Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cb1b9f-9629-4f47-86f6-5d5bbabe7698/1/dKqaIW-UaG7RqQq7C7Uy1w_pSGk.roa
File: dKqaIW-UaG7RqQq7C7Uy1w_pSGk.roa (raw, json)
Hash identifier: swy2K6kwv1b8ehhuCU1WiqGMsGaFL1kqjs6sj0mVtbQ=
Subject key identifier: 74:AA:9A:21:6F:94:68:6E:D1:A9:0A:BB:0B:B5:32:D7:0F:E9:48:69
Certificate issuer: /CN=52056e93c01726416d6e18cf1f23729481e03f91
Certificate serial: 6248BA
Authority key identifier: 52:05:6E:93:C0:17:26:41:6D:6E:18:CF:1F:23:72:94:81:E0:3F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVuk8AXJkFtbhjPHyNylIHgP5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cb1b9f-9629-4f47-86f6-5d5bbabe7698/1/dKqaIW-UaG7RqQq7C7Uy1w_pSGk.roa
Signing time: Sat 01 Jan 2022 02:59:32 +0000
ROA not before: Sat 01 Jan 2022 02:59:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6441146 (0x6248ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52056e93c01726416d6e18cf1f23729481e03f91
Validity
Not Before: Jan 1 02:59:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74aa9a216f94686ed1a90abb0bb532d70fe94869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:64:7f:0c:bb:cd:3d:ac:b1:6e:b9:35:45:
4a:94:d8:ac:1b:49:62:6f:fc:4d:69:c7:19:2f:dc:
2d:71:d1:48:03:54:b2:79:fa:26:34:7e:46:f2:49:
ea:92:0c:ff:5e:02:d4:6e:d6:98:7d:03:f0:aa:64:
99:c6:ad:cc:4b:ca:20:58:81:b7:4a:32:61:6b:99:
47:ca:d8:a1:3e:72:d4:48:4b:10:74:46:22:a4:69:
75:88:e9:d8:54:30:3f:2e:0a:7d:05:d8:7e:6c:e7:
c8:37:68:c0:99:d4:10:97:d5:97:24:8a:b0:ba:4d:
ce:3b:78:ed:e0:c5:43:31:13:10:fb:94:f4:57:89:
56:96:8a:f3:54:84:79:c1:8b:61:cd:37:83:e3:16:
44:be:59:d0:84:99:68:cb:0b:00:3c:b7:7f:f6:36:
f0:59:9f:d8:7d:f6:3f:01:ce:25:de:ad:71:06:aa:
26:b4:4d:3d:9c:c5:c9:8e:4c:21:6c:ae:58:cf:6e:
7d:45:42:76:93:ab:bc:2a:be:cb:49:ab:cf:cb:31:
ec:61:bb:0e:4d:af:ff:67:33:6c:37:d4:6f:33:83:
32:6e:6c:85:c5:44:8c:68:e8:9f:01:a6:27:96:0b:
b2:38:53:b2:ea:0e:e7:00:8d:8f:02:89:a0:ab:e2:
cf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AA:9A:21:6F:94:68:6E:D1:A9:0A:BB:0B:B5:32:D7:0F:E9:48:69
X509v3 Authority Key Identifier:
keyid:52:05:6E:93:C0:17:26:41:6D:6E:18:CF:1F:23:72:94:81:E0:3F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVuk8AXJkFtbhjPHyNylIHgP5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cb1b9f-9629-4f47-86f6-5d5bbabe7698/1/dKqaIW-UaG7RqQq7C7Uy1w_pSGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cb1b9f-9629-4f47-86f6-5d5bbabe7698/1/UgVuk8AXJkFtbhjPHyNylIHgP5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.203.0/24
Signature Algorithm: sha256WithRSAEncryption
61:0f:04:ae:87:3d:37:f5:ce:0d:ff:e4:93:22:11:1d:c8:c5:
f3:49:45:e4:5e:25:2d:f9:94:da:94:b1:2e:4a:8b:b2:c2:9d:
2c:93:57:1e:98:48:cb:89:16:6e:7f:6d:49:72:c7:de:41:c8:
ce:7c:d6:47:0f:c5:d4:75:9a:5d:92:9c:6e:bb:41:0b:83:e7:
50:31:68:a3:ca:02:90:02:0d:d0:d7:69:fc:e6:e4:39:d1:5c:
fb:cd:46:ba:eb:d7:ff:0d:cf:fc:fc:51:4e:05:94:bd:7a:31:
1e:ae:a7:b0:9d:fd:0c:22:32:17:dc:74:81:cb:1d:c3:29:29:
29:00:30:04:16:2f:9f:43:96:69:15:19:f5:c9:58:8f:c7:92:
60:5e:1c:5d:13:fd:a7:02:d8:df:cf:22:6d:50:a5:58:9e:33:
d6:63:3f:be:00:24:96:35:8e:1f:79:01:bc:6c:78:02:5d:8d:
a0:93:9e:d8:06:96:34:31:2d:53:8e:c0:63:8d:de:6b:c6:29:
45:60:f0:80:9c:73:c5:4d:9c:94:52:95:e8:cd:6a:c4:77:ee:
a3:74:47:c8:f5:22:f7:09:14:3c:40:34:b4:5b:7f:06:97:63:
b6:77:fe:bf:b8:eb:3c:e0:e1:0c:5f:15:9a:39:0b:ae:6e:c3:
fa:60:99:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:22 2023 by rpki-client on console-ams.rpki-client.org