Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/Ou9kkk62gpynK7uf5K7Duds1_KI.roa
File: Ou9kkk62gpynK7uf5K7Duds1_KI.roa (raw, json)
Hash identifier: XTGHeLDmH6+suS4hnvbdiFukdTT8orD9x/qzzi3+WZc=
Subject key identifier: 3A:EF:64:92:4E:B6:82:9C:A7:2B:BB:9F:E4:AE:C3:B9:DB:35:FC:A2
Certificate issuer: /CN=f7ed6e066436e0a0b617474955a8a758e6e35d76
Certificate serial: 7A87BA
Authority key identifier: F7:ED:6E:06:64:36:E0:A0:B6:17:47:49:55:A8:A7:58:E6:E3:5D:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-1uBmQ24KC2F0dJVainWObjXXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/Ou9kkk62gpynK7uf5K7Duds1_KI.roa
Signing time: Wed 05 Jan 2022 10:02:05 +0000
ROA not before: Wed 05 Jan 2022 10:02:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400039
IP address blocks: 146.19.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8030138 (0x7a87ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ed6e066436e0a0b617474955a8a758e6e35d76
Validity
Not Before: Jan 5 10:02:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3aef64924eb6829ca72bbb9fe4aec3b9db35fca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:73:8b:50:ba:14:9e:f6:56:3d:03:ec:ea:21:
5c:2e:8e:8b:e1:1b:6b:17:e8:63:fa:25:12:40:a9:
09:77:5c:8c:af:af:7c:82:96:a5:b1:68:a0:70:60:
32:02:81:ee:42:f6:0c:3f:3f:f1:84:2a:a3:6d:eb:
54:4d:22:17:3c:c3:79:02:14:cd:2e:43:c1:41:df:
85:7d:4c:e4:4a:47:97:04:e6:04:d2:06:63:b6:2f:
44:d0:6a:17:cf:99:c6:a1:6b:d1:c1:ef:bd:62:6d:
3c:fd:bc:53:b9:e8:15:a6:a7:35:c8:4e:ed:cb:44:
4a:99:c8:17:85:39:d1:aa:98:d0:40:f4:b2:cd:ba:
3d:5d:6e:3c:70:3b:73:ce:3d:09:02:1d:34:23:21:
ca:4b:11:74:88:7e:62:a0:c0:42:6d:7d:cb:63:1e:
26:e5:89:06:61:92:0b:9d:51:57:62:41:db:e4:2b:
92:64:68:1c:cb:c3:4f:34:4d:1b:d5:c3:33:dc:86:
b6:0e:2e:f2:fe:27:ed:a4:41:9d:50:7f:19:95:56:
00:1e:a1:ae:ad:9f:95:b4:c1:af:58:d0:2a:9e:90:
21:01:fa:33:01:61:77:68:67:a1:78:32:12:a7:fe:
8d:bf:db:2a:cf:28:58:dd:d3:01:79:a7:58:2e:55:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EF:64:92:4E:B6:82:9C:A7:2B:BB:9F:E4:AE:C3:B9:DB:35:FC:A2
X509v3 Authority Key Identifier:
keyid:F7:ED:6E:06:64:36:E0:A0:B6:17:47:49:55:A8:A7:58:E6:E3:5D:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-1uBmQ24KC2F0dJVainWObjXXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/Ou9kkk62gpynK7uf5K7Duds1_KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/9-1uBmQ24KC2F0dJVainWObjXXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.92.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:fc:6c:a5:9b:18:44:2f:98:3f:4b:45:24:19:01:85:ca:b0:
a6:6f:70:27:fc:da:3a:d5:72:12:f1:97:ef:75:12:26:6d:ce:
34:67:3a:ad:64:63:7d:68:e4:57:41:5e:c0:7c:71:29:c4:72:
9b:cf:0f:25:e7:54:a1:29:28:28:94:76:5e:24:1c:4b:36:43:
eb:98:9b:5b:3d:15:cb:f4:a0:01:11:4b:d2:a8:1d:9f:c5:43:
2b:e4:27:95:1d:9b:82:e4:c8:0a:80:e6:fe:82:d8:66:b2:92:
ca:33:fc:a4:99:02:5e:92:e3:6b:58:e6:40:9e:a1:75:9f:e9:
91:91:e5:b3:86:6a:00:dc:5e:6b:cf:e1:0a:64:2e:a7:7a:ae:
7b:d7:c1:43:5a:ba:48:a2:a1:d2:c4:7a:a3:d5:2f:24:7b:42:
5a:24:9b:b9:61:7d:9a:8e:6d:6d:98:59:8f:00:cc:61:83:e4:
02:5b:10:dd:e8:52:20:4e:11:f5:c9:9d:5e:a8:5d:c1:ad:97:
ef:85:e8:51:7a:0e:ec:95:ee:a3:c7:9f:5c:6a:40:59:a8:e7:
22:f6:6b:50:98:c9:b1:a3:52:e6:99:c8:56:e7:27:71:6e:64:
06:f3:01:10:f9:17:52:95:d4:53:15:71:bd:02:66:da:63:c7:
b7:54:a7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:12 2023 by rpki-client on console-fra.rpki-client.org