Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/kp19Q6Rn2ZHikgjMuvZ52lmpuW0.roa
File: kp19Q6Rn2ZHikgjMuvZ52lmpuW0.roa (raw, json)
Hash identifier: qt44cIXj3KE3v8GZKNLLY0rSG3p4PK/wxACNS7Yv+Q4=
Subject key identifier: 92:9D:7D:43:A4:67:D9:91:E2:92:08:CC:BA:F6:79:DA:59:A9:B9:6D
Certificate issuer: /CN=327519fc8684d3a9442df69619142228279a4f57
Certificate serial: 0184858EA213560F3B015D765685947BAC92
Authority key identifier: 32:75:19:FC:86:84:D3:A9:44:2D:F6:96:19:14:22:28:27:9A:4F:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnUZ_IaE06lELfaWGRQiKCeaT1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/kp19Q6Rn2ZHikgjMuvZ52lmpuW0.roa
Signing time: Thu 17 Nov 2022 12:27:07 +0000
ROA not before: Thu 17 Nov 2022 12:27:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 146.19.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:85:8e:a2:13:56:0f:3b:01:5d:76:56:85:94:7b:ac:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327519fc8684d3a9442df69619142228279a4f57
Validity
Not Before: Nov 17 12:27:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=929d7d43a467d991e29208ccbaf679da59a9b96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:70:75:b1:f2:71:26:69:e2:c3:cc:8b:b2:e7:
0a:f1:0b:ce:4e:2e:7c:7d:a7:95:44:89:ff:23:04:
90:bd:ea:93:7b:d4:5a:3b:06:2e:3a:8f:7d:f3:b4:
e5:8d:0a:da:63:69:ec:36:d3:4e:12:7d:1d:ea:0f:
f3:cf:a2:9f:d1:75:dd:90:6a:43:12:22:08:24:8f:
38:a4:60:63:49:e8:d0:1c:9d:3b:4b:65:66:07:ef:
11:dd:a8:47:9a:a3:62:c8:a7:0c:37:70:e2:05:5b:
0a:4a:0e:6e:d1:6f:0c:04:9b:25:7b:b0:1c:90:75:
0b:be:dd:96:5d:24:be:7f:dd:9d:4a:f2:60:f4:0f:
a4:b4:aa:f7:85:31:b8:65:1e:2c:24:71:37:e7:48:
96:00:c0:fa:51:75:02:45:98:4a:8c:9f:09:6f:5a:
f0:a6:4d:52:25:c3:0f:98:d8:a5:c4:c4:a4:dd:27:
1d:28:eb:ec:75:7a:63:a0:87:da:9b:1f:f3:a5:2a:
38:08:b5:16:a0:7b:9e:5a:e5:5b:e9:58:30:aa:97:
ef:44:f6:47:89:f0:f4:fc:99:b5:b6:47:13:82:37:
5a:11:e1:df:12:31:44:0e:35:23:36:9d:45:9a:59:
b5:d2:01:19:61:03:96:fe:62:4a:e1:23:87:e1:bd:
ce:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9D:7D:43:A4:67:D9:91:E2:92:08:CC:BA:F6:79:DA:59:A9:B9:6D
X509v3 Authority Key Identifier:
keyid:32:75:19:FC:86:84:D3:A9:44:2D:F6:96:19:14:22:28:27:9A:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnUZ_IaE06lELfaWGRQiKCeaT1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/kp19Q6Rn2ZHikgjMuvZ52lmpuW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/MnUZ_IaE06lELfaWGRQiKCeaT1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.93.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:9a:40:4e:38:62:ea:f6:42:36:5a:3a:a3:88:c8:8c:a0:91:
79:35:2d:c9:21:d8:46:be:ae:22:68:32:9e:a7:9b:4f:7f:d6:
c3:c7:0a:b2:86:7c:e0:91:d5:1e:c2:ac:20:6f:dd:49:50:27:
ef:2d:cc:fb:9a:9d:8f:32:41:05:6d:66:21:05:8f:0f:cd:dd:
8e:18:c7:cc:f6:dc:e5:9a:11:33:94:ff:f2:77:2b:d7:d6:cb:
65:dd:1b:8d:5f:16:b1:fc:40:40:f1:29:1e:89:77:a5:7c:4e:
4a:5e:ce:7b:43:5f:50:a5:ed:1b:b6:11:38:2e:42:3a:c8:2b:
bd:ee:d8:d4:b6:b7:2d:47:25:bc:9c:70:f7:21:79:29:97:bc:
62:1e:ea:b1:58:d3:d2:d5:0a:c9:8e:f7:45:4f:8d:25:83:fd:
f7:bb:87:4f:50:74:ff:94:e6:de:26:c4:7c:df:25:c6:75:ae:
7a:57:7f:9d:4f:74:48:35:7d:84:ea:7f:d0:d1:f4:b8:0e:49:
7e:f1:a6:e1:d4:74:df:11:ef:0e:67:20:96:78:05:e6:d5:8b:
7e:cd:e7:df:25:db:8e:51:f5:cb:b8:da:b1:7e:e6:ba:fd:c9:
8e:bf:09:bb:4e:d8:21:f4:2d:d6:48:76:b0:93:e2:dc:be:12:
ab:a9:9e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:26 2023 by rpki-client on console-fra.rpki-client.org