Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/ArT7yPDu3Gfv2wKS7tga4777iA8.roa
File: ArT7yPDu3Gfv2wKS7tga4777iA8.roa (raw, json)
Hash identifier: dyCgRljsQ00b9QmPaoxGfryY6wqkK+3/67K0IWk8bNo=
Subject key identifier: 02:B4:FB:C8:F0:EE:DC:67:EF:DB:02:92:EE:D8:1A:E3:BE:FB:88:0F
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0183E5A2C7EA72DB4964C672634DE138A681
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/ArT7yPDu3Gfv2wKS7tga4777iA8.roa
Signing time: Mon 17 Oct 2022 11:09:53 +0000
ROA not before: Mon 17 Oct 2022 11:09:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 146.247.102.0/24 maxlen: 24
146.247.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e5:a2:c7:ea:72:db:49:64:c6:72:63:4d:e1:38:a6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Oct 17 11:09:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02b4fbc8f0eedc67efdb0292eed81ae3befb880f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:35:7c:92:2a:59:fe:c1:b6:0e:59:95:a0:76:
47:cb:e9:9e:b8:a2:c2:29:52:0e:70:f1:eb:61:d7:
bb:0d:e3:84:43:9f:ee:87:a0:61:f0:20:3d:e4:bc:
5d:18:c0:16:aa:b4:71:3c:66:cf:f3:29:6f:53:37:
d2:74:b1:48:ab:45:d9:fd:03:b5:93:48:c0:c3:d7:
9e:62:93:9d:9c:63:54:c1:73:53:dc:d4:74:eb:11:
09:a5:28:13:13:9b:c9:f0:12:62:0f:13:fb:00:c6:
98:43:0c:f0:2f:8c:67:b6:29:9e:e2:51:ca:cc:2f:
ab:30:62:11:1a:a1:fe:58:ce:49:85:30:4a:b6:d3:
a0:df:ed:7e:4b:f8:4d:93:3d:26:2d:c3:f0:b9:1e:
d9:b1:17:66:13:15:8b:58:a0:36:d0:a9:ea:fc:91:
e4:a0:3d:c9:aa:1b:aa:35:a1:78:3d:23:a2:a5:33:
7d:5e:84:04:a3:e9:bb:53:0b:56:be:f1:7a:8d:d6:
a9:59:7e:47:8a:cd:9d:d9:4b:74:72:d4:1e:2d:4f:
0e:79:ad:7c:f2:11:3d:68:f3:f0:83:2e:d5:28:ab:
54:eb:ad:97:f9:1f:70:4c:ac:3e:14:bd:e9:f3:b1:
7c:df:66:a4:48:42:4d:93:71:2b:07:3f:af:01:ed:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B4:FB:C8:F0:EE:DC:67:EF:DB:02:92:EE:D8:1A:E3:BE:FB:88:0F
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/ArT7yPDu3Gfv2wKS7tga4777iA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.102.0/24
146.247.107.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:38:c4:d0:4a:e6:45:4c:9e:86:ef:66:88:32:5d:07:f2:15:
2a:40:c2:02:ca:01:62:07:bd:93:c4:11:26:83:84:a9:77:12:
5b:16:42:d8:f4:32:27:ef:f2:e9:df:1a:a3:65:d5:91:3c:0a:
c9:2a:bd:0d:28:f8:c0:42:97:b6:91:72:ea:2e:4a:bf:c9:67:
af:29:e0:5a:f0:b9:36:2d:5b:61:5a:95:fb:23:a7:78:60:d0:
2a:3b:6b:b0:fa:6f:f3:fb:ac:4f:70:af:47:1b:24:9d:69:b4:
58:87:57:c9:9c:78:d9:ea:1b:51:e5:05:52:1e:1c:a5:62:bf:
ba:4b:d4:68:50:84:3b:df:ea:66:14:dd:36:76:fe:bc:3d:b6:
9d:df:11:c6:d8:88:37:02:95:7d:46:58:64:f6:94:1c:36:df:
fc:a9:1e:84:ec:06:1f:d4:9c:2c:c3:6d:56:d2:5b:fb:08:24:
59:6f:3f:ea:32:f2:ab:30:e9:9a:22:2e:32:70:2a:49:c6:7b:
6f:5d:59:27:02:d2:6d:04:02:89:90:05:27:39:f7:ad:f0:41:
fe:d2:6c:57:bf:3d:47:d2:ff:59:4c:b4:71:26:8b:81:80:93:
f5:bf:72:65:ca:c0:c3:45:71:da:2d:ab:c5:35:d4:8c:38:9e:
d7:4e:c7:3a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYPlosfqcttJZMZyY03hOKaBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjIxMDE3MTEwOTUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmI0ZmJjOGYwZWVkYzY3ZWZkYjAyOTJlZWQ4MWFlM2JlZmI4ODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTV8kipZ/sG2DlmVoHZHy+meuKLC
KVIOcPHrYde7DeOEQ5/uh6Bh8CA95LxdGMAWqrRxPGbP8ylvUzfSdLFIq0XZ/QO1
k0jAw9eeYpOdnGNUwXNT3NR06xEJpSgTE5vJ8BJiDxP7AMaYQwzwL4xntime4lHK
zC+rMGIRGqH+WM5JhTBKttOg3+1+S/hNkz0mLcPwuR7ZsRdmExWLWKA20Knq/JHk
oD3JqhuqNaF4PSOipTN9XoQEo+m7UwtWvvF6jdapWX5His2d2Ut0ctQeLU8Oea18
8hE9aPPwgy7VKKtU662X+R9wTKw+FL3p87F832akSEJNk3ErBz+vAe0+3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAK0+8jw7txn79sCku7YGuO++4gPMB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvQXJUN3lQRHUzR2Z2MndLUzd0Z2E0Nzc3aUE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkvdmAwQA
kvdrMA0GCSqGSIb3DQEBCwUAA4IBAQA/OMTQSuZFTJ6G72aIMl0H8hUqQMICygFi
B72TxBEmg4SpdxJbFkLY9DIn7/Lp3xqjZdWRPArJKr0NKPjAQpe2kXLqLkq/yWev
KeBa8Lk2LVthWpX7I6d4YNAqO2uw+m/z+6xPcK9HGySdabRYh1fJnHjZ6htR5QVS
HhylYr+6S9RoUIQ73+pmFN02dv68Pbad3xHG2Ig3ApV9Rlhk9pQcNt/8qR6E7AYf
1Jwsw21W0lv7CCRZbz/qMvKrMOmaIi4ycCpJxntvXVknAtJtBAKJkAUnOfet8EH+
0mxXvz1H0v9ZTLRxJouBgJP1v3JlysDDRXHaLavFNdSMOJ7XTsc6
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org