Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/HAn9xCekcTXRcTWym7B3bHnNYvY.roa
File: HAn9xCekcTXRcTWym7B3bHnNYvY.roa (raw, json)
Hash identifier: LVVfpoe+Mz1vtIok4hOhYWKtk8L002rJxBd76Qvv490=
Subject key identifier: 1C:09:FD:C4:27:A4:71:35:D1:71:35:B2:9B:B0:77:6C:79:CD:62:F6
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0184A66E46B85AB17722B016FA804110922C
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/HAn9xCekcTXRcTWym7B3bHnNYvY.roa
Signing time: Wed 23 Nov 2022 21:39:15 +0000
ROA not before: Wed 23 Nov 2022 21:39:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212384
IP address blocks: 146.247.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a6:6e:46:b8:5a:b1:77:22:b0:16:fa:80:41:10:92:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Nov 23 21:39:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c09fdc427a47135d17135b29bb0776c79cd62f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:ab:24:e8:9c:d8:17:61:c0:6c:be:5d:47:
e4:f8:55:6b:56:60:0b:21:7f:f2:90:68:6f:1f:ce:
a4:dc:1a:10:e8:ad:4a:db:b3:f7:bf:a6:fa:c0:1c:
35:25:70:97:fc:f1:11:99:e8:da:9d:17:c4:9a:73:
16:dd:ed:47:44:bf:98:67:dd:8c:96:64:42:38:81:
b3:2a:2c:96:f4:7d:81:84:1a:36:22:24:42:93:5c:
2b:25:1c:f2:b3:e3:a8:83:bb:fc:5d:c2:b4:29:be:
a5:a0:ec:d9:e2:21:91:36:2f:c2:fc:94:f8:6f:8a:
40:ab:b3:e7:66:3a:e4:93:a7:34:2d:ec:73:d9:15:
68:32:27:2e:64:9b:68:36:d8:3e:4a:04:bf:32:36:
55:48:7a:73:73:a4:eb:54:f8:3b:9a:06:85:08:8d:
7b:e2:47:d1:9e:ef:2f:5f:b4:03:72:51:e9:ee:4c:
65:43:00:23:db:e4:f6:7d:65:d8:ea:c1:b9:db:dd:
89:bb:58:a5:12:12:8a:c7:06:1a:05:df:fa:b6:a0:
ad:11:2f:85:a5:55:a3:41:1e:01:36:ec:ca:54:7c:
72:28:02:5b:28:58:58:d4:8e:3f:48:16:7d:59:3e:
97:9f:5d:7e:9f:de:b9:71:b2:12:c1:ff:67:68:eb:
87:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:09:FD:C4:27:A4:71:35:D1:71:35:B2:9B:B0:77:6C:79:CD:62:F6
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/HAn9xCekcTXRcTWym7B3bHnNYvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.106.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d4:9d:65:4b:d5:26:b2:07:10:98:6b:c6:b8:38:c3:97:fa:
53:55:ae:29:b5:e2:9b:25:a7:77:d3:71:d3:6a:6e:ec:71:d6:
8e:3b:61:c5:45:87:09:52:9e:86:a1:11:b5:87:1d:5d:29:dc:
50:e2:9e:30:a7:ac:89:2d:64:c2:dc:6a:3e:5d:08:6a:99:2b:
6c:f9:60:6d:39:32:58:1e:46:f1:83:80:15:ef:48:a8:9f:b0:
6a:30:6e:3b:80:6f:be:02:7f:2d:67:68:ac:74:b1:3c:b0:82:
0f:ec:e8:42:0f:04:93:12:92:39:a2:84:b0:86:5e:d1:70:2e:
5d:6a:3b:96:02:f5:7b:cf:d5:39:22:48:ff:bf:b1:87:ed:99:
26:68:16:5e:0e:1f:5c:b9:36:b8:98:43:34:75:ba:bc:09:f6:
49:a6:a0:e0:8b:90:d0:bb:c6:7a:e9:5e:7e:15:ad:46:90:ba:
d5:06:49:74:ea:e7:d0:d8:3d:42:03:fa:37:33:71:cc:1f:59:
da:1d:1d:6e:c3:25:e7:e8:f9:90:fd:49:63:5e:ba:09:b3:b5:
82:ac:0f:09:02:d5:af:d2:cd:c5:bb:af:39:43:af:03:22:73:
29:b1:ba:3f:c6:c6:f2:93:56:60:86:5a:0e:ac:d4:96:b7:85:
c0:d6:26:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSmbka4WrF3IrAW+oBBEJIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjIxMTIzMjEzOTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzA5ZmRjNDI3YTQ3MTM1ZDE3MTM1YjI5YmIwNzc2Yzc5Y2Q2MmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb6rJOic2BdhwGy+XUfk+FVrVmAL
IX/ykGhvH86k3BoQ6K1K27P3v6b6wBw1JXCX/PERmejanRfEmnMW3e1HRL+YZ92M
lmRCOIGzKiyW9H2BhBo2IiRCk1wrJRzys+Oog7v8XcK0Kb6loOzZ4iGRNi/C/JT4
b4pAq7PnZjrkk6c0Lexz2RVoMicuZJtoNtg+SgS/MjZVSHpzc6TrVPg7mgaFCI17
4kfRnu8vX7QDclHp7kxlQwAj2+T2fWXY6sG5292Ju1ilEhKKxwYaBd/6tqCtES+F
pVWjQR4BNuzKVHxyKAJbKFhY1I4/SBZ9WT6Xn11+n965cbISwf9naOuHEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBwJ/cQnpHE10XE1spuwd2x5zWL2MB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvSEFuOXhDZWtjVFhSY1RXeW03QjNiSG5OWXZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkvdqMA0G
CSqGSIb3DQEBCwUAA4IBAQBz1J1lS9UmsgcQmGvGuDjDl/pTVa4pteKbJad303HT
am7scdaOO2HFRYcJUp6GoRG1hx1dKdxQ4p4wp6yJLWTC3Go+XQhqmSts+WBtOTJY
Hkbxg4AV70ion7BqMG47gG++An8tZ2isdLE8sIIP7OhCDwSTEpI5ooSwhl7RcC5d
ajuWAvV7z9U5Ikj/v7GH7ZkmaBZeDh9cuTa4mEM0dbq8CfZJpqDgi5DQu8Z66V5+
Fa1GkLrVBkl06ufQ2D1CA/o3M3HMH1naHR1uwyXn6PmQ/UljXroJs7WCrA8JAtWv
0s3Fu685Q68DInMpsbo/xsbyk1ZghloOrNSWt4XA1iaw
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org