Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/gG8IJqiT20QNairK1XGdK5cWtRk.roa
File: gG8IJqiT20QNairK1XGdK5cWtRk.roa (raw, json)
Hash identifier: 1zOms+Ouv4h5Kjk7nYFkowtyC6RIgOIpWuWGrZsOF1A=
Subject key identifier: 80:6F:08:26:A8:93:DB:44:0D:6A:2A:CA:D5:71:9D:2B:97:16:B5:19
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 0145399B
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/gG8IJqiT20QNairK1XGdK5cWtRk.roa
Signing time: Tue 28 Jun 2022 09:54:02 +0000
ROA not before: Tue 28 Jun 2022 09:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 146.19.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21313947 (0x145399b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jun 28 09:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=806f0826a893db440d6a2acad5719d2b9716b519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c5:0e:2b:c6:f0:b5:03:2f:5d:a4:0c:15:ad:
88:42:86:86:3d:1a:75:ba:87:7c:ae:0f:9b:ca:c2:
c1:30:66:ba:0c:df:c9:5a:6f:c7:47:0e:d5:35:73:
e5:60:d3:6a:56:3c:11:4d:24:3d:a2:e7:ce:3d:0c:
b3:3f:17:3c:57:58:f7:63:77:5a:4d:88:bd:4e:ca:
88:ac:de:ab:22:ec:46:ec:4f:5c:c3:9a:6f:16:ce:
8f:4a:15:91:7d:72:bb:a1:b0:d9:01:6d:99:6d:56:
05:2d:20:b2:d9:d8:06:fa:46:ad:b0:62:ee:32:6d:
f6:53:b2:7a:8e:17:95:6a:88:18:e5:e7:3a:89:50:
d2:05:93:12:61:cd:19:52:d8:32:f0:93:1d:4e:5c:
7a:f1:1f:7b:a3:2d:07:6a:47:be:76:9a:a9:aa:0f:
d8:69:87:2d:21:be:5c:a2:6e:13:2a:68:16:08:9a:
a0:50:cc:35:c7:82:77:98:85:24:56:77:6a:e1:9c:
b2:b7:d1:3a:fe:1a:94:de:2a:b4:ea:1a:e7:ee:2b:
11:41:b6:9f:43:d8:90:1d:17:8b:6d:20:40:35:70:
3b:2f:3f:b0:05:27:79:e2:31:5f:51:36:d3:9c:8f:
df:4b:26:43:0e:a3:20:84:9b:8b:93:7f:b6:44:1b:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6F:08:26:A8:93:DB:44:0D:6A:2A:CA:D5:71:9D:2B:97:16:B5:19
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/gG8IJqiT20QNairK1XGdK5cWtRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.85.0/24
Signature Algorithm: sha256WithRSAEncryption
81:5f:fd:e3:1c:35:f4:fa:02:22:f6:f0:51:57:c5:1e:ae:a4:
1f:db:3a:31:71:8a:40:3a:b5:a3:4e:4a:80:ed:22:f6:d8:aa:
a2:d4:40:e6:e0:a6:54:ae:55:cd:44:28:fa:dd:c5:27:bd:c6:
89:d2:c8:60:f7:67:4b:bf:0f:1d:d9:1f:92:47:8c:52:30:e5:
3c:76:b8:4c:c0:cf:b2:9a:e5:09:8c:bc:63:81:db:55:27:76:
b5:32:cc:f1:93:d6:95:6c:5a:ef:31:80:38:2b:61:4d:88:94:
4a:8c:3a:3f:9c:2c:9c:51:79:bb:05:fb:16:0e:54:37:b6:14:
b3:7b:23:6a:2a:3f:2c:30:e4:95:c5:53:d2:f5:ce:8c:c5:39:
ac:ce:95:01:35:78:be:bc:49:10:57:11:24:1f:b0:3b:1a:0c:
95:ce:d4:37:cf:b6:c0:91:fe:c9:de:c9:7c:3b:57:4e:5b:75:
a9:47:a8:14:2b:57:99:02:8a:4c:a4:35:6f:11:58:ad:14:ed:
8c:ce:b2:f3:63:f1:1f:58:bb:e7:5d:f3:11:c9:3b:42:03:d3:
c0:80:ab:9b:d1:6b:c6:2a:05:ae:a7:a0:09:a6:2c:0b:39:43:
1a:86:2b:3f:57:15:ba:75:66:99:60:98:82:42:d6:8a:23:94:
32:ac:57:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:03 2024 by rpki-client on console-ams.rpki-client.org