Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/5n213b4dXyFfnln8Ww55h0FlEBQ.roa
File: 5n213b4dXyFfnln8Ww55h0FlEBQ.roa (raw, json)
Hash identifier: HHSty1j7loE1M7tpHJLRLtszcev4xXt3edNjqukXddM=
Subject key identifier: E6:7D:B5:DD:BE:1D:5F:21:5F:9E:59:FC:5B:0E:79:87:41:65:10:14
Certificate issuer: /CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
Certificate serial: 069E69EC
Authority key identifier: 4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/5n213b4dXyFfnln8Ww55h0FlEBQ.roa
Signing time: Sat 01 Jan 2022 00:50:39 +0000
ROA not before: Sat 01 Jan 2022 00:50:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 559
IP address blocks: 146.136.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111045100 (0x69e69ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
Validity
Not Before: Jan 1 00:50:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e67db5ddbe1d5f215f9e59fc5b0e798741651014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:42:13:b0:80:f6:25:16:76:51:0a:35:6c:
5d:c5:ec:9e:57:8c:4c:48:16:b5:44:31:3d:7a:e6:
8a:98:40:97:43:52:d8:dc:ad:c1:48:f5:15:c9:86:
c8:7e:5e:3e:4e:a9:59:86:aa:51:3b:92:f1:ed:e8:
99:39:a5:b0:59:3a:28:db:28:e1:44:08:af:20:5f:
64:f6:fc:f9:e0:b3:17:06:41:56:e3:f1:c6:5d:db:
ea:53:49:79:d8:0c:5e:93:2c:73:28:cb:7f:b6:a4:
3a:54:f2:9f:46:c4:8b:3c:3a:ea:a5:cc:07:cd:3e:
d0:fd:86:4d:2c:4d:55:d6:2e:ea:12:a4:c9:1a:73:
9f:86:98:1c:5d:75:be:02:e3:4a:85:a1:02:90:73:
65:1f:32:48:c8:ee:95:ab:23:f1:20:0d:39:b0:30:
f8:4a:5c:bf:15:e1:43:ed:7b:45:b6:6c:e7:1e:62:
d5:0a:14:6a:64:8a:ee:ab:73:e7:80:f4:77:f9:c5:
b7:a0:1b:42:11:fe:2d:d1:1f:57:88:33:2a:14:c4:
07:f9:e0:fd:cf:78:e1:20:d8:7b:11:1d:7f:90:6b:
c2:05:93:dd:81:f8:5a:7d:7b:fc:a2:3a:e0:f4:b2:
96:54:74:f7:6d:21:60:3e:62:e3:7d:1d:90:10:57:
6a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7D:B5:DD:BE:1D:5F:21:5F:9E:59:FC:5B:0E:79:87:41:65:10:14
X509v3 Authority Key Identifier:
keyid:4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/5n213b4dXyFfnln8Ww55h0FlEBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.136.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:b6:f2:0d:6f:03:1a:7c:39:7e:aa:02:2c:ee:07:1a:88:48:
c5:63:75:1e:26:31:bd:7a:ab:76:42:05:44:86:63:5c:c1:07:
a1:0b:9b:0a:76:8f:58:b9:3f:11:26:df:6f:f6:95:4b:89:08:
9f:12:eb:c7:04:8d:90:c4:3e:9f:87:cb:73:26:13:0f:69:4b:
68:d2:c8:51:23:8d:93:99:98:aa:8c:ce:58:ea:a5:82:8b:76:
0e:e0:c3:48:6a:8b:1b:f0:16:78:8b:79:82:a1:87:ad:92:5b:
0c:be:cd:51:28:9d:ae:e6:70:37:f8:e0:f8:6f:f7:3b:0f:33:
fb:f7:78:2b:54:c6:7c:88:3b:d8:eb:47:9a:50:50:aa:95:1e:
01:a3:88:3f:bf:62:6f:9e:a6:b0:7b:35:94:05:33:f2:57:d3:
a2:e6:54:9d:26:12:be:83:dc:42:3a:ae:af:b0:9d:f2:18:a9:
88:cb:5b:4b:52:e2:47:0d:f8:dd:3c:bc:c2:17:1a:5a:0e:8a:
7e:b3:f6:c6:6b:af:c6:f9:4f:b8:f5:9e:97:4e:ec:ab:5b:64:
46:a8:dd:06:58:2f:2d:cf:a3:89:e5:97:ab:0a:0f:f0:e2:d0:
db:dd:02:5b:5c:d9:d5:79:a8:ae:f4:fe:e0:45:83:04:1c:a9:
b7:40:73:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:46 2024 by rpki-client on console-ams.rpki-client.org