Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/TSKyk7rqiQkUYkNqRxIU0EUNZpI.roa
File: TSKyk7rqiQkUYkNqRxIU0EUNZpI.roa (raw, json)
Hash identifier: SsrHvv23wg2jTS5yQMJ2xApBs4LdXa/DSVqZ0Mrrdnk=
Subject key identifier: 4D:22:B2:93:BA:EA:89:09:14:62:43:6A:47:12:14:D0:45:0D:66:92
Certificate issuer: /CN=77c6131b2d979f957eb1ed1dbcbee3c5df288c78
Certificate serial: 0104CEBC
Authority key identifier: 77:C6:13:1B:2D:97:9F:95:7E:B1:ED:1D:BC:BE:E3:C5:DF:28:8C:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8YTGy2Xn5V-se0dvL7jxd8ojHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/TSKyk7rqiQkUYkNqRxIU0EUNZpI.roa
Signing time: Mon 07 Mar 2022 17:31:10 +0000
ROA not before: Mon 07 Mar 2022 17:31:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17092284 (0x104cebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6131b2d979f957eb1ed1dbcbee3c5df288c78
Validity
Not Before: Mar 7 17:31:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d22b293baea89091462436a471214d0450d6692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:4f:54:fd:f1:93:a5:b4:2f:89:9a:34:f2:
61:e0:1a:c7:1a:20:c6:07:57:22:aa:ea:fa:98:23:
cf:92:b3:d9:24:16:19:23:ff:f9:e1:fa:4d:0d:6c:
2c:0e:d3:01:46:34:e7:1f:44:05:eb:59:b5:89:c0:
ca:80:3c:b2:0d:80:2f:11:fc:dd:ad:65:28:24:54:
c0:29:e2:f1:72:64:05:67:9a:54:f1:f4:f4:81:5b:
1b:8b:05:ee:c2:4b:bb:a9:05:62:f3:9f:86:39:3d:
57:c3:ea:c4:b6:7d:50:9d:13:b4:8f:de:50:e7:94:
cc:69:94:f0:16:65:47:b4:20:e5:79:a9:3c:cd:b3:
65:c9:10:b0:85:c2:95:ec:a3:5a:4b:54:72:6a:34:
00:8f:7e:e2:be:10:92:54:f5:dd:b8:74:28:ff:0b:
bf:55:00:d1:25:b1:83:d7:07:db:24:3d:76:25:b0:
6b:ac:2e:b5:b8:e0:6a:f6:fd:91:7e:eb:53:5f:9e:
73:52:a3:71:8b:d8:72:ac:46:25:67:d9:0b:87:ba:
cb:fe:51:60:e1:dd:b8:ff:83:25:07:84:0c:8a:d6:
c1:46:2d:bf:9f:70:62:fe:a9:54:27:f2:40:ad:00:
7d:a0:26:d6:6a:d5:d6:86:13:2d:4f:89:75:7e:3f:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:22:B2:93:BA:EA:89:09:14:62:43:6A:47:12:14:D0:45:0D:66:92
X509v3 Authority Key Identifier:
keyid:77:C6:13:1B:2D:97:9F:95:7E:B1:ED:1D:BC:BE:E3:C5:DF:28:8C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8YTGy2Xn5V-se0dvL7jxd8ojHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/TSKyk7rqiQkUYkNqRxIU0EUNZpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/d8YTGy2Xn5V-se0dvL7jxd8ojHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.121.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a6:33:0f:d7:43:e2:8d:df:dc:2b:92:62:db:6b:55:92:74:
56:e2:aa:f3:81:41:08:77:c4:50:49:81:af:27:f2:bf:d2:04:
e9:43:bf:3e:a6:85:e8:8e:dc:1f:42:fe:d4:df:a6:55:e2:48:
bf:36:b2:50:e3:93:0f:51:32:31:26:5d:df:64:04:d5:40:9b:
06:bb:f2:46:03:e1:80:99:e3:3c:ec:db:8b:33:00:43:f2:2a:
44:5d:9d:91:8a:4b:48:10:12:01:19:62:7c:7c:0c:af:cb:a9:
31:68:aa:69:c1:24:77:3a:ab:dd:5c:17:b5:37:5e:f1:32:b3:
d4:38:9e:78:2a:6f:54:c8:c6:53:7f:f9:03:58:5d:5f:17:c0:
cb:22:4a:b8:26:4d:95:17:a2:5e:fa:04:11:54:a5:8c:f4:5e:
e2:d6:3b:d6:a9:0f:37:70:2d:c7:a5:3e:96:49:58:69:90:1b:
f6:3e:4e:6f:dd:27:58:b7:16:3d:ca:0b:49:32:02:17:77:c4:
d8:2f:7d:28:65:ed:22:fa:b4:e5:dc:93:51:91:2c:87:35:61:
58:ae:91:03:2d:40:ab:3c:19:f9:66:e7:2f:05:12:2a:b6:7b:
9d:f2:5c:60:3a:be:7f:67:e7:b0:6b:39:40:05:e4:b0:8b:ec:
9c:ec:10:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:29 2023 by rpki-client on console-fra.rpki-client.org