Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/k4PmnV8vhmr9SF2H0w74ibwEFio.roa
File: k4PmnV8vhmr9SF2H0w74ibwEFio.roa (raw, json)
Hash identifier: lJ2hROU9L6HCpRn//i06yAAw14N6OQxRplasbo/AkMY=
Subject key identifier: 93:83:E6:9D:5F:2F:86:6A:FD:48:5D:87:D3:0E:F8:89:BC:04:16:2A
Certificate issuer: /CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Certificate serial: 0183E5BF6D436E56D0079D1389BA52595BB0
Authority key identifier: 3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/k4PmnV8vhmr9SF2H0w74ibwEFio.roa
Signing time: Mon 17 Oct 2022 11:41:11 +0000
ROA not before: Mon 17 Oct 2022 11:41:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20253
IP address blocks: 146.19.181.0/24 maxlen: 26
217.20.49.0/24 maxlen: 24
217.20.48.0/24 maxlen: 24
217.20.51.0/24 maxlen: 24
217.20.50.0/24 maxlen: 24
2a12:45c7:ffff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e5:bf:6d:43:6e:56:d0:07:9d:13:89:ba:52:59:5b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Validity
Not Before: Oct 17 11:41:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9383e69d5f2f866afd485d87d30ef889bc04162a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:ad:e9:57:47:ed:42:8d:f4:d7:be:05:d6:
73:b1:b1:2d:ae:1e:50:e6:df:9c:f9:02:f4:e4:64:
91:99:9c:57:1d:6d:3f:d9:5e:e8:ac:fc:81:b4:c3:
96:6f:fa:f7:c0:96:f7:58:66:61:1b:6a:cc:14:06:
a7:8e:a8:29:71:46:21:b9:a7:d7:d0:60:6c:4e:e5:
a4:96:9f:6e:89:d3:42:63:68:ac:84:7a:ed:d2:e6:
3a:14:ce:58:4f:de:6c:56:44:1f:e7:73:d6:db:5f:
31:3d:2f:ca:5c:4c:43:2f:23:a8:08:00:3d:76:87:
39:6a:53:88:92:37:9e:17:56:17:bc:55:5d:72:64:
c3:52:38:1c:69:0b:72:77:b5:51:5f:ac:c8:44:5d:
2c:a7:19:13:3c:2c:5c:de:8b:23:ba:23:c3:cf:28:
21:76:39:0c:7c:a8:57:b9:d6:a8:bd:3f:08:bb:7c:
dd:34:f2:8e:fc:c0:06:84:73:c4:7b:6c:fe:62:4b:
06:db:5c:d0:c9:82:c5:cc:1c:86:90:35:9a:1e:0b:
bf:27:10:89:2e:61:20:1a:52:eb:30:1a:25:e3:6e:
55:2e:ab:b9:cf:c3:fe:ae:ce:68:93:28:1b:b8:14:
c3:31:11:02:38:b5:6d:de:c6:da:f1:66:59:29:cb:
3f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:83:E6:9D:5F:2F:86:6A:FD:48:5D:87:D3:0E:F8:89:BC:04:16:2A
X509v3 Authority Key Identifier:
keyid:3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/k4PmnV8vhmr9SF2H0w74ibwEFio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.181.0/24
217.20.48.0/22
IPv6:
2a12:45c7:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
c7:9c:20:f5:70:24:1d:a4:5c:f8:fe:16:5e:19:3b:27:81:73:
9d:20:ef:3b:8e:63:f4:bd:df:29:63:ab:2d:c3:7b:9e:91:6d:
3e:58:ed:5d:dc:c9:da:6c:65:32:ed:ff:84:7f:4c:c1:13:05:
51:59:5f:0e:3e:ef:6c:bb:05:93:2e:fe:a0:25:f7:3f:1d:13:
6e:a7:1e:d6:3c:04:44:77:c3:77:36:8a:2f:3e:82:0d:05:2f:
28:ad:29:3d:01:e8:25:2d:bd:4f:bb:10:fe:a9:09:dc:d1:7b:
d6:ac:3c:b6:b8:ea:3d:62:18:c6:48:04:e0:82:4f:8c:45:59:
25:66:06:e4:4b:8e:a9:08:75:19:5b:bf:54:6e:c3:8e:77:c7:
0a:06:4a:8f:03:fe:aa:22:b8:3f:3a:95:4d:d4:4a:34:87:9b:
69:45:91:80:16:95:66:35:0e:f9:7d:dd:7c:b4:1e:d2:0a:90:
af:ac:62:6d:57:97:58:a4:5e:6a:2e:c0:56:65:48:7a:7b:87:
6c:de:5c:af:fb:da:db:7f:15:9e:78:0a:83:aa:60:dc:d8:01:
60:fc:72:5e:ad:c5:3a:54:3a:e6:7e:f7:5e:ff:1b:dd:ea:08:
4b:0a:c5:30:c4:92:9d:5b:64:00:31:85:94:f5:57:c8:b3:b3:
7f:22:57:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:27 2023 by rpki-client on console-fra.rpki-client.org