Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/96dtpAATYoFayvzgm7UGcO7_B_M.roa
File: 96dtpAATYoFayvzgm7UGcO7_B_M.roa (raw, json)
Hash identifier: AUwEh6dAy5GF5FQE1B0A9VSEO6nPgmmjE52GsMf+xkw=
Subject key identifier: F7:A7:6D:A4:00:13:62:81:5A:CA:FC:E0:9B:B5:06:70:EE:FF:07:F3
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01843D4EDF6525EED67C89BDA8BB3E91FB52
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/96dtpAATYoFayvzgm7UGcO7_B_M.roa
Signing time: Thu 03 Nov 2022 11:44:49 +0000
ROA not before: Thu 03 Nov 2022 11:44:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 146.247.124.0/24 maxlen: 24
146.247.121.0/24 maxlen: 24
146.247.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3d:4e:df:65:25:ee:d6:7c:89:bd:a8:bb:3e:91:fb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Nov 3 11:44:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7a76da4001362815acafce09bb50670eeff07f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:a4:8b:fa:d7:1f:b7:e3:14:49:bf:94:44:
05:a7:0e:2b:6f:ca:fc:36:7d:f2:21:dd:e2:25:2e:
ad:0e:61:be:0b:f3:05:5f:8b:11:95:fe:99:1a:c1:
d4:31:c3:a8:3a:b8:34:ec:d9:11:b7:c5:92:7e:a8:
73:96:d7:f2:6b:17:f9:f1:c9:e6:8e:44:66:fb:3e:
08:de:ff:1f:7f:ff:41:d9:96:6b:81:5e:b5:df:51:
8e:ff:e1:8c:1e:28:c1:8f:d3:cd:de:0f:44:da:00:
ba:7e:d8:32:bf:b4:24:b8:1c:7e:98:97:8f:ea:37:
4a:df:8f:37:5f:a8:47:6b:e4:f6:23:56:48:58:4a:
5a:f6:0f:c3:42:70:d4:64:06:fe:f1:58:a7:c8:9b:
c2:58:19:e3:92:2b:60:5d:88:10:5c:32:69:13:7d:
9d:83:fa:1a:36:ad:a7:d8:cf:13:ab:04:b6:89:38:
5e:20:06:f5:a6:fd:e9:58:f2:0f:e4:fd:86:5d:a3:
93:9c:6d:d5:5d:41:83:08:44:bd:82:cc:6d:47:b9:
44:d0:10:95:8b:45:fb:2b:5c:a5:d0:5f:fd:d3:b4:
b0:18:92:dc:e6:f8:7e:64:9f:3a:9a:26:21:06:2b:
d3:a6:43:7f:dc:37:ec:f3:a5:93:b1:6e:6f:83:de:
08:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A7:6D:A4:00:13:62:81:5A:CA:FC:E0:9B:B5:06:70:EE:FF:07:F3
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/96dtpAATYoFayvzgm7UGcO7_B_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.121.0/24
146.247.124.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:ea:4c:a1:01:60:46:05:7c:ee:c2:89:a5:b7:2d:50:a2:ca:
53:27:b0:92:a4:9d:03:6c:c7:ca:2f:f7:c5:3b:41:74:33:71:
0b:ce:41:a8:44:74:d0:09:9d:97:cc:d3:f2:de:5e:3f:80:57:
f6:73:2b:1f:54:95:da:39:98:24:0e:32:7d:55:a8:5d:03:24:
cf:25:e3:6a:29:71:19:b4:d4:6e:e8:f1:f5:43:7e:d0:c0:31:
61:25:b3:78:79:88:e8:c2:71:d5:c5:df:74:0f:29:8d:e5:c7:
fe:b6:4e:ae:c6:9b:9a:4d:71:0b:5f:24:a2:e1:b4:13:e1:ba:
f9:b9:89:e2:ba:3e:69:44:c1:a1:98:b5:24:1f:bb:c6:9d:9e:
c7:f4:0c:78:f6:9a:87:73:f1:5e:ec:2b:ef:1a:43:15:0c:d0:
57:09:5c:7d:cf:87:6c:f2:af:7c:2a:5c:4e:67:ce:59:29:81:
6a:d8:71:b9:58:3c:99:80:c1:f9:ae:62:12:54:ce:86:24:67:
72:be:e7:9f:a0:81:ce:0e:81:38:23:c7:55:63:d3:5c:63:20:
04:e4:84:c5:6d:2b:a9:d7:3e:05:1e:59:2b:17:45:64:7c:f6:
d5:a1:53:ca:5b:09:fd:1f:9f:2d:e8:bd:d9:42:25:95:f1:90:
ff:75:fc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:42 2023 by rpki-client on console-fra.rpki-client.org