Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/MzNTC00FyKlFi_CvwxSE5QKZQSs.roa
File: MzNTC00FyKlFi_CvwxSE5QKZQSs.roa (raw, json)
Hash identifier: JhaLi66QzXJZEPjwnSPY/QQUD9B8QtyM3jyT7UqO6N8=
Subject key identifier: 33:33:53:0B:4D:05:C8:A9:45:8B:F0:AF:C3:14:84:E5:02:99:41:2B
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0184D9C21ECBE12D9F087DC7D89FDDFEF7F9
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/MzNTC00FyKlFi_CvwxSE5QKZQSs.roa
Signing time: Sat 03 Dec 2022 20:51:28 +0000
ROA not before: Sat 03 Dec 2022 20:51:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 146.247.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d9:c2:1e:cb:e1:2d:9f:08:7d:c7:d8:9f:dd:fe:f7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Dec 3 20:51:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3333530b4d05c8a9458bf0afc31484e50299412b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e3:2e:ab:d0:56:5b:58:2b:07:97:f9:df:4b:
94:65:88:df:62:95:ee:a2:88:0e:29:00:88:9e:01:
3f:81:fc:e7:1d:b1:b8:df:21:5e:08:a9:7c:7b:e8:
45:2b:b6:fa:89:87:67:db:29:5c:68:ec:fd:7e:f5:
88:96:e3:f4:12:da:8d:48:4b:d5:10:b3:17:c7:0b:
7d:1e:c2:18:6e:78:f3:57:3f:1f:26:88:ba:cb:57:
10:17:98:cf:c2:5a:a5:df:03:76:3e:3c:7d:c8:b7:
0c:88:c1:10:30:31:6d:41:80:03:32:94:87:2a:3d:
dc:bb:32:a1:12:a9:a2:13:de:98:55:97:db:bb:49:
7c:f4:6f:01:76:4f:50:01:86:06:71:15:a8:56:4e:
e4:81:c6:7a:2a:73:dd:1e:f5:c2:98:30:f3:0b:bb:
60:3e:c8:f1:46:1d:09:da:06:60:32:9b:a4:a1:9a:
3f:b1:aa:4e:86:63:2d:b8:fe:b8:55:1c:59:f1:e6:
68:ff:45:78:73:1b:64:56:53:0f:dd:a4:40:73:33:
1c:07:94:d0:b1:06:b4:74:d3:14:dc:6a:02:bb:eb:
62:a9:12:13:29:b1:07:f8:0a:3a:5a:77:29:ba:6a:
42:1e:96:20:d0:a8:d8:b5:19:52:43:38:95:54:73:
a7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:33:53:0B:4D:05:C8:A9:45:8B:F0:AF:C3:14:84:E5:02:99:41:2B
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/MzNTC00FyKlFi_CvwxSE5QKZQSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.116.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d4:9f:36:29:75:82:6f:74:56:49:7e:d7:75:88:2f:03:8d:
db:9d:2d:19:e0:8b:1c:25:7a:19:15:b8:11:13:b9:b8:09:92:
26:cb:f9:56:a3:bb:99:41:75:0c:2f:6a:ef:7d:46:ad:ce:8e:
fb:a1:2a:74:f5:ca:fe:35:78:07:3d:6a:35:45:20:fb:a4:24:
36:e5:52:29:d2:b7:9c:79:1e:07:32:ee:26:c1:84:c7:4c:4b:
03:8e:bf:31:59:e8:07:59:c3:32:2b:1b:40:38:12:06:ce:d7:
3a:88:47:24:99:b8:ef:15:77:07:6e:73:55:b5:e3:b9:97:ca:
cc:e6:06:50:a7:6e:dd:f8:01:6d:48:e1:be:3e:cc:83:f4:a3:
21:f6:6a:ff:5e:83:a6:8c:63:49:c3:d6:20:e0:95:f1:32:94:
3b:14:b8:45:6e:9b:67:bd:8d:9d:d3:bf:bc:58:c7:fe:b3:ef:
19:f9:75:68:ea:22:67:3d:df:9b:72:8c:37:cb:e2:2e:19:d3:
d0:f3:43:a3:e4:f9:70:59:dc:e8:20:63:72:0c:06:42:cc:7b:
50:b8:dc:ea:c7:cc:17:de:dc:1a:51:6d:fa:86:54:ff:af:5c:
38:9e:68:5a:6d:95:8d:aa:96:b5:27:9d:11:3d:b2:1b:ac:c5:
da:dd:e9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org