Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/781REshQ0qg1MIPQsCE8gkd-hHY.roa
File: 781REshQ0qg1MIPQsCE8gkd-hHY.roa (raw, json)
Hash identifier: 12Bn/qEw1to+rvgXlMnoTEEd+k/zKGLrVUXcmhpIC6U=
Subject key identifier: EF:CD:51:12:C8:50:D2:A8:35:30:83:D0:B0:21:3C:82:47:7E:84:76
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0184679B06DC3EC5EC95826504DADE7DC47D
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/781REshQ0qg1MIPQsCE8gkd-hHY.roa
Signing time: Fri 11 Nov 2022 16:52:03 +0000
ROA not before: Fri 11 Nov 2022 16:52:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 146.247.111.0/24 maxlen: 24
146.247.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:67:9b:06:dc:3e:c5:ec:95:82:65:04:da:de:7d:c4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Nov 11 16:52:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efcd5112c850d2a8353083d0b0213c82477e8476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:97:2f:47:41:9a:b7:f2:43:5e:dd:67:e8:2d:
33:cd:fb:bd:f1:b9:c4:8b:3a:c1:b9:28:9b:e9:2d:
fd:08:92:34:ea:68:9a:66:34:a5:eb:3d:6e:8a:9e:
c0:1c:b8:a4:2e:76:55:57:44:7c:b2:bf:5e:82:f4:
d3:d5:8f:d2:dd:f8:99:90:25:f6:26:f7:3e:60:f1:
a2:2e:e4:09:68:16:a2:e5:5e:c2:27:42:de:ae:7d:
f4:b2:36:d2:3d:02:7b:aa:28:ab:a2:e8:fd:89:2c:
42:6f:f2:11:96:52:d8:b5:36:53:e5:3f:a7:bd:99:
32:af:3e:a5:e4:06:a2:f2:b0:8f:2a:6f:3b:b5:c0:
29:45:92:61:99:69:fb:0c:86:68:0a:84:a9:ef:6d:
2b:bb:9a:6c:19:11:3f:c9:0f:a8:e1:95:9b:2a:d2:
82:1d:a4:72:10:71:1a:0c:6c:27:84:e6:53:bb:4d:
27:74:dc:a7:7c:0a:8f:d9:50:40:1b:45:8a:03:a4:
b5:ec:91:61:91:22:8f:82:36:fa:54:17:3a:6f:1e:
02:da:43:5f:41:09:06:57:a9:1a:55:07:66:9e:bd:
4e:e3:65:0b:80:01:39:0d:23:45:11:95:32:eb:43:
a6:d5:3d:c9:1b:2e:53:19:51:e4:16:09:1e:bc:15:
ee:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CD:51:12:C8:50:D2:A8:35:30:83:D0:B0:21:3C:82:47:7E:84:76
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/781REshQ0qg1MIPQsCE8gkd-hHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.110.0/23
Signature Algorithm: sha256WithRSAEncryption
43:f0:0c:6b:f9:9f:93:0d:3f:be:e1:0d:bb:69:59:c7:0a:75:
23:f8:9a:4a:4f:fd:6f:ed:62:0e:8b:9e:0e:93:3b:3c:24:0b:
d4:d2:c1:af:27:68:f6:35:0d:53:35:7e:7d:47:75:41:db:1a:
37:fa:60:a5:3b:95:2d:a6:97:19:1b:4b:60:d2:74:da:b2:1c:
7b:23:be:60:3d:e7:7f:b7:d3:f4:14:f6:60:ab:b6:21:43:73:
bf:42:03:40:00:17:1f:2c:96:70:89:22:1c:c1:dd:84:9f:97:
cc:79:14:e8:82:5a:4b:15:a2:7f:15:63:48:5f:aa:cb:7a:87:
0b:2a:bc:cc:c7:93:1a:7d:ef:2f:0b:21:37:2d:a3:b2:1c:5c:
51:66:6c:41:7c:9b:0d:5c:e3:f4:58:58:1c:97:21:98:50:88:
56:9b:d9:8c:8c:11:66:f5:b7:82:41:c5:8d:e2:c5:4d:a2:57:
eb:a5:c3:2f:63:cb:bc:e0:03:ae:e1:91:36:7d:aa:ae:aa:fe:
e4:69:fe:01:d3:51:6c:d5:29:82:b0:be:a7:46:07:2c:59:bc:
50:d2:1f:03:8f:e6:f8:e5:d0:68:4d:e2:68:0d:5b:95:c7:c2:
6f:fa:84:42:db:29:d4:79:b5:07:58:bc:b4:c5:32:b5:41:6a:
1b:55:57:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:42 2023 by rpki-client on console-fra.rpki-client.org