Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/Fq9Pelw8qXrpS4rY1pTLb0vcqWY.roa
File: Fq9Pelw8qXrpS4rY1pTLb0vcqWY.roa (raw, json)
Hash identifier: 9d73VYjCe+KQhRg32n4UTseACZXE23Cp55PdIzWrFOY=
Subject key identifier: 16:AF:4F:7A:5C:3C:A9:7A:E9:4B:8A:D8:D6:94:CB:6F:4B:DC:A9:66
Certificate issuer: /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial: 748F40
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/Fq9Pelw8qXrpS4rY1pTLb0vcqWY.roa
Signing time: Sat 01 Jan 2022 04:00:46 +0000
ROA not before: Sat 01 Jan 2022 04:00:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24685
IP address blocks: 146.19.54.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7638848 (0x748f40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Validity
Not Before: Jan 1 04:00:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16af4f7a5c3ca97ae94b8ad8d694cb6f4bdca966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bf:d7:ae:b5:b5:1f:e4:81:49:8f:66:fb:be:
67:d2:69:f0:71:10:c8:b8:4f:fe:9c:ee:0d:4f:e3:
64:17:4e:03:5d:03:22:b5:27:fa:27:ee:1d:16:aa:
fd:e9:9c:03:8b:2d:46:1c:63:29:0e:e6:88:85:4d:
13:81:62:b2:d2:35:61:e9:0b:ea:a7:39:e7:97:f1:
f1:52:40:a1:c5:27:ed:8f:d5:88:07:b0:7f:2b:56:
44:79:1f:d8:42:b5:4f:c2:d4:48:d7:79:80:19:06:
1f:33:a3:35:9b:b4:6a:b6:1f:6d:5d:7f:5b:28:af:
24:bd:e3:14:80:6c:1f:5d:64:34:f4:cd:81:cb:9a:
51:6a:e2:92:3f:a3:4d:ce:72:60:6d:6e:17:b5:a9:
6f:f8:52:0e:67:dd:ed:95:10:d5:33:bb:ae:c3:fa:
ea:9f:43:7c:16:6d:88:9e:e8:96:bc:79:03:bc:70:
f7:5e:3a:32:ad:33:29:5e:d4:52:92:15:b9:17:29:
17:32:5b:ba:d8:a4:7f:c6:89:1f:40:e3:8c:d3:92:
ad:31:0b:05:81:f0:6d:8f:ba:09:33:05:41:82:e1:
08:48:7f:fc:40:9e:c5:1e:6c:6f:02:ad:da:18:4d:
92:17:17:c4:41:c1:dd:6d:b3:a7:55:47:7f:ea:f6:
a8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AF:4F:7A:5C:3C:A9:7A:E9:4B:8A:D8:D6:94:CB:6F:4B:DC:A9:66
X509v3 Authority Key Identifier:
keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/Fq9Pelw8qXrpS4rY1pTLb0vcqWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.54.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:a2:76:4a:0f:d3:c6:4d:58:10:18:36:a6:02:ec:72:91:a2:
d0:c3:5e:54:5b:15:51:8f:a3:8e:89:e8:05:37:cb:a9:19:8d:
3b:94:d2:60:80:e3:73:2d:f0:e8:85:24:0b:db:1e:e7:8d:9e:
f5:d5:b0:73:c3:86:01:3d:13:d4:a3:70:5d:1d:29:a7:e7:84:
71:8c:cf:d2:9e:74:5b:8d:da:6b:75:84:41:61:e4:35:97:72:
0b:ae:67:49:e7:9d:f3:10:90:e8:ff:68:50:24:18:af:0d:75:
ba:bf:fd:17:98:d6:69:46:41:36:06:38:9c:07:03:65:29:89:
94:d8:4e:9e:cf:b8:0a:e6:49:ca:06:dc:bf:7b:fc:c5:61:49:
45:7e:02:7d:9d:a8:e8:a2:bc:07:b1:1a:d7:1a:b8:c9:24:48:
b8:e9:5b:4e:cd:2f:9e:d7:91:fb:f6:75:3b:65:0b:e7:f5:2c:
d8:ca:9a:61:63:a1:b7:27:c7:1e:b2:87:ed:d0:30:7d:95:94:
f6:20:ad:16:3d:18:d5:24:54:65:04:3f:de:0b:a3:05:4f:34:
8b:f4:12:27:35:3e:8b:ce:38:43:0b:e1:9f:2c:9a:64:1a:51:
0c:36:91:b4:d4:f1:47:e6:7a:2f:7e:a1:99:d3:97:b5:a9:bf:
b9:12:15:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:30 2024 by rpki-client on console-fra.rpki-client.org