Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/b9TVhBX_rG2DJ1PhCUiihGbAdow.roa
File: b9TVhBX_rG2DJ1PhCUiihGbAdow.roa (raw, json)
Hash identifier: aRKnOo+P5h5kQtqaZYwC7q/OWJsTU/gigqTfoqmad1U=
Subject key identifier: 6F:D4:D5:84:15:FF:AC:6D:83:27:53:E1:09:48:A2:84:66:C0:76:8C
Certificate issuer: /CN=25c85962a1c268cea9fe329e4f4e2e4454d2c08c
Certificate serial: 0116C37E
Authority key identifier: 25:C8:59:62:A1:C2:68:CE:A9:FE:32:9E:4F:4E:2E:44:54:D2:C0:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JchZYqHCaM6p_jKeT04uRFTSwIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/b9TVhBX_rG2DJ1PhCUiihGbAdow.roa
Signing time: Mon 07 Mar 2022 17:38:54 +0000
ROA not before: Mon 07 Mar 2022 17:38:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59253
IP address blocks: 146.19.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18269054 (0x116c37e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c85962a1c268cea9fe329e4f4e2e4454d2c08c
Validity
Not Before: Mar 7 17:38:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fd4d58415ffac6d832753e10948a28466c0768c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:c0:2c:16:d4:7b:65:8c:c7:a8:30:be:b0:
27:a1:bd:cf:3c:67:8d:36:ef:81:96:55:15:e4:d9:
2d:f9:27:a1:fb:b1:04:a1:dc:68:c6:39:c6:aa:1a:
43:62:b3:af:46:d4:47:22:80:cd:fd:df:95:cd:7e:
43:26:cd:3e:f4:d6:9c:c5:c3:c5:fc:d2:f9:a8:08:
1b:a8:b4:94:6f:b3:23:64:cc:8d:4b:f1:c4:e7:ab:
e5:f9:84:92:d3:e1:b3:ef:13:bb:20:2a:85:a1:6e:
ed:da:e1:e4:d6:72:90:c4:19:9e:6e:a9:b6:a1:a9:
ca:49:73:b9:62:e7:ba:65:55:7d:66:cd:9c:75:71:
f7:19:98:0d:0e:53:53:b6:7a:77:a1:02:2a:d2:a4:
b1:94:ee:d4:3b:2a:93:fc:f6:37:2b:24:12:69:95:
64:8c:09:ec:c2:9a:fa:b8:c9:2e:73:14:b4:37:2f:
88:47:b6:61:27:12:d2:11:3a:c8:bd:23:c1:b5:9e:
0e:27:22:63:91:a9:e2:de:cb:c2:1b:53:0f:9b:93:
b6:d5:45:45:ac:d2:58:f1:01:58:89:2d:e0:7c:21:
23:b3:3f:e9:75:18:17:7a:25:d9:bb:ed:7c:81:cf:
e3:d4:75:15:e0:a9:7c:49:c6:9a:01:0f:84:23:1b:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D4:D5:84:15:FF:AC:6D:83:27:53:E1:09:48:A2:84:66:C0:76:8C
X509v3 Authority Key Identifier:
keyid:25:C8:59:62:A1:C2:68:CE:A9:FE:32:9E:4F:4E:2E:44:54:D2:C0:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JchZYqHCaM6p_jKeT04uRFTSwIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/b9TVhBX_rG2DJ1PhCUiihGbAdow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/JchZYqHCaM6p_jKeT04uRFTSwIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.41.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c4:46:da:68:49:8d:f6:4c:32:ea:39:13:4e:95:e2:23:d0:
1d:20:56:24:19:14:9a:0d:d3:70:37:11:18:a4:3f:68:b1:5c:
a2:95:0d:ce:b5:13:6f:3b:df:13:e4:e3:4d:26:04:8b:72:97:
62:d2:e0:17:1f:cc:28:5e:af:06:3a:20:21:e4:1c:b0:3a:fe:
24:46:6c:5e:7c:54:11:a7:26:f9:3f:69:0f:06:4e:7e:a5:f6:
6b:6a:55:65:c4:56:51:bf:03:bd:0c:7f:e9:98:46:b4:37:9e:
ca:e3:82:00:d7:1d:bc:96:b6:7b:db:83:c7:60:f4:8d:48:56:
12:88:c1:7b:06:4c:70:dd:89:e9:2b:e2:0e:b6:1d:c8:2e:d4:
e6:cd:98:4c:fb:f2:ed:df:3f:62:7e:6b:98:d5:8c:a7:7b:6b:
7b:ac:58:dd:8b:b6:a7:83:c3:8c:0a:e5:f8:e1:38:0f:af:3c:
90:5d:f0:9d:40:95:ec:ad:55:78:fb:d0:4b:70:0a:1e:02:54:
d1:60:b5:f6:9b:fc:09:72:b6:ca:a0:96:08:88:cf:55:ac:51:
84:1f:cb:7b:e0:20:fe:2c:d6:b7:09:13:62:a9:65:82:fd:c6:
c9:7f:3a:31:61:53:67:c1:be:8d:26:04:68:36:59:e9:1f:d8:
6d:e7:18:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:13 2023 by rpki-client on console-ams.rpki-client.org