Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/Rvp8CV2hskv9qT_r_HlSM_3utoU.roa
File: Rvp8CV2hskv9qT_r_HlSM_3utoU.roa (raw, json)
Hash identifier: 1CwicQG55v1zM+dGR6Iske/m57gjjaDrzmqneAPq4cU=
Subject key identifier: 46:FA:7C:09:5D:A1:B2:4B:FD:A9:3F:EB:FC:79:52:33:FD:EE:B6:85
Certificate issuer: /CN=64f3a298f7de920548e8251de76b807387e2d43c
Certificate serial: 6B8CD0
Authority key identifier: 64:F3:A2:98:F7:DE:92:05:48:E8:25:1D:E7:6B:80:73:87:E2:D4:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPOimPfekgVI6CUd52uAc4fi1Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/Rvp8CV2hskv9qT_r_HlSM_3utoU.roa
Signing time: Sat 01 Jan 2022 02:58:01 +0000
ROA not before: Sat 01 Jan 2022 02:58:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7048400 (0x6b8cd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f3a298f7de920548e8251de76b807387e2d43c
Validity
Not Before: Jan 1 02:58:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46fa7c095da1b24bfda93febfc795233fdeeb685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:42:6d:32:9a:4c:18:63:d5:56:9b:89:6b:
d9:5d:d1:52:80:1c:19:46:2e:6e:99:59:08:a8:3a:
79:91:74:84:50:3d:b7:a5:31:59:91:1b:5b:2c:e7:
50:ee:46:31:3e:17:5e:9c:e5:ab:18:c4:e9:83:a2:
f4:58:58:c2:6e:78:78:9e:03:2c:2b:1b:04:be:32:
15:00:4f:22:8d:d1:d1:5e:3e:4c:d5:19:bb:1c:1b:
44:39:91:b7:c3:f9:b0:f7:e8:e7:55:68:ea:0d:15:
9c:90:1b:ff:97:bc:25:53:74:61:d9:82:4d:8a:a3:
2e:48:79:94:70:23:dd:3c:a9:41:e9:99:ae:a3:6f:
b5:6e:fa:19:62:67:b7:db:10:81:9f:fa:ab:d1:53:
2e:01:f5:00:f4:52:e3:a1:de:93:f4:9b:0b:f0:5d:
7a:13:bd:27:55:49:d4:d8:e8:6e:b9:89:c7:5e:4a:
ce:75:4b:89:ed:42:ee:5a:26:3f:5e:11:fc:e0:7f:
4a:48:36:6d:c4:d4:89:df:55:e7:d0:6f:b2:08:0b:
ae:20:ff:67:c7:f8:af:a7:95:b5:54:c2:66:e6:41:
a0:cf:95:54:e6:73:26:63:06:9a:f8:50:95:c1:c5:
cc:10:1a:f8:97:e0:df:42:cb:d8:15:fc:00:4d:6e:
5a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FA:7C:09:5D:A1:B2:4B:FD:A9:3F:EB:FC:79:52:33:FD:EE:B6:85
X509v3 Authority Key Identifier:
keyid:64:F3:A2:98:F7:DE:92:05:48:E8:25:1D:E7:6B:80:73:87:E2:D4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPOimPfekgVI6CUd52uAc4fi1Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/Rvp8CV2hskv9qT_r_HlSM_3utoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/ZPOimPfekgVI6CUd52uAc4fi1Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.186.0/24
Signature Algorithm: sha256WithRSAEncryption
81:d6:11:d1:20:05:61:cb:3d:d7:8d:2c:78:bf:02:a7:ac:94:
06:d1:57:2a:ed:55:02:3f:8c:dc:8a:66:83:3b:b3:c6:b5:c3:
b1:da:7d:9f:40:d5:93:c6:60:c6:9c:d1:d3:8f:6d:ae:34:e5:
6a:3d:bb:11:f2:23:39:b5:54:65:a5:16:7d:76:c9:65:a4:b9:
62:2e:08:a1:c2:2f:3e:37:7c:93:2f:10:9a:fa:8a:f7:6e:26:
7b:5f:78:22:7e:fa:42:3b:3d:80:98:6f:6b:eb:b2:77:0c:39:
42:fe:e4:52:cf:30:ca:22:67:c1:92:03:3c:52:f5:60:c3:db:
17:00:97:48:ed:ba:92:80:d8:78:ac:5c:83:90:c2:15:cc:73:
c7:d5:70:e2:dc:b5:f8:09:8e:8c:f0:72:10:22:f5:21:a5:0c:
49:1b:18:67:6a:75:cf:0b:94:d3:31:42:53:88:d4:60:db:ca:
bc:8c:be:8b:6f:60:40:3b:4e:27:a0:5c:fc:6c:aa:4f:66:3b:
97:a6:1a:a0:60:cf:93:53:97:88:a8:7d:4d:c8:35:75:3e:01:
a2:6c:b3:3b:f1:4c:53:b5:77:34:18:b6:dd:14:62:0e:d2:ac:
82:ea:e6:5d:61:bd:aa:2b:06:37:7d:6f:e7:2d:d9:4d:f6:91:
7e:3e:d4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:03 2023 by rpki-client on console-fra.rpki-client.org