d:5c:39:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:31 2024 by rpki-client on console-fra.rpki-client.org