Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/MH9BSstKNzXk3DD_6xDLreOg0dk.roa
File: MH9BSstKNzXk3DD_6xDLreOg0dk.roa (raw, json)
Hash identifier: /nTpgzRRTToYcX1u/7yeb78huzzzWgLUCokZBjSM2QE=
Subject key identifier: 30:7F:41:4A:CB:4A:37:35:E4:DC:30:FF:EB:10:CB:AD:E3:A0:D1:D9
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018355DC7951BA83C2710FD9E211C0064B4D
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/MH9BSstKNzXk3DD_6xDLreOg0dk.roa
Signing time: Mon 19 Sep 2022 13:07:35 +0000
ROA not before: Mon 19 Sep 2022 13:07:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 146.247.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:55:dc:79:51:ba:83:c2:71:0f:d9:e2:11:c0:06:4b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Sep 19 13:07:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=307f414acb4a3735e4dc30ffeb10cbade3a0d1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ba:ef:59:49:8e:35:92:47:df:cb:4d:50:6b:
d6:e2:7e:eb:2a:d1:74:8a:da:07:c2:b3:55:58:05:
9f:03:c3:73:60:aa:a7:fe:fe:9b:5f:12:f1:34:2a:
ab:a4:e7:bc:d5:bf:75:ee:52:bf:94:32:af:04:c6:
16:2d:6a:42:52:f3:ad:f5:06:49:f4:2a:7b:0b:14:
3d:af:d8:fa:64:10:0f:06:1b:85:80:b4:21:25:21:
68:cf:dc:64:e2:11:32:97:4f:7e:8f:ad:80:19:79:
f3:be:ed:89:94:ab:5d:76:6b:f7:06:c5:d2:86:61:
6f:47:13:41:26:2e:40:37:10:b1:08:b2:a0:97:77:
49:05:98:16:b9:d0:df:ab:6c:17:95:95:40:6a:96:
13:a6:97:1e:46:e3:e6:ef:6b:12:a0:cb:0d:32:39:
4f:78:78:ed:6c:3f:b3:49:6f:bf:33:67:fa:15:67:
09:31:9b:f1:c7:11:bd:41:06:9a:5a:d9:0e:99:7f:
c7:2b:92:c6:c8:84:85:34:a8:96:e6:7e:a8:43:10:
35:b6:30:c2:01:a8:b0:cb:22:37:64:1f:1d:6b:f9:
56:ea:b8:cd:fe:9f:ad:b2:be:97:2c:6f:a3:8d:a4:
00:f2:47:3d:6e:21:aa:2c:49:d3:66:dc:05:2c:d5:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7F:41:4A:CB:4A:37:35:E4:DC:30:FF:EB:10:CB:AD:E3:A0:D1:D9
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/MH9BSstKNzXk3DD_6xDLreOg0dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.104.0/24
Signature Algorithm: sha256WithRSAEncryption
60:4a:e2:83:01:1c:0d:a9:b4:c6:50:2f:f8:23:53:be:d5:d4:
bc:d3:8c:5a:1d:e0:0c:22:52:ae:81:90:cf:d2:ed:fa:14:dc:
3e:ce:93:13:30:e4:cb:a4:97:ac:62:8c:41:a8:47:97:3a:d6:
30:d0:9f:b8:a1:5c:bc:6a:15:69:b7:72:47:0e:04:5a:89:34:
05:c6:4d:62:bb:60:9d:c8:65:72:7c:85:7d:e7:4f:7c:70:c6:
aa:d5:40:2d:fc:fe:3d:7b:5b:38:e5:02:6f:ec:fa:27:3a:95:
3d:4b:61:c1:d7:75:56:af:60:8b:73:c6:53:5a:30:ee:5f:14:
13:0b:e1:dc:c3:d8:bb:a8:b0:ba:1c:6f:27:0d:d8:66:0b:49:
34:f6:5d:b1:45:a7:08:01:9f:c4:55:5b:a1:bc:6c:38:fe:82:
f0:9a:d7:39:97:43:7b:83:d7:2d:fd:f4:03:0f:1d:73:5f:c4:
e8:a2:50:49:ea:1e:1e:c1:48:c3:44:24:eb:8c:bc:6f:fd:69:
67:60:f7:ce:d1:b1:2f:b8:12:32:2b:ba:9f:d0:a3:48:09:25:
9d:2e:e0:05:0c:ad:9f:0a:73:78:81:e4:ec:5c:ec:17:d5:66:
b7:53:97:17:31:38:bb:56:cd:22:5f:4c:a6:94:d8:45:c0:10:
d8:f3:c8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org