Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/T4e9nFvFWMPJckhMgKCdv1rG1BM.roa
File: T4e9nFvFWMPJckhMgKCdv1rG1BM.roa (raw, json)
Hash identifier: 97yCPUtaskN1S1hSzQRjyvRbAmYARba6YjOOOT1o22s=
Subject key identifier: 4F:87:BD:9C:5B:C5:58:C3:C9:72:48:4C:80:A0:9D:BF:5A:C6:D4:13
Certificate issuer: /CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
Certificate serial: 0184AE5CDAC237B4132E782A5FD7C5111BFA
Authority key identifier: 4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/T4e9nFvFWMPJckhMgKCdv1rG1BM.roa
Signing time: Fri 25 Nov 2022 10:37:11 +0000
ROA not before: Fri 25 Nov 2022 10:37:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 559
IP address blocks: 146.136.0.0/16 maxlen: 16
152.96.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ae:5c:da:c2:37:b4:13:2e:78:2a:5f:d7:c5:11:1b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
Validity
Not Before: Nov 25 10:37:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f87bd9c5bc558c3c972484c80a09dbf5ac6d413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:28:84:38:fe:80:60:87:a7:dc:0d:df:04:
e1:c7:39:c0:f6:0a:01:30:87:5c:70:25:ef:96:c0:
60:29:d6:3b:cc:75:69:3d:9e:f1:96:2f:a8:a5:6d:
e8:87:64:81:47:5a:1e:97:22:0b:14:9a:4d:3c:a2:
ef:67:22:0a:18:ae:a6:a1:43:f5:f9:bd:c9:ce:00:
77:66:9d:d7:73:79:2a:df:a4:67:36:b6:bc:61:83:
ad:b0:7d:ca:63:2c:eb:28:15:cb:7c:ec:95:8e:11:
de:6d:19:90:0d:9c:9f:f9:2e:5c:c0:9d:01:2d:1b:
91:92:0f:4b:64:15:20:fd:fc:e3:62:b1:dc:38:bb:
d1:cd:01:10:59:e6:52:ff:16:52:23:ac:57:ad:3b:
b2:d9:df:38:40:08:63:fd:c6:d7:a0:2a:cf:3a:62:
1c:c3:b2:61:08:af:ce:36:85:c9:33:15:f1:0f:f4:
7c:35:15:af:22:a3:c2:7c:7f:53:73:76:33:98:aa:
8f:17:4a:e7:20:f1:59:e1:6e:a5:db:e8:33:40:b6:
58:f7:9d:9c:1e:6a:e9:f8:52:fc:fa:ea:31:92:82:
8d:d6:49:ad:bf:1e:c7:7e:5a:c3:7a:98:91:dd:fc:
9d:40:09:8d:37:bd:ca:92:d0:16:3f:c9:13:68:0d:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:87:BD:9C:5B:C5:58:C3:C9:72:48:4C:80:A0:9D:BF:5A:C6:D4:13
X509v3 Authority Key Identifier:
keyid:4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/T4e9nFvFWMPJckhMgKCdv1rG1BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.136.0.0/16
152.96.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:1f:d1:d6:73:7f:a1:9d:92:17:0c:77:bf:f4:1a:a1:30:bb:
45:7c:a1:7e:07:35:5e:7b:db:85:60:0a:b1:f8:ab:53:a2:64:
67:71:a0:5a:ef:cc:c1:b1:3d:8a:bf:ef:b6:88:9b:68:2b:44:
4d:10:ed:8c:da:72:6f:41:00:28:4a:a7:e3:29:cd:7b:86:db:
eb:96:43:4f:00:b3:a9:8f:2e:ab:c1:ba:da:38:f5:f7:69:0c:
6f:1e:bf:ac:85:09:82:48:f5:1c:47:5a:36:cb:c2:2c:3d:25:
0f:aa:ed:94:12:17:30:0f:eb:47:de:49:96:f3:ed:de:f9:de:
ea:31:4a:32:78:ae:9f:98:46:e1:be:4a:0b:0b:09:d5:9d:5a:
54:08:b0:36:d5:50:5c:d4:a1:e1:01:bb:b7:88:72:c4:b8:9e:
0c:1c:27:9c:11:a9:42:2d:05:f0:b1:59:7d:f0:10:d6:35:b1:
e2:30:95:ef:05:e6:70:48:dc:da:80:fb:b5:6c:f0:ea:34:f0:
cb:40:19:00:ef:19:35:4b:5a:18:7e:68:20:81:38:10:70:e6:
64:bb:c4:45:05:c5:e5:58:51:21:bf:33:df:a3:d9:6d:e3:a6:
b0:84:6e:bb:f4:1d:68:ce:8d:5b:87:66:5d:11:d8:d6:16:bc:
84:0e:7d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:39 2024 by rpki-client on console-fra.rpki-client.org