Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/84u9rBhPgRW9iicU5_A7mCkJ3n8.roa
File: 84u9rBhPgRW9iicU5_A7mCkJ3n8.roa (raw, json)
Hash identifier: F6gJvHDRTBmBlF1cMhZ3/6d9bEhFi+eywwDiESbAyH8=
Subject key identifier: F3:8B:BD:AC:18:4F:81:15:BD:8A:27:14:E7:F0:3B:98:29:09:DE:7F
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0184AA9AA4A85E651B9C64B94EBB235B749C
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/84u9rBhPgRW9iicU5_A7mCkJ3n8.roa
Signing time: Thu 24 Nov 2022 17:06:12 +0000
ROA not before: Thu 24 Nov 2022 17:06:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 146.247.104.0/24 maxlen: 24
146.247.108.0/24 maxlen: 24
146.247.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:aa:9a:a4:a8:5e:65:1b:9c:64:b9:4e:bb:23:5b:74:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Nov 24 17:06:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f38bbdac184f8115bd8a2714e7f03b982909de7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:f2:8a:09:da:47:4f:52:2b:09:25:e3:c1:
37:87:4a:af:eb:d0:95:62:78:9d:38:e7:b0:95:a1:
d7:88:03:e8:5d:0e:b4:72:3b:9b:aa:1d:8a:f7:44:
f5:64:35:d0:f6:b5:ae:75:84:48:34:2f:d8:05:41:
06:c6:62:f3:6d:1d:00:b6:3d:27:21:9e:88:93:5e:
0e:8f:17:af:0a:51:73:a3:92:f0:d5:4c:b5:20:a7:
94:79:80:82:85:35:23:36:05:64:3d:ea:9c:7e:82:
e1:6a:4f:72:7b:3b:93:dc:9b:69:c7:93:83:94:e5:
6e:ef:e5:d8:61:c3:19:13:a2:ec:a6:af:c8:47:8e:
9e:7e:92:c7:d2:b3:60:f6:68:cb:ed:12:51:89:1a:
a3:1a:af:b2:e0:34:a0:34:f5:15:23:b0:6d:2c:cc:
72:0a:2c:c9:5e:30:a0:3c:ed:cb:91:87:18:ac:90:
a3:25:62:6f:4c:ab:c1:14:db:d9:cb:f4:09:e8:e7:
fd:51:ac:f2:e7:ae:35:27:08:0f:6f:0d:88:c2:5c:
b7:23:d5:99:eb:4d:66:3b:56:a0:da:d9:1f:14:36:
78:dd:0d:43:f4:b4:84:eb:05:72:42:62:d2:d9:92:
bb:e6:70:0b:0d:0d:8e:1e:b1:28:3e:4f:09:60:95:
cc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8B:BD:AC:18:4F:81:15:BD:8A:27:14:E7:F0:3B:98:29:09:DE:7F
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/84u9rBhPgRW9iicU5_A7mCkJ3n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.104.0/24
146.247.108.0/24
146.247.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:cd:97:f7:88:cc:61:85:a6:12:44:31:9a:ef:79:dd:5f:cc:
10:e0:17:5a:e6:dc:df:59:10:7a:2a:a5:ad:1f:5c:06:16:7f:
0a:49:34:95:95:87:1a:f8:de:f4:c5:f1:39:dd:fe:84:85:07:
95:33:1e:d2:51:69:f5:bf:17:40:dd:fc:12:e2:30:2c:54:1b:
7f:85:fd:62:5e:76:2b:3d:f6:94:d9:8a:77:16:40:93:30:21:
04:d8:09:21:1b:b2:d7:7c:07:07:19:90:2e:86:c3:52:84:4d:
fa:79:70:06:d5:06:97:18:99:f5:4c:34:f9:99:0f:5c:f4:08:
da:80:00:06:c5:0e:82:81:92:0a:e9:9e:e9:20:0a:cd:18:51:
83:2e:71:5a:2f:d5:0c:ec:33:8e:a2:92:b4:28:4e:07:2e:b9:
9b:11:ca:33:5e:f5:94:31:9d:57:e6:70:7b:f4:67:e3:fc:55:
bf:72:76:4b:ca:42:79:bb:21:1f:51:f6:b1:cd:d1:07:ad:04:
44:69:fd:28:56:3e:5a:af:ec:46:fe:b2:fb:39:e8:b2:c0:05:
d7:2e:95:fd:cf:ed:eb:60:78:13:d3:82:d4:cf:cf:bb:08:f9:
bd:d5:0f:14:f9:0b:a4:06:82:d3:61:2b:d8:03:de:aa:50:84:
74:eb:37:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:42 2023 by rpki-client on console-fra.rpki-client.org