Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/ICpLx7GF5PdWk4MEOHTFpLLDxtU.roa
File: ICpLx7GF5PdWk4MEOHTFpLLDxtU.roa (raw, json)
Hash identifier: n7azLj9nhHRkQxitv5pScZFu3b6Iwf+mPt15kKJWl0c=
Subject key identifier: 20:2A:4B:C7:B1:85:E4:F7:56:93:83:04:38:74:C5:A4:B2:C3:C6:D5
Certificate issuer: /CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Certificate serial: 02455E
Authority key identifier: 3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/ICpLx7GF5PdWk4MEOHTFpLLDxtU.roa
Signing time: Wed 19 Jan 2022 17:07:18 +0000
ROA not before: Wed 19 Jan 2022 17:07:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20253
IP address blocks: 146.19.181.0/24 maxlen: 24
2a12:45c7:ffff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148830 (0x2455e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Validity
Not Before: Jan 19 17:07:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=202a4bc7b185e4f7569383043874c5a4b2c3c6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:2f:e6:71:44:4d:13:b4:ff:aa:b4:15:e4:
20:5a:bc:ec:d7:e2:14:56:37:df:a9:bc:58:40:26:
84:4c:b1:a3:d6:12:bd:de:62:6d:83:e6:76:74:e4:
01:16:e1:7c:90:b6:b0:86:d8:05:a6:79:27:3e:af:
80:aa:1f:5d:de:c5:9b:40:a5:d0:0e:af:c5:43:2f:
0c:68:b7:17:03:53:95:8e:40:d4:eb:1d:3e:aa:76:
bd:cf:db:d8:15:0c:aa:af:a3:1f:0a:5d:1e:c3:36:
08:33:23:bf:22:51:03:08:8f:2b:13:d3:2a:1b:7d:
ec:8b:79:f1:87:e2:57:2c:25:7c:18:11:74:57:4f:
22:6a:e4:73:2c:1e:63:51:23:b4:05:b2:3c:0e:25:
20:2d:27:d6:e6:1b:b9:83:a1:d2:95:8f:bc:a5:62:
f8:7a:11:0a:67:8b:b7:8d:5f:39:f0:4b:8e:b5:e3:
99:24:51:2f:70:7a:74:8a:25:9e:36:36:5b:da:a5:
d9:c2:48:68:b5:ed:e2:dc:49:ae:a3:40:28:9f:30:
f1:01:04:9f:c3:79:58:e3:c1:26:7f:a5:16:74:67:
09:e0:da:3e:d7:6a:ab:1b:ef:b3:5e:95:34:38:4a:
a9:d5:df:99:d4:2e:bd:87:c7:ed:6c:fe:14:62:0b:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2A:4B:C7:B1:85:E4:F7:56:93:83:04:38:74:C5:A4:B2:C3:C6:D5
X509v3 Authority Key Identifier:
keyid:3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/ICpLx7GF5PdWk4MEOHTFpLLDxtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.181.0/24
IPv6:
2a12:45c7:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
41:7d:98:2f:92:19:70:a8:7e:17:71:0e:ea:b7:2f:db:37:fe:
f9:b0:54:7d:5c:2f:1e:7b:60:10:c7:73:e7:01:44:c8:83:93:
9d:7e:d6:f9:54:ea:f0:ef:25:66:a9:33:55:36:aa:ab:67:e1:
90:de:18:34:e9:87:97:9f:7c:bf:28:98:b7:8c:42:7e:1c:9b:
ad:4a:c0:b1:55:ce:29:16:b5:ed:f5:62:40:8f:e0:81:61:5a:
fa:a0:05:97:31:be:78:47:60:19:f6:8a:70:ef:1e:bc:78:0e:
13:4b:50:fb:9a:73:b3:54:2e:1d:34:f3:99:78:72:fc:f8:29:
58:39:b8:cf:e6:26:6b:80:a4:9d:0b:0a:62:4b:9b:7a:56:88:
50:f8:04:cc:ba:fd:10:ce:d8:04:ff:3f:e1:b7:88:f7:09:88:
e3:0a:f7:7e:44:a0:67:ad:9a:76:28:ba:b0:98:f1:5c:91:f5:
87:19:61:04:4e:d1:db:42:7d:52:f6:90:66:28:51:97:f1:94:
42:b3:fc:59:4d:75:f9:5f:86:ce:b9:73:90:58:30:e1:f5:d7:
87:d2:b7:f3:f2:f9:f2:4c:71:28:b1:9b:60:33:58:c7:8f:b2:
a9:88:10:7f:bf:d7:81:38:be:a1:0e:f3:b8:28:16:34:5c:b8:
58:55:09:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-fra.rpki-client.org