Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/6CpGQrJV96-ydH3MvD0zOfChO4A.roa
File: 6CpGQrJV96-ydH3MvD0zOfChO4A.roa (raw, json)
Hash identifier: mY5cv3DzygsomXwMX7CmBJoEYdCDE2MED+RPW5PzMCI=
Subject key identifier: E8:2A:46:42:B2:55:F7:AF:B2:74:7D:CC:BC:3D:33:39:F0:A1:3B:80
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01845E96AC4184CE30600984941AACCB35EC
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/6CpGQrJV96-ydH3MvD0zOfChO4A.roa
Signing time: Wed 09 Nov 2022 22:50:43 +0000
ROA not before: Wed 09 Nov 2022 22:50:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 146.247.109.0/24 maxlen: 24
146.247.120.0/24 maxlen: 24
146.247.121.0/24 maxlen: 24
146.247.124.0/24 maxlen: 24
146.247.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5e:96:ac:41:84:ce:30:60:09:84:94:1a:ac:cb:35:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Nov 9 22:50:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e82a4642b255f7afb2747dccbc3d3339f0a13b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:ee:d6:3d:7a:a0:9a:de:17:6b:c4:ad:76:
4a:5a:81:0b:5e:c8:e8:52:b5:8e:1c:f1:12:95:c2:
11:db:cf:3d:bd:49:55:20:51:48:cc:52:d1:3e:d9:
f6:a8:d6:a5:09:da:27:3c:26:74:3d:b1:11:0f:c7:
1c:ef:ae:b5:bb:a7:24:85:f1:05:f0:06:a1:6c:f6:
48:ed:97:11:07:e8:26:51:c8:a6:2a:24:34:c8:65:
9e:13:ae:83:42:9d:30:61:7d:7c:20:13:77:79:99:
8a:45:74:89:f9:0c:b7:a5:59:50:80:d6:a6:94:c1:
40:aa:66:c3:cc:1f:4f:8c:19:63:03:77:85:de:4b:
1c:ed:99:71:47:36:09:a2:16:c0:75:1a:c6:d4:b3:
8c:e3:89:2c:c5:ae:f1:e5:97:9b:11:3c:d5:6f:c2:
a4:98:5c:bd:ae:0c:3c:a4:39:47:7a:a0:bd:7e:1b:
47:e3:6f:6f:67:33:f2:2d:e2:21:1f:1e:3d:0c:0c:
0c:27:14:90:f4:43:75:13:65:54:9a:50:7b:a7:d2:
c4:44:c2:6f:67:45:5a:a0:6d:45:f5:5b:b2:91:bb:
37:e1:df:79:f4:59:65:f3:4a:19:8b:2a:d8:ee:fa:
f1:4e:84:5e:0e:30:34:dc:b6:b9:e8:db:1b:f3:6e:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2A:46:42:B2:55:F7:AF:B2:74:7D:CC:BC:3D:33:39:F0:A1:3B:80
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/6CpGQrJV96-ydH3MvD0zOfChO4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.109.0/24
146.247.120.0/23
146.247.124.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:9e:13:d4:35:84:35:91:6e:8e:52:e7:78:53:c2:ea:ad:45:
d5:f5:56:f7:ec:7a:7e:24:1d:8e:79:07:0f:65:5a:cb:a5:32:
d1:ce:f5:4d:62:af:71:60:46:dd:fe:d9:1a:9e:dd:b4:a3:1a:
ba:ed:20:72:f5:d1:f0:26:85:58:05:ce:96:99:30:e6:26:fc:
cf:3f:77:7e:5c:79:0c:a5:a8:f3:71:39:35:93:6f:bb:38:8a:
bb:be:75:ba:7d:6b:4d:65:c8:6e:54:c8:c3:76:1a:70:ae:21:
96:03:8b:8c:ae:d5:a8:07:b2:a5:0a:dd:49:59:22:35:59:95:
b4:0e:32:e0:aa:97:7e:62:ac:4b:f8:39:78:4e:ba:41:c1:46:
10:a4:3e:e2:0c:1b:c1:f6:97:dc:b2:4b:d1:07:36:e7:33:ac:
e3:24:72:71:75:60:1d:23:ae:8a:a9:7a:79:a7:a5:9d:16:14:
f3:7e:9f:d3:5c:9c:5d:f7:e7:86:46:d5:ca:36:b8:7f:7b:6c:
bb:a4:fb:32:71:02:e5:17:5d:65:fe:28:a9:2f:8d:25:51:16:
f4:9c:7b:5a:dd:6d:8f:a0:11:f6:78:56:51:ef:5e:41:3a:85:
7b:2c:d2:85:db:c5:ff:78:54:e1:2f:6a:c8:ce:39:a9:e4:05:
b4:7e:f8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:42 2023 by rpki-client on console-fra.rpki-client.org