Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/9vjATvRtBuFn4XWkRhLjei_x6Sk.roa
File: 9vjATvRtBuFn4XWkRhLjei_x6Sk.roa (raw, json)
Hash identifier: VhpZF18/vNObZrlufONRpJdbg1jN4rVp6sK4FJWH3Hc=
Subject key identifier: F6:F8:C0:4E:F4:6D:06:E1:67:E1:75:A4:46:12:E3:7A:2F:F1:E9:29
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01848B7E86DE24F47D697075F688DC1FEB72
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/9vjATvRtBuFn4XWkRhLjei_x6Sk.roa
Signing time: Fri 18 Nov 2022 16:07:15 +0000
ROA not before: Fri 18 Nov 2022 16:07:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 146.247.109.0/24 maxlen: 24
146.247.120.0/24 maxlen: 24
146.247.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8b:7e:86:de:24:f4:7d:69:70:75:f6:88:dc:1f:eb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Nov 18 16:07:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6f8c04ef46d06e167e175a44612e37a2ff1e929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4a:a2:74:2e:76:67:c8:b0:af:11:10:d7:f4:
84:d2:b1:dd:d7:6d:74:3f:31:19:5b:6e:de:bd:78:
ae:65:97:51:50:e6:8b:2a:15:81:91:29:61:80:24:
01:96:0b:53:28:a7:dc:55:07:83:31:e3:84:90:3f:
39:1c:ae:21:0e:f5:b2:50:fb:3a:8e:9c:da:02:fe:
02:97:86:95:26:d2:c1:8b:91:10:fa:44:5c:6f:d9:
ab:d5:6b:98:bb:ff:c7:b6:73:d7:c0:3d:d5:8a:e3:
97:d3:d9:8f:73:ed:19:4f:88:ed:8b:9f:02:9e:2b:
64:14:2d:af:11:fc:4e:4a:a0:aa:a9:2e:a9:8c:3a:
98:e7:55:6d:b9:ce:9d:b6:83:21:d5:16:b7:5b:14:
0e:0e:3f:43:7d:5a:07:a3:b8:65:df:47:49:1e:6c:
2d:fd:94:8b:dd:3a:08:32:68:6a:b4:49:b0:97:9d:
6e:b3:3c:81:9b:35:68:f5:b8:40:bd:cc:5c:19:5f:
1c:5e:95:74:6b:e4:e0:5c:62:d2:59:c3:9c:d6:aa:
c8:29:83:06:77:5a:ca:5a:5b:7a:8c:fe:45:e7:46:
71:55:ce:02:a4:4c:ec:a3:ab:23:b0:76:02:e4:13:
5e:39:f9:de:04:e4:74:73:54:77:1c:1d:e4:03:71:
f8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F8:C0:4E:F4:6D:06:E1:67:E1:75:A4:46:12:E3:7A:2F:F1:E9:29
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/9vjATvRtBuFn4XWkRhLjei_x6Sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.109.0/24
146.247.120.0/24
146.247.125.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:16:00:79:a4:86:79:17:f2:23:0a:6d:e3:1e:13:47:f3:7a:
7e:47:7b:f5:cd:7f:9c:29:e6:88:69:39:dc:4c:5f:fe:ce:9c:
ed:b1:bb:86:f0:76:64:6f:5f:0e:e7:10:a5:cc:d4:c6:19:0e:
87:de:0e:dd:53:a0:20:c2:3b:a7:9d:25:7b:49:f2:ab:3c:0e:
36:38:b1:f0:de:7b:2f:5e:3a:ec:03:1c:4f:1d:d9:03:5c:ad:
61:c3:bf:16:bd:4c:f4:00:de:3d:d1:89:3f:cd:de:a3:94:4c:
74:e2:1f:2d:ba:1a:b2:ed:bc:41:ba:c4:06:91:1c:13:b1:3c:
1e:83:0a:c2:a4:aa:a7:18:e5:60:3d:15:19:13:cc:a4:2c:cf:
20:87:85:e4:93:7b:7a:4c:60:d9:2e:dc:d5:84:8c:7c:46:87:
5d:fe:8a:d5:02:0d:e2:a5:ec:31:b9:e0:b0:a4:6e:7d:43:e0:
0f:dc:e5:2a:56:11:6a:b3:38:b4:14:71:1c:86:da:cd:bb:e1:
ff:b0:67:d6:b4:26:c0:c6:c6:9c:ca:f3:ba:98:be:2b:d5:c2:
69:c4:06:16:1b:09:44:ff:a3:4f:b5:46:21:bb:ce:cc:67:79:
a1:cf:c6:91:ea:53:17:72:3b:de:d8:2a:16:69:d6:1e:8b:7b:
1a:07:07:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org