Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/CvzZIZpAIXPZFoDCdX1DdvGuVoQ.roa
File: CvzZIZpAIXPZFoDCdX1DdvGuVoQ.roa (raw, json)
Hash identifier: 4k3CXnec5EOBfgFl93YUioe8qed7saxEeJQ8xOY2QrM=
Subject key identifier: 0A:FC:D9:21:9A:40:21:73:D9:16:80:C2:75:7D:43:76:F1:AE:56:84
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0182EF5F1CFDF615DEAA4F78DB6C24644FFB
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/CvzZIZpAIXPZFoDCdX1DdvGuVoQ.roa
Signing time: Tue 30 Aug 2022 15:29:24 +0000
ROA not before: Tue 30 Aug 2022 15:29:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57037
IP address blocks: 146.247.102.0/24 maxlen: 24
146.247.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:5f:1c:fd:f6:15:de:aa:4f:78:db:6c:24:64:4f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Aug 30 15:29:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0afcd9219a402173d91680c2757d4376f1ae5684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:18:b6:a7:30:87:8d:89:99:1c:fd:5e:ea:
d5:ad:2a:32:b7:98:0e:6a:4f:71:d8:50:ed:34:21:
19:da:d8:fc:a1:ae:a7:ab:7b:8a:19:fd:7d:fd:36:
e0:f3:89:20:b7:ab:50:bc:7e:dd:c8:1c:16:a3:c1:
68:ea:a9:c6:0b:0c:e7:a3:87:6a:d9:88:01:8f:99:
b4:9a:b7:09:41:e5:a8:bd:e6:fb:b4:c1:2d:b2:2b:
cb:7c:d1:75:d4:53:c2:6c:b3:8e:88:2b:d5:9a:e6:
8b:8b:a8:5a:a1:81:c6:af:b7:69:e5:f5:5a:b2:64:
ea:a5:fd:25:7d:52:16:14:2c:c7:7d:40:99:15:1d:
28:81:a3:ac:b2:e1:b6:9f:10:d4:07:7e:01:99:28:
f8:8e:80:d4:c4:97:d6:b8:40:3a:98:ce:d3:db:04:
3c:69:5c:1c:3b:13:11:f2:a6:65:c3:0d:eb:d3:dd:
28:51:f9:b4:95:03:ab:69:08:83:61:c9:3f:c1:a0:
81:7e:8e:cf:a1:51:8a:24:8f:78:a5:e9:8a:82:95:
cc:11:5e:65:7d:4e:8e:69:b9:bc:45:1d:bf:dd:29:
b9:82:ef:84:ff:5b:64:00:2c:cd:1b:95:2f:b1:4c:
28:cb:dc:20:c0:8d:1a:ca:0d:8a:15:3c:28:24:73:
a3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FC:D9:21:9A:40:21:73:D9:16:80:C2:75:7D:43:76:F1:AE:56:84
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/CvzZIZpAIXPZFoDCdX1DdvGuVoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.101.0-146.247.102.255
Signature Algorithm: sha256WithRSAEncryption
20:e9:09:4f:55:76:fd:ab:3e:d8:04:eb:68:f2:f9:64:93:e2:
8d:16:0b:ac:89:25:1e:3c:69:2a:30:c9:da:31:aa:b5:8d:ec:
66:b3:4b:45:b8:d5:50:0a:f2:9b:a2:d7:0f:c1:26:f3:5d:ef:
02:2a:22:0a:68:f2:de:8b:a0:46:57:d0:bc:27:09:07:23:27:
27:93:cf:e3:1f:b8:72:df:64:48:e7:ab:30:53:f2:d8:ce:e1:
70:30:36:05:e7:f4:34:c3:bc:8f:bf:9c:85:ec:94:6a:95:42:
70:51:f0:c1:b0:2d:ab:fb:b5:f2:2e:3b:3d:69:b0:0d:e4:b0:
39:6c:b5:18:4a:a1:08:79:ae:fe:d8:34:b9:e5:9b:32:a0:48:
29:e9:b1:f2:7c:8f:ce:5f:b9:a1:94:ab:88:f2:ac:6e:66:4e:
cf:b3:af:50:1b:f7:ad:ac:50:f2:ef:28:99:88:6f:f1:ab:b8:
1e:bc:0d:8d:d9:03:4b:f5:61:82:7e:72:8d:10:34:df:b7:df:
3d:7f:f8:cd:f1:27:e9:aa:cc:9b:07:15:17:84:54:61:7c:82:
00:7a:da:f5:1f:b2:31:d4:97:36:5d:79:57:ae:e4:c5:16:27:
01:ed:27:c4:ad:31:c1:5f:20:84:91:91:8c:77:b6:9d:d7:0d:
c3:41:c4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org