Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/KYoTs0zKyUesg_sKRt_ctMYE1_E.roa
File: KYoTs0zKyUesg_sKRt_ctMYE1_E.roa (raw, json)
Hash identifier: c0OsmBLQfiu1gu82I+xEkHgK2iT3euayjOhmiiN6qfk=
Subject key identifier: 29:8A:13:B3:4C:CA:C9:47:AC:83:FB:0A:46:DF:DC:B4:C6:04:D7:F1
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018364C929B19B37A86E26748EFB12A1DE13
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/KYoTs0zKyUesg_sKRt_ctMYE1_E.roa
Signing time: Thu 22 Sep 2022 10:40:48 +0000
ROA not before: Thu 22 Sep 2022 10:40:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 146.247.105.0/24 maxlen: 24
146.247.106.0/24 maxlen: 24
146.247.108.0/22 maxlen: 24
146.247.114.0/24 maxlen: 24
146.247.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:64:c9:29:b1:9b:37:a8:6e:26:74:8e:fb:12:a1:de:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Sep 22 10:40:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=298a13b34ccac947ac83fb0a46dfdcb4c604d7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:38:c6:3f:62:2c:a3:5d:ee:d0:32:da:11:70:
6a:9f:10:15:2e:f1:4b:57:95:81:cd:6f:20:c8:eb:
a5:1a:08:32:5e:82:be:5c:03:80:74:3f:9f:bf:c1:
99:c5:4b:ac:5d:d0:40:b8:9e:32:d4:c3:3e:02:83:
dd:b0:86:c9:5b:40:41:94:71:4d:ee:f5:24:14:d6:
50:27:52:80:ee:77:6b:85:1b:3a:86:99:44:2d:7f:
e3:2e:20:29:c7:5d:e7:67:e4:2b:f6:d8:9c:83:99:
0f:d4:09:3d:19:1e:fb:15:c0:10:60:04:98:e5:10:
81:0f:60:f7:b2:52:f2:4f:56:3d:9b:94:53:2e:77:
7e:89:6d:6a:21:98:f6:92:1d:68:46:b4:38:8f:90:
03:eb:19:b1:ff:45:c9:39:73:9e:89:44:61:af:0e:
23:d6:29:42:22:05:30:0a:69:73:95:6e:85:80:fd:
51:80:27:f4:de:58:e5:53:9f:00:07:ee:19:a2:2d:
6b:43:95:9a:57:af:f1:d1:e1:d6:80:35:f2:4c:eb:
78:d9:73:4b:46:67:c2:3a:ed:da:26:a7:c7:de:f2:
a0:6e:0c:49:49:73:e7:70:b8:82:bd:84:65:91:d3:
74:a9:d4:8e:eb:10:09:45:cf:a4:d3:c7:d7:9e:e0:
75:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8A:13:B3:4C:CA:C9:47:AC:83:FB:0A:46:DF:DC:B4:C6:04:D7:F1
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/KYoTs0zKyUesg_sKRt_ctMYE1_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.105.0-146.247.106.255
146.247.108.0/22
146.247.114.0/24
146.247.116.0/22
Signature Algorithm: sha256WithRSAEncryption
82:b4:0e:40:8d:6b:0f:27:4b:92:cf:0f:bc:29:a5:c8:da:9e:
ca:23:05:ca:f4:9c:bb:89:2e:35:ed:8c:eb:a5:e7:22:a7:32:
e8:ad:04:78:bf:0f:60:cd:c9:70:a6:98:16:23:92:de:97:d9:
d1:9c:7a:af:12:af:91:51:7d:ce:db:c9:e0:61:a6:32:3b:d4:
e4:e5:72:35:f7:04:fe:08:ca:64:92:34:91:7c:c7:7b:cf:7d:
7d:bf:c5:2f:7a:ed:c5:1d:16:de:ac:c4:0f:cc:8d:88:27:ca:
25:a4:e6:db:80:c9:2b:75:98:35:e5:de:c5:29:91:ac:2a:e6:
55:0b:5a:db:cd:c3:3b:3c:40:d8:cb:aa:6e:94:69:ea:22:16:
2c:37:e5:0e:0c:7d:ba:ea:cb:3a:60:99:3b:45:57:10:cc:46:
b0:6f:36:82:f5:9c:6c:eb:57:52:a5:52:5a:48:68:a5:34:d8:
c7:b4:67:aa:15:2f:75:24:be:df:c0:80:4b:af:67:44:e5:1e:
8a:e5:35:de:db:26:e5:28:4a:ae:3c:60:0a:7a:2b:27:9e:1b:
7a:72:dc:5f:60:7a:9a:88:57:19:12:91:f4:2c:45:9f:e0:2f:
63:40:b6:98:fe:3a:fb:ba:9a:58:14:6c:83:79:0f:22:1a:c0:
7d:71:e5:dd
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYNkySmxmzeobiZ0jvsSod4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjIwOTIyMTA0MDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOThhMTNiMzRjY2FjOTQ3YWM4M2ZiMGE0NmRmZGNiNGM2MDRkN2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDjGP2Iso13u0DLaEXBqnxAVLvFL
V5WBzW8gyOulGggyXoK+XAOAdD+fv8GZxUusXdBAuJ4y1MM+AoPdsIbJW0BBlHFN
7vUkFNZQJ1KA7ndrhRs6hplELX/jLiApx13nZ+Qr9ticg5kP1Ak9GR77FcAQYASY
5RCBD2D3slLyT1Y9m5RTLnd+iW1qIZj2kh1oRrQ4j5AD6xmx/0XJOXOeiURhrw4j
1ilCIgUwCmlzlW6FgP1RgCf03ljlU58AB+4Zoi1rQ5WaV6/x0eHWgDXyTOt42XNL
RmfCOu3aJqfH3vKgbgxJSXPncLiCvYRlkdN0qdSO6xAJRc+k08fXnuB17wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFCmKE7NMyslHrIP7Ckbf3LTGBNfxMB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvS1lvVHMwekt5VWVzZ19zS1J0X2N0TVlFMV9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBACS92kD
BACS92oDBAKS92wDBACS93IDBAKS93QwDQYJKoZIhvcNAQELBQADggEBAIK0DkCN
aw8nS5LPD7wppcjansojBcr0nLuJLjXtjOul5yKnMuitBHi/D2DNyXCmmBYjkt6X
2dGceq8Sr5FRfc7byeBhpjI71OTlcjX3BP4IymSSNJF8x3vPfX2/xS967cUdFt6s
xA/MjYgnyiWk5tuAySt1mDXl3sUpkawq5lULWtvNwzs8QNjLqm6UaeoiFiw35Q4M
fbrqyzpgmTtFVxDMRrBvNoL1nGzrV1KlUlpIaKU02Me0Z6oVL3Ukvt/AgEuvZ0Tl
HorlNd7bJuUoSq48YAp6KyeeG3py3F9gepqIVxkSkfQsRZ/gL2NAtpj+Ovu6mlgU
bIN5DyIawH1x5d0=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org