Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/_OHVmT-zo1ZfwO9o91XbvNIxJjs.roa
File: _OHVmT-zo1ZfwO9o91XbvNIxJjs.roa (raw, json)
Hash identifier: o75QAtBweOdvGw0me15LnwFSfcD9T+JgnWrLjt3LChU=
Subject key identifier: FC:E1:D5:99:3F:B3:A3:56:5F:C0:EF:68:F7:55:DB:BC:D2:31:26:3B
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 138E622C
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/_OHVmT-zo1ZfwO9o91XbvNIxJjs.roa
Signing time: Sat 01 Jan 2022 14:57:46 +0000
ROA not before: Sat 01 Jan 2022 14:57:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2103
IP address blocks: 134.246.0.0/16 maxlen: 16
134.246.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328098348 (0x138e622c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: Jan 1 14:57:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fce1d5993fb3a3565fc0ef68f755dbbcd231263b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:c5:6a:31:1b:12:78:b3:b6:fb:e2:46:93:
ac:e3:65:7e:2a:18:cd:ba:c0:82:71:22:79:58:b4:
14:9e:0f:e4:e8:89:eb:62:39:de:8b:41:5b:39:c0:
30:6b:ec:83:26:8f:24:a7:36:8e:b3:16:b7:c5:05:
9b:e1:0e:b6:9f:31:55:54:02:0e:3e:83:dc:82:96:
48:ae:94:1b:d6:c0:74:4e:fa:62:5a:ba:8b:ac:e9:
fe:43:8c:97:6a:61:2b:b8:74:07:7e:fc:dc:95:fd:
b2:ae:6f:4b:21:d3:51:5f:08:70:b6:a4:31:3b:e7:
9c:11:b9:95:b4:f5:2d:54:51:4d:11:23:78:69:ef:
f5:de:6c:cb:c3:17:0f:b3:81:88:d9:6e:cc:24:af:
2d:25:f8:70:9f:69:c0:27:7c:b2:50:95:df:35:0d:
01:a7:c5:15:5c:2f:eb:3d:85:64:52:19:e6:97:37:
58:6a:59:fa:d2:fd:e0:f2:fb:87:28:38:74:35:8c:
26:89:e9:cd:c6:20:fd:cf:4a:bf:e8:95:86:82:f3:
32:e2:da:8d:85:30:fb:04:24:e2:a6:2d:92:52:94:
dd:2b:6d:16:65:d2:89:59:42:2e:5b:11:b8:b6:d1:
31:1d:52:cb:89:53:bc:91:bf:dd:4d:0e:88:09:c1:
6b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E1:D5:99:3F:B3:A3:56:5F:C0:EF:68:F7:55:DB:BC:D2:31:26:3B
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/_OHVmT-zo1ZfwO9o91XbvNIxJjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.246.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:22:06:ae:4d:24:8a:2f:1c:ea:30:d3:10:03:b5:20:85:44:
8b:d7:f6:cd:44:25:6f:f5:3b:47:e3:e5:16:4a:e1:5b:86:03:
e6:17:0a:69:a0:20:0c:fe:38:87:19:29:7b:07:89:2c:6d:6b:
75:4a:c5:f9:44:44:f9:ac:b0:35:1c:d8:c1:fd:ea:7b:59:23:
91:48:e1:d0:34:94:21:49:8b:88:55:ec:64:51:7a:02:18:2d:
79:04:6d:a0:9b:85:0d:28:cf:52:eb:d8:15:bd:05:92:29:7b:
d2:dc:37:5b:e6:ad:64:b3:05:e0:60:63:58:ec:98:ff:04:8d:
a5:e5:4f:c1:a7:5c:af:b9:20:35:e6:5d:c9:67:0f:a3:9e:e8:
93:9b:41:7a:59:8f:e2:b3:5b:3a:35:d8:c9:e6:93:9e:bf:89:
d1:ee:f1:de:f3:7a:9d:29:9b:71:52:be:ce:6c:25:36:9e:73:
cd:cb:00:22:ef:5a:bf:bb:db:3f:23:40:97:01:86:fe:9d:27:
4c:13:3a:4b:78:ed:20:74:11:cc:5c:46:f9:f6:5b:aa:5a:7d:
a6:70:eb:6c:2b:38:f1:f5:77:9d:3f:19:2e:3b:b7:f3:ec:03:
df:27:1b:bc:b3:4f:9f:b5:d0:05:e9:b9:93:f3:24:24:fa:1b:
5e:12:e7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:43 2023 by rpki-client on console-fra.rpki-client.org