Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/IXRGEV1LS0gDtyN77uzfxSkm1_0.roa
File: IXRGEV1LS0gDtyN77uzfxSkm1_0.roa (raw, json)
Hash identifier: 7/+HeDNgoyWoX0c8sqom7VKIjOKRmjATozpoU5sBGf0=
Subject key identifier: 21:74:46:11:5D:4B:4B:48:03:B7:23:7B:EE:EC:DF:C5:29:26:D7:FD
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 013602F2
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/IXRGEV1LS0gDtyN77uzfxSkm1_0.roa
Signing time: Tue 21 Jun 2022 10:09:44 +0000
ROA not before: Tue 21 Jun 2022 10:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.42.210.0/24 maxlen: 24
146.19.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20316914 (0x13602f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jun 21 10:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=217446115d4b4b4803b7237beeecdfc52926d7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:49:f2:64:9a:81:03:13:ca:30:a9:a2:41:
97:e8:5d:d0:4b:df:ec:7d:47:8f:80:ed:fb:6a:86:
03:a1:2a:6c:62:86:50:41:b6:7d:aa:e3:05:bc:ec:
47:bf:fb:72:ed:60:f1:12:d9:bd:10:d3:7e:f7:e5:
4d:c1:da:cb:79:b0:fb:42:4c:9a:1f:c3:80:2f:4e:
d3:a5:eb:09:48:d6:28:32:cb:cd:00:00:8d:e8:dc:
3b:64:91:d9:88:c3:69:d3:28:12:f3:42:84:89:e7:
d5:4d:a7:af:d4:81:68:99:1b:09:f5:57:8e:ca:0b:
32:6d:ca:d1:9b:72:17:b3:9d:5f:a8:c6:c4:eb:79:
fd:5c:4b:be:1e:c7:7f:69:e0:fb:03:61:6b:65:d6:
eb:71:ae:85:18:1c:31:06:b6:97:39:0f:74:8e:af:
c2:55:03:94:2f:7e:b0:76:ca:37:8e:32:3e:fe:a2:
dc:9b:59:3f:13:c5:14:2f:e6:80:66:9e:88:b3:4b:
30:3b:ae:47:bf:a8:f7:ae:de:8b:91:a4:3b:1a:ff:
bc:4b:09:89:47:fd:ff:9a:ff:32:4f:9f:64:d3:21:
16:bd:f2:6f:0e:46:28:f1:0d:87:47:1f:b0:6a:98:
f6:62:b8:54:69:56:5f:e2:af:24:0a:f2:28:eb:8f:
4e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:74:46:11:5D:4B:4B:48:03:B7:23:7B:EE:EC:DF:C5:29:26:D7:FD
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/IXRGEV1LS0gDtyN77uzfxSkm1_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.85.0/24
193.42.210.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:47:d9:b2:fc:9a:38:a7:bc:2b:0e:5e:1c:af:93:33:de:0b:
4c:0a:fc:a9:95:ea:94:4b:dc:c4:73:e2:1b:a0:03:75:1b:fe:
3b:35:ce:e4:4a:85:bf:af:97:48:bc:04:36:59:94:3a:92:d7:
60:99:19:95:62:d4:c3:97:39:e4:ad:52:c2:f5:6c:67:19:67:
da:ad:da:1e:08:47:be:28:5f:1d:6c:5f:9e:ae:2a:0a:30:b6:
4e:66:63:c3:5d:90:31:7e:93:0d:a4:09:7e:70:05:45:d5:90:
90:7d:54:a7:0e:ed:4c:77:65:be:03:bb:8d:1f:95:63:47:3d:
18:12:b0:ad:27:4e:c2:1d:81:86:28:09:54:e4:5a:a8:02:1e:
72:87:d6:05:ff:67:b4:e5:20:99:e3:fa:40:f2:3e:50:95:0a:
5f:03:2d:95:14:33:fe:b7:7e:6d:6b:40:45:5a:5b:49:79:88:
05:57:be:2a:86:10:d3:ca:47:ba:f0:f8:9c:6e:1f:cd:bb:cc:
1c:ab:4e:5a:fc:d1:c4:e1:6d:bf:e2:97:40:db:46:54:02:d1:
5c:cd:bb:ce:7a:b1:eb:ed:1a:b1:ca:2e:2c:89:4c:92:1b:58:
80:f9:f7:bf:31:28:a3:c1:92:f0:3a:64:7c:76:82:c1:29:f4:
83:24:48:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:26 2023 by rpki-client on console-ams.rpki-client.org