Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3bf367-0033-4b8a-af23-2064effff6ca/1/6kxxKbjN26GhJJsI63nVEX1oguc.roa
File: 6kxxKbjN26GhJJsI63nVEX1oguc.roa (raw, json)
Hash identifier: wbOdJQ0gKNu+3tKA9dh8PwAP8dAXxFXzPYRUFy3i7Bw=
Subject key identifier: EA:4C:71:29:B8:CD:DB:A1:A1:24:9B:08:EB:79:D5:11:7D:68:82:E7
Certificate issuer: /CN=11187dc18bfa8b2a28aa49d10da6d54c08314644
Certificate serial: E4AB1A
Authority key identifier: 11:18:7D:C1:8B:FA:8B:2A:28:AA:49:D1:0D:A6:D5:4C:08:31:46:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERh9wYv6iyooqknRDabVTAgxRkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3bf367-0033-4b8a-af23-2064effff6ca/1/6kxxKbjN26GhJJsI63nVEX1oguc.roa
Signing time: Fri 04 Mar 2022 00:19:36 +0000
ROA not before: Fri 04 Mar 2022 00:19:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49612
IP address blocks: 146.19.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14986010 (0xe4ab1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11187dc18bfa8b2a28aa49d10da6d54c08314644
Validity
Not Before: Mar 4 00:19:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea4c7129b8cddba1a1249b08eb79d5117d6882e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:25:43:6d:55:b0:9f:67:95:ff:5f:51:7d:
9a:a8:e1:3b:d8:c6:c2:ba:f0:ab:03:15:c3:cb:20:
d7:94:ee:2b:b6:cc:bd:86:e0:69:a6:1c:75:32:cc:
8b:04:8d:82:0e:86:f2:9b:83:64:46:92:98:7f:47:
c4:40:29:0c:67:a2:18:6d:4b:9f:e8:8c:81:6f:3e:
bb:62:a1:f1:55:d0:22:40:1d:41:f0:63:5b:be:d0:
98:97:c1:19:3e:cc:d6:07:a7:44:3b:8c:58:b3:32:
0f:e3:b5:91:1b:b4:46:50:b6:a7:30:20:3b:de:d9:
d4:40:b6:e5:11:c5:19:69:ff:94:2b:24:5c:88:24:
e7:30:0b:b4:59:68:2f:b7:23:38:08:2c:b5:14:83:
5e:54:45:2b:62:c2:85:5b:ae:97:7f:18:5d:de:3f:
75:1c:26:40:bb:9c:c0:33:99:69:d1:75:9d:22:d0:
87:6e:30:a3:e0:96:fc:80:15:66:e6:65:17:85:74:
a1:bf:7e:c2:c7:e2:f6:83:d5:9c:ec:da:17:68:2c:
df:a0:e4:c1:49:bb:82:97:4f:5d:50:71:d9:4e:e6:
9e:a4:30:9e:5c:84:fa:5a:ee:43:41:91:d1:e4:92:
b8:3a:34:5f:8b:85:61:27:f7:cf:77:9a:ec:54:b2:
e5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4C:71:29:B8:CD:DB:A1:A1:24:9B:08:EB:79:D5:11:7D:68:82:E7
X509v3 Authority Key Identifier:
keyid:11:18:7D:C1:8B:FA:8B:2A:28:AA:49:D1:0D:A6:D5:4C:08:31:46:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERh9wYv6iyooqknRDabVTAgxRkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bf367-0033-4b8a-af23-2064effff6ca/1/6kxxKbjN26GhJJsI63nVEX1oguc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bf367-0033-4b8a-af23-2064effff6ca/1/ERh9wYv6iyooqknRDabVTAgxRkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.180.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:89:e6:77:19:20:2b:29:27:b1:a2:45:e2:2d:bf:2a:ab:0f:
35:c9:3a:c1:fc:66:62:f2:e6:96:4b:ad:2a:cf:44:f0:fe:77:
58:9f:67:85:82:30:32:02:f3:2c:e8:8c:23:9a:a9:eb:18:ac:
67:be:ca:8f:c7:9e:cf:e0:23:bf:50:e9:cb:f4:21:83:59:4d:
2d:1d:29:f3:68:ca:6c:96:0c:30:e7:70:a0:2a:80:ee:70:2e:
52:bf:4a:c8:09:2e:3d:bb:f6:c9:d3:ef:2c:9a:91:83:5e:63:
f1:21:d2:c4:d2:6d:d7:f3:a6:12:79:16:5c:4a:2e:88:b2:be:
a0:5c:06:a8:a2:93:15:b9:4d:e3:8d:ef:de:2f:17:7d:1d:7a:
32:f6:2f:6e:2b:7e:9a:7d:be:c3:7f:6c:27:f1:4c:c3:5f:bc:
6b:4f:c6:d1:18:f2:1d:9c:ee:16:ba:f7:a8:77:bd:8d:86:e1:
58:55:45:d6:7d:79:a0:ff:7a:22:67:b9:98:41:a1:84:dc:03:
6c:b1:9b:88:02:77:f7:49:b9:db:aa:88:b2:8b:08:34:69:5f:
14:c5:49:ea:d8:c3:8e:ec:ea:e0:5d:fd:8a:6a:f6:b3:70:94:
04:b5:17:e3:8c:a1:44:e8:f6:89:7d:fb:d8:c4:48:80:95:c4:
5c:25:14:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:00 2023 by rpki-client on console-fra.rpki-client.org