Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/oxKbE1XEYcMCuxjkActeyAaST-I.roa
File: oxKbE1XEYcMCuxjkActeyAaST-I.roa (raw, json)
Hash identifier: E9nO8d+5P/ywAvqp/XBE8FN7MYK9GgftJypqZPHubHQ=
Subject key identifier: A3:12:9B:13:55:C4:61:C3:02:BB:18:E4:01:CB:5E:C8:06:92:4F:E2
Certificate issuer: /CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Certificate serial: 018204FEE5737250903C430E772801FFC474
Authority key identifier: 3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/oxKbE1XEYcMCuxjkActeyAaST-I.roa
Signing time: Sat 16 Jul 2022 03:13:09 +0000
ROA not before: Sat 16 Jul 2022 03:13:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20253
IP address blocks: 146.19.181.0/24 maxlen: 26
217.20.49.0/24 maxlen: 24
217.20.48.0/24 maxlen: 24
2a12:45c7:ffff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:04:fe:e5:73:72:50:90:3c:43:0e:77:28:01:ff:c4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Validity
Not Before: Jul 16 03:13:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3129b1355c461c302bb18e401cb5ec806924fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:70:b6:e4:7d:e5:34:19:3c:11:2e:1a:54:
29:a7:78:84:f5:37:45:b5:16:61:c6:1f:fb:c5:e7:
9e:5b:c2:d9:2f:ee:9a:10:53:28:64:f1:0f:2e:a4:
8f:d1:22:ec:06:ca:47:d3:ce:d6:21:cb:2e:ce:b7:
f2:d9:ad:10:05:75:57:dc:49:20:10:dd:65:72:53:
6c:55:0d:25:e1:a6:a8:59:31:10:26:54:14:99:2f:
c4:0f:c0:a3:86:34:e7:68:8c:cb:ce:ad:4c:d0:15:
14:3a:90:38:11:bd:7d:8a:5a:79:21:db:59:b3:42:
63:7b:03:cf:84:90:07:dd:3e:7f:e5:c5:4b:79:87:
90:75:ef:13:2f:0b:02:7b:f5:2d:f0:5e:96:39:38:
f8:0a:e7:9d:61:c6:4d:38:b5:0c:fa:67:f1:5c:98:
30:8a:67:ef:e7:43:5d:44:78:15:f7:e2:32:cd:c1:
c9:27:cd:3d:b3:85:4e:05:fe:92:be:68:0a:56:f0:
32:a8:90:d8:52:00:02:ef:ef:83:a3:23:6d:09:e4:
a6:34:f6:02:44:b9:d1:b6:f6:bb:13:53:bb:42:86:
2a:4e:3a:49:99:2a:58:59:f8:37:07:10:93:60:da:
98:6a:23:eb:44:f6:43:81:d0:f1:ff:44:b5:0e:53:
85:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:12:9B:13:55:C4:61:C3:02:BB:18:E4:01:CB:5E:C8:06:92:4F:E2
X509v3 Authority Key Identifier:
keyid:3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/oxKbE1XEYcMCuxjkActeyAaST-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.181.0/24
217.20.48.0/23
IPv6:
2a12:45c7:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
d5:6e:59:4f:b7:0a:06:68:f9:ca:7d:49:95:df:24:4b:01:4f:
da:01:d1:51:0b:42:a7:7f:53:ad:a1:f2:4b:da:7a:61:fb:f8:
b8:27:55:b6:68:f9:a7:69:48:d9:76:a5:26:c8:67:18:fb:2b:
ee:7c:7c:b8:1f:59:d6:52:41:af:a8:8b:3d:53:19:c6:63:4d:
ca:ca:eb:bb:04:91:3c:6e:be:41:3a:e9:30:bb:76:a1:6c:5a:
07:30:7a:f1:19:60:98:57:7d:54:cf:03:39:3e:84:f4:72:7d:
fb:79:26:49:6f:62:d0:77:a9:88:aa:84:eb:b9:a3:04:7c:22:
97:f0:78:4e:95:43:69:cb:d8:94:74:77:81:28:c9:65:02:c5:
38:97:06:5d:1f:5d:c3:c8:74:eb:81:02:0d:4d:6a:6b:3c:f4:
80:05:de:13:40:4a:c7:ee:02:97:8f:d3:a0:d3:6e:0c:37:70:
8f:74:9f:79:3a:54:dd:a7:bf:80:a2:7b:99:3f:85:0e:90:a9:
6f:d6:ed:ad:88:ab:87:4f:96:92:89:6f:36:48:13:0a:d3:e8:
b1:69:c3:97:12:f2:1d:64:98:c3:c1:e9:68:e1:13:6c:65:0d:
89:cf:51:eb:03:54:71:24:4f:ea:00:34:42:ac:2d:e8:2f:37:
4d:33:db:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:27 2023 by rpki-client on console-fra.rpki-client.org