Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/im5iHzxmLacgAcg-nCguDQuSwA4.roa
File: im5iHzxmLacgAcg-nCguDQuSwA4.roa (raw, json)
Hash identifier: u6KGkr5/JroQgPnA3KOMgITENdwQIMIYmYHbdjmGk58=
Subject key identifier: 8A:6E:62:1F:3C:66:2D:A7:20:01:C8:3E:9C:28:2E:0D:0B:92:C0:0E
Certificate issuer: /CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Certificate serial: 0183B6B50FD6BB3B22CE219AEB6367433D82
Authority key identifier: 01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/im5iHzxmLacgAcg-nCguDQuSwA4.roa
Signing time: Sat 08 Oct 2022 08:27:42 +0000
ROA not before: Sat 08 Oct 2022 08:27:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 146.19.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b6:b5:0f:d6:bb:3b:22:ce:21:9a:eb:63:67:43:3d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Validity
Not Before: Oct 8 08:27:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a6e621f3c662da72001c83e9c282e0d0b92c00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4a:8a:87:ec:74:e8:8f:4f:d5:81:ce:1a:a4:
55:21:aa:92:3e:6d:d8:c2:6b:a8:49:31:0d:b2:b4:
b7:bf:9f:3b:7f:9d:44:fe:84:82:99:5a:69:c2:18:
6a:05:40:8f:e6:c9:1a:65:f9:1c:57:ba:fb:6e:12:
29:4f:ee:5f:ee:77:63:dd:19:26:79:3f:8c:49:d8:
70:27:85:9c:ac:ae:97:ed:86:58:bc:9c:cf:0a:7d:
5f:63:9c:ce:7b:33:f9:e4:38:61:8e:be:ff:5e:a3:
89:3f:f7:25:9c:c9:ed:d9:9b:d6:24:75:fd:ac:28:
cd:08:80:f4:06:97:78:28:c2:21:1f:04:65:80:93:
a1:88:3e:a9:ab:d5:c4:86:f3:3e:65:9d:10:da:df:
74:f8:e4:4b:9b:5d:76:3f:c5:34:dd:5a:25:e7:9d:
9d:69:2d:1e:f2:e6:81:e7:dd:f7:bc:4e:e7:04:f5:
ab:3c:38:7c:88:09:e8:7a:95:dc:bd:e1:15:a4:7a:
45:66:46:aa:6d:56:50:48:83:1d:bb:28:57:e1:c1:
9b:b1:97:c3:31:ee:99:d4:71:63:f4:d1:09:86:90:
d8:9d:0f:16:16:c7:06:71:93:8b:84:f8:45:46:47:
19:f2:f3:55:25:f7:5f:0c:dd:76:48:74:d2:7b:c6:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6E:62:1F:3C:66:2D:A7:20:01:C8:3E:9C:28:2E:0D:0B:92:C0:0E
X509v3 Authority Key Identifier:
keyid:01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/im5iHzxmLacgAcg-nCguDQuSwA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/AR5P_8S467AmSz4T-zzEdm86ihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.125.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:17:57:d0:bf:ac:0a:3c:d0:44:5d:19:06:47:f5:59:aa:dc:
53:e5:20:aa:7b:15:9e:f5:c0:06:7f:42:09:f7:19:80:a8:f6:
65:aa:f3:7f:05:56:f4:5e:32:1e:1c:b4:ed:45:d7:b3:a5:48:
6b:1b:9b:9b:6f:e4:61:3c:9e:76:0b:7f:76:54:15:b9:30:13:
49:38:a1:c7:5e:86:4c:dd:05:c7:60:d4:31:31:aa:80:c6:8b:
52:89:cd:ab:15:38:0d:fb:2d:11:e0:cd:fc:c9:3a:ca:52:15:
39:c2:e1:45:2f:46:92:a3:f6:f0:ed:d6:5c:19:b6:e4:c4:f6:
20:ed:ca:7f:08:62:7b:3b:cf:df:5f:3b:70:8b:d3:88:db:28:
12:ea:97:39:b8:27:d3:f8:84:88:28:2d:38:65:63:ce:8d:5d:
b9:e0:21:b2:10:f2:ae:bf:1d:e1:2f:e0:2c:92:fa:5d:74:27:
ab:e9:40:f6:6e:ce:a8:a9:fd:19:4b:c1:c1:a8:dc:3f:88:eb:
ad:b8:93:c9:21:1e:38:f5:b9:ec:f5:99:fa:79:10:00:6e:f3:
e3:c8:42:7c:79:4f:8a:7a:dc:1d:91:c1:29:8a:44:cd:31:d4:
40:9c:5d:f2:f4:25:64:21:98:e1:d7:ec:19:51:e3:cc:fc:88:
2d:75:75:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:34 2023 by rpki-client on console-ams.rpki-client.org