Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/9-i8NKU5o21YpSOur2os25UdeWY.roa
File: 9-i8NKU5o21YpSOur2os25UdeWY.roa (raw, json)
Hash identifier: y5WjMmQPCeDyea4uItB4Bibu82e7DehpKWZOcvQAzG0=
Subject key identifier: F7:E8:BC:34:A5:39:A3:6D:58:A5:23:AE:AF:6A:2C:DB:95:1D:79:66
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0182893EF2F117C119FA84DD636C173CAC71
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/9-i8NKU5o21YpSOur2os25UdeWY.roa
Signing time: Wed 10 Aug 2022 19:33:00 +0000
ROA not before: Wed 10 Aug 2022 19:33:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.103.0/24 maxlen: 24
146.247.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:89:3e:f2:f1:17:c1:19:fa:84:dd:63:6c:17:3c:ac:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Aug 10 19:33:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7e8bc34a539a36d58a523aeaf6a2cdb951d7966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:73:11:09:ba:78:49:4c:17:5a:d7:08:9f:fa:
84:32:16:0f:c3:ef:e0:a6:d9:e2:be:96:28:30:ab:
42:c0:76:01:e1:3e:e5:ef:8a:f9:87:8a:43:09:95:
52:20:cc:fd:c3:50:ce:e4:99:42:f9:30:d2:3f:ae:
29:b1:18:37:0f:db:ec:61:8a:3a:08:d7:f0:84:e1:
8d:cb:0e:eb:3c:ac:45:1b:cd:eb:7b:35:5c:09:c3:
a7:28:88:0c:ff:bc:b8:eb:10:88:46:ff:3a:36:9e:
2e:0d:ec:fc:ae:c0:72:8c:d8:3d:39:56:84:db:56:
df:c8:5b:21:e7:19:dd:53:76:d4:e1:fb:f5:02:3e:
ae:2b:17:23:99:e6:8d:01:7f:45:c4:a6:8f:c9:e1:
8e:ca:ac:5e:7d:c8:07:19:34:21:99:75:47:27:fc:
07:4e:f2:f0:94:a8:ad:0e:a8:2e:83:01:3f:5f:38:
cd:54:f6:de:b1:94:10:27:0c:6b:69:1d:36:43:9a:
90:7d:d0:66:d1:eb:66:5b:43:6f:b0:8b:fc:f3:ac:
fd:b1:d7:aa:72:0f:cf:b9:6a:0d:35:27:f9:67:63:
ab:f2:ac:69:a8:6d:45:b2:21:98:9f:90:4e:2a:c2:
68:a0:81:04:2a:33:a1:b5:c5:09:69:fd:8d:fa:47:
3f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E8:BC:34:A5:39:A3:6D:58:A5:23:AE:AF:6A:2C:DB:95:1D:79:66
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/9-i8NKU5o21YpSOur2os25UdeWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.103.0/24
146.247.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:77:16:59:d8:ef:cd:7c:25:20:73:ec:f6:c5:8e:38:39:c7:
b6:1f:09:d0:01:d9:f9:0e:89:7c:2f:f1:e8:95:bb:55:f4:d5:
73:8f:68:03:79:29:50:4b:1e:74:69:c2:62:fc:cd:0e:04:5f:
14:53:de:a7:03:7e:a5:45:be:da:a5:6b:4e:e2:07:b4:33:57:
64:59:2d:22:97:a0:32:3c:9e:35:c1:9b:71:98:ad:0b:53:dc:
83:d4:18:01:38:97:4f:39:69:18:c1:2d:50:4c:42:98:9c:61:
d1:d1:2c:52:35:1b:cc:37:67:4f:df:54:93:24:0f:ae:6f:69:
8b:33:3e:5d:62:f7:9e:37:d6:0a:75:25:1c:26:39:5d:50:ed:
9c:59:2c:d5:61:24:a7:34:72:a9:92:e1:10:3e:53:96:cf:78:
c5:b9:f9:3c:32:4e:05:ab:ab:f2:36:4a:55:05:26:0c:b1:f4:
09:cc:9f:58:69:fd:16:f8:93:31:78:da:65:77:35:03:e6:18:
43:24:ec:43:f7:28:a6:cf:aa:29:44:07:b4:8c:a0:c6:ac:93:
01:cf:9c:02:00:3c:11:68:cb:2c:62:99:04:da:43:49:bc:c0:
e3:3a:fa:c4:34:cd:4f:8c:e8:ca:fd:32:7e:01:63:76:31:2c:
07:5a:14:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:42 2023 by rpki-client on console-fra.rpki-client.org