Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/ESJhmx7uphp_4N8p5inEum9AJrQ.roa
File: ESJhmx7uphp_4N8p5inEum9AJrQ.roa (raw, json)
Hash identifier: KucbiTD4XY/dCpNTzmTMDenRKEZPwFK+r0hIGXmNV/s=
Subject key identifier: 11:22:61:9B:1E:EE:A6:1A:7F:E0:DF:29:E6:29:C4:BA:6F:40:26:B4
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0182755B2C29F129DAAD347092755B5A9511
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/ESJhmx7uphp_4N8p5inEum9AJrQ.roa
Signing time: Sat 06 Aug 2022 22:51:25 +0000
ROA not before: Sat 06 Aug 2022 22:51:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 146.247.105.0/24 maxlen: 24
146.247.108.0/22 maxlen: 24
146.247.114.0/24 maxlen: 24
146.247.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:75:5b:2c:29:f1:29:da:ad:34:70:92:75:5b:5a:95:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Aug 6 22:51:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1122619b1eeea61a7fe0df29e629c4ba6f4026b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:55:b3:de:74:06:9f:33:3a:a9:29:a9:21:
90:9d:0e:55:dd:5f:d8:bd:4f:00:83:94:5a:29:9b:
41:9a:78:06:ce:55:40:f2:78:60:d2:06:63:52:31:
93:29:7f:a6:a7:68:18:c1:f4:a5:db:43:48:fd:64:
75:63:ef:54:3a:38:b9:6d:1e:c1:c4:05:e6:30:46:
75:c9:2b:79:a2:7f:79:60:cf:bd:ec:cf:aa:40:a7:
7a:b1:ff:e5:7e:18:2b:80:0c:4c:ad:1c:7a:06:ad:
5b:00:e2:67:f3:90:5e:c5:d0:14:70:66:ee:04:a1:
d8:1d:c8:73:cd:03:42:98:df:21:a2:53:fc:4d:27:
5b:56:01:46:51:58:34:1c:ed:31:97:be:ba:66:4e:
f4:11:e4:bc:a0:95:a1:9b:64:a7:ef:09:3d:9c:91:
51:8c:43:19:95:a2:3b:8f:cd:a5:74:9a:79:d1:8d:
04:29:9b:f6:ee:c3:38:4f:e1:b6:c9:ec:0e:3b:19:
b8:33:fb:e7:90:e9:33:3d:69:15:ce:d3:a4:af:86:
94:f7:4b:8b:8f:86:0b:f0:61:c9:57:54:12:f5:ad:
54:67:c8:72:1e:3c:18:95:79:8b:6b:b8:97:7b:31:
ac:a6:b8:af:cb:82:47:a0:c8:ab:3a:64:3a:d4:f0:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:22:61:9B:1E:EE:A6:1A:7F:E0:DF:29:E6:29:C4:BA:6F:40:26:B4
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/ESJhmx7uphp_4N8p5inEum9AJrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.105.0/24
146.247.108.0/22
146.247.114.0/24
146.247.116.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:0d:03:40:d5:a2:53:41:75:91:78:30:06:96:eb:fa:cc:3c:
9d:ef:96:e2:a1:11:58:bc:e6:3d:76:fb:0c:6f:3f:e9:1b:4b:
e1:14:87:25:a2:19:c8:3d:34:88:65:9b:67:58:87:4e:55:89:
6c:3a:a3:e3:f7:8a:3c:ee:9e:b2:db:e7:9a:2e:25:88:bc:38:
1f:0c:37:db:c1:87:09:3a:6f:ca:e0:2b:52:78:08:a0:6f:7b:
6c:ec:71:c0:ba:86:0e:87:38:59:cd:43:fc:ac:05:3a:17:80:
d1:c6:84:32:1b:c8:b0:2a:a0:12:e2:cd:e6:ae:ae:3b:fe:bb:
12:f6:40:92:67:fd:74:e7:47:77:82:79:6d:26:f7:c5:8e:b8:
8d:94:f2:16:1c:2e:2e:4a:e3:62:7c:c9:65:d7:e3:0f:36:00:
ee:27:a2:81:b5:b1:8c:0c:4c:df:a6:f8:e9:da:0c:13:ba:b1:
e5:9f:d8:c2:12:61:31:f2:21:f7:3e:24:51:96:f3:6a:53:c3:
c2:3a:3b:e0:27:85:ed:68:70:41:c3:63:30:69:69:a9:f5:46:
7a:1f:65:ad:d5:14:52:ac:19:4c:22:da:04:5e:11:81:1d:0b:
93:7b:d7:9d:f7:44:0e:f8:06:b6:5c:f2:77:b9:93:ac:1a:9b:
38:bc:91:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org