Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/a8vY8uSka2i3vgYa5MdPwQA0Mok.roa
File: a8vY8uSka2i3vgYa5MdPwQA0Mok.roa (raw, json)
Hash identifier: oWyKzXe38BD61truVxbvoqSYM5vsqi/bbq1tY4Eo/uU=
Subject key identifier: 6B:CB:D8:F2:E4:A4:6B:68:B7:BE:06:1A:E4:C7:4F:C1:00:34:32:89
Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Certificate serial: 54B9C3
Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/a8vY8uSka2i3vgYa5MdPwQA0Mok.roa
Signing time: Sat 01 Jan 2022 00:56:33 +0000
ROA not before: Sat 01 Jan 2022 00:56:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210491
IP address blocks: 146.19.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5552579 (0x54b9c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Validity
Not Before: Jan 1 00:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bcbd8f2e4a46b68b7be061ae4c74fc100343289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:f3:0e:1f:0d:fb:05:13:8d:f5:bd:97:c4:
43:ef:1b:5a:94:e4:30:b6:6f:e6:8d:7e:bb:a2:1f:
8e:45:3a:ba:71:23:b9:82:38:3e:c7:0c:5c:24:e2:
86:47:e7:95:21:3f:0f:0c:c3:16:8c:ec:e4:a5:aa:
f2:2a:50:a2:41:ae:ba:57:f8:c5:2a:ea:54:8a:80:
73:68:55:80:7b:88:92:34:08:6b:e4:a2:44:48:dc:
3f:90:71:ba:d4:83:4c:a9:b2:8c:fd:d0:b5:43:c0:
fa:f1:67:0a:98:5a:96:5e:4c:48:4b:99:0b:2b:46:
55:a2:d3:4b:ed:27:81:cd:54:cf:9e:6b:51:c8:d1:
fb:58:55:8e:13:b6:ac:27:c2:ac:88:72:05:04:a2:
b8:06:8b:7e:f6:9a:2e:99:b7:bc:a0:10:a6:df:4d:
e5:f4:aa:fe:75:d6:8c:14:b2:fd:b0:a0:71:f0:c5:
26:a5:95:9b:65:c4:4b:c9:3f:32:d9:17:fa:b0:90:
cd:47:55:a9:d5:50:43:fc:0e:99:54:a9:7f:03:7c:
f5:c2:e5:d3:8c:af:12:b1:14:76:97:4a:6f:5b:1f:
55:4b:a9:80:53:94:35:d3:0a:ec:bb:19:52:15:5a:
c3:2a:90:f7:21:ac:ee:96:3d:ef:06:b7:4b:54:b3:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CB:D8:F2:E4:A4:6B:68:B7:BE:06:1A:E4:C7:4F:C1:00:34:32:89
X509v3 Authority Key Identifier:
keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/a8vY8uSka2i3vgYa5MdPwQA0Mok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.58.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:4e:dd:63:ed:60:c0:79:41:cd:9a:21:68:c6:ef:7d:52:ab:
a5:af:b8:93:73:29:2e:ef:17:99:1d:ac:5a:5c:1e:3e:25:f6:
ae:93:94:12:5f:32:0e:e0:73:1b:ae:cc:73:8b:c0:02:5d:fe:
c0:56:2c:2a:b2:f1:79:49:a5:3b:7f:e4:23:f2:ef:0a:cb:17:
1c:c1:e0:8e:70:4b:0b:28:e6:66:08:e4:7b:85:a6:8e:9f:9e:
46:3d:8c:f5:57:85:88:ec:3c:0d:5e:e9:25:4b:9b:75:a9:7b:
f5:fd:57:9d:db:46:00:aa:c8:5d:28:42:7c:9c:e1:e9:50:31:
72:14:65:cc:6a:89:0b:8d:28:e2:62:7c:ed:5f:87:72:24:21:
28:33:9f:48:d0:13:d6:fc:42:1d:ae:97:87:20:9a:69:23:0d:
0b:64:4a:65:d6:db:21:7e:94:b4:57:3a:cf:58:6e:e2:05:f7:
b9:ed:78:62:87:6f:c5:42:d4:94:33:ea:fb:40:79:ac:26:50:
b9:19:ad:05:55:76:17:3a:f2:7f:3c:6d:71:d1:7b:06:71:77:
79:21:0b:90:e3:c5:68:73:e2:69:f5:c2:5d:49:d2:1c:ec:2f:
45:f4:84:c6:e4:e5:ab:5e:38:58:5f:36:b2:c1:4f:bf:55:df:
ba:8b:b2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:33 2024 by rpki-client on console-ams.rpki-client.org