Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/frdZExqEXWILrHx4gzsf4Dh_S_k.roa
File: frdZExqEXWILrHx4gzsf4Dh_S_k.roa (raw, json)
Hash identifier: B9hr4eZzMLgJmAYF/dliqykDc8hkePUxx6TT0kGynic=
Subject key identifier: 7E:B7:59:13:1A:84:5D:62:0B:AC:7C:78:83:3B:1F:E0:38:7F:4B:F9
Certificate issuer: /CN=0446085c8df35e14ae7aa39c3399e8588306a2b5
Certificate serial: 7922BB
Authority key identifier: 04:46:08:5C:8D:F3:5E:14:AE:7A:A3:9C:33:99:E8:58:83:06:A2:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEYIXI3zXhSueqOcM5noWIMGorU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/frdZExqEXWILrHx4gzsf4Dh_S_k.roa
Signing time: Sat 01 Jan 2022 03:01:35 +0000
ROA not before: Sat 01 Jan 2022 03:01:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 146.19.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7938747 (0x7922bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0446085c8df35e14ae7aa39c3399e8588306a2b5
Validity
Not Before: Jan 1 03:01:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7eb759131a845d620bac7c78833b1fe0387f4bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:00:68:93:13:aa:8b:b1:ae:31:dc:25:51:
91:4b:ad:1a:37:1c:c9:f4:02:65:6a:b2:24:df:5e:
77:28:5d:d0:fe:8c:2c:54:65:08:8a:3d:dc:7f:1e:
9c:cc:fe:b3:fd:08:62:e9:e8:ed:98:e7:dc:f9:6f:
e7:29:54:58:dd:93:dc:5a:22:0f:8f:18:4d:83:27:
ac:2d:68:69:ac:89:aa:86:2b:44:1d:f9:c3:fa:cf:
5f:fd:65:b8:9c:58:c6:8d:cd:3a:e6:46:6b:5c:02:
9b:dd:b7:ff:ac:5e:24:e0:97:4e:07:25:0e:e2:46:
e0:33:a7:e5:8d:5a:04:37:4d:5a:a6:10:6e:0c:48:
a8:45:db:35:7a:9f:00:a0:44:f0:1a:0f:2e:32:19:
cb:d9:c1:f7:d5:13:b5:12:52:d8:c1:c4:2b:04:50:
c2:4a:92:83:21:78:f5:11:8b:a8:21:55:ff:c8:80:
e6:49:0f:56:cb:68:da:12:28:17:20:b9:a5:82:70:
62:5a:fe:03:d2:d4:5d:a9:8f:50:48:86:e3:cc:97:
34:ef:f8:e2:98:8b:3e:17:59:c5:0c:9f:94:e5:c7:
f1:83:0e:a8:c1:a0:27:a1:fc:b8:2a:c1:f1:29:cd:
38:bc:a7:79:4b:17:6f:1c:1e:bf:53:5d:f4:0d:bd:
95:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B7:59:13:1A:84:5D:62:0B:AC:7C:78:83:3B:1F:E0:38:7F:4B:F9
X509v3 Authority Key Identifier:
keyid:04:46:08:5C:8D:F3:5E:14:AE:7A:A3:9C:33:99:E8:58:83:06:A2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEYIXI3zXhSueqOcM5noWIMGorU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/frdZExqEXWILrHx4gzsf4Dh_S_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/BEYIXI3zXhSueqOcM5noWIMGorU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.61.0/24
Signature Algorithm: sha256WithRSAEncryption
31:54:eb:d2:81:4e:fe:f8:cc:68:85:69:17:0a:fb:7a:82:fa:
88:c2:6f:32:7a:fa:3d:3f:de:1a:08:12:01:83:2c:fb:f7:4c:
70:79:e6:c5:b7:ea:03:be:e0:34:fa:0c:c2:32:f3:50:07:3b:
8b:81:6d:4e:30:81:14:9f:81:be:a3:28:b0:db:1e:0c:0c:81:
85:25:cd:09:dc:fa:a6:d1:84:39:d9:3c:3d:76:0a:19:0a:02:
cd:2c:52:48:65:16:f6:99:91:e7:20:fd:a0:c7:f7:3e:f0:bc:
6e:5b:bf:80:64:58:c9:0a:95:18:6e:f9:f8:c1:b6:1b:57:69:
48:e9:11:09:9e:76:27:70:2a:af:68:03:5c:94:77:31:ca:b5:
f5:7d:38:28:1e:a8:84:44:8b:39:b2:46:a1:78:37:5d:5d:91:
fc:2f:46:d6:56:f7:5a:16:5f:53:1f:8f:a7:15:e6:64:96:65:
60:f5:5d:09:6b:44:9b:49:5d:cf:d4:54:38:f3:9f:8c:e0:53:
a7:31:41:38:ec:00:e7:e6:15:d8:24:3b:58:05:61:6e:a8:23:
4e:bb:aa:51:48:6b:1b:9e:41:c5:f5:0a:59:99:34:97:30:26:
80:a9:fb:71:3c:df:a8:de:58:42:c7:1d:94:88:e9:33:6b:95:
93:f3:a3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:51 2023 by rpki-client on console-fra.rpki-client.org