Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/OSxB1el8MC5WCrZCG2Ynofcd-1A.roa
File: OSxB1el8MC5WCrZCG2Ynofcd-1A.roa (raw, json)
Hash identifier: osRgInxEJMpZKq4FaX0o59Ysstqar6+0TEws45riiZs=
Subject key identifier: 39:2C:41:D5:E9:7C:30:2E:56:0A:B6:42:1B:66:27:A1:F7:1D:FB:50
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01841AE9AD23998B360AE1F1D93070B2013B
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/OSxB1el8MC5WCrZCG2Ynofcd-1A.roa
Signing time: Thu 27 Oct 2022 19:27:12 +0000
ROA not before: Thu 27 Oct 2022 19:27:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 146.247.103.0/24 maxlen: 24
146.247.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1a:e9:ad:23:99:8b:36:0a:e1:f1:d9:30:70:b2:01:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Oct 27 19:27:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=392c41d5e97c302e560ab6421b6627a1f71dfb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a8:d0:c8:f9:f0:2e:c6:7a:48:2c:64:f6:ef:
8d:ae:6a:f0:e6:0a:23:db:b9:5c:66:21:96:87:b8:
35:16:76:4f:6b:f3:87:48:b3:56:30:08:93:77:38:
45:31:1e:6c:51:16:2c:4c:73:b0:59:82:97:dc:f7:
86:c3:16:d8:08:34:4c:6d:83:08:58:a2:a9:89:02:
41:44:c8:77:58:46:93:02:75:1d:fb:c6:3b:ca:7a:
a5:78:2f:9a:6e:db:0b:eb:14:17:70:a8:1c:94:cb:
ba:d5:14:77:11:7d:6b:2e:8c:ca:4f:4f:20:d5:b2:
32:a9:98:2a:69:19:3e:29:9a:be:18:ee:12:4d:53:
a5:7a:ba:05:1c:cd:54:88:1d:f4:2c:ff:f7:b3:65:
6e:14:6e:58:e3:cb:33:ee:81:04:30:7f:a4:fb:ec:
95:13:10:5a:7e:17:ad:ea:51:bb:57:98:0d:24:91:
d4:69:14:de:7f:ea:52:be:84:cc:50:27:7b:86:bc:
d5:2e:29:10:c8:75:5d:86:90:8f:f6:55:2d:51:94:
c7:0d:1a:8c:1c:bc:34:c5:d4:b2:3e:20:1d:00:01:
5b:0f:ba:b8:2a:5e:87:b9:de:b5:ad:2b:6a:83:6d:
ee:78:ad:39:be:1c:cd:a1:21:67:49:f8:5e:41:fd:
e6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2C:41:D5:E9:7C:30:2E:56:0A:B6:42:1B:66:27:A1:F7:1D:FB:50
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/OSxB1el8MC5WCrZCG2Ynofcd-1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.103.0/24
146.247.108.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:45:88:d8:a7:dc:95:1c:4e:a6:16:cb:0c:dc:b5:ae:60:6f:
00:9a:10:41:06:69:d5:db:e9:6b:d6:4a:21:f8:07:b0:b7:ab:
c9:ad:53:f5:14:a7:05:86:44:83:8f:90:d6:e1:71:60:77:84:
16:cf:d0:16:47:6d:b3:44:55:bb:ee:ea:ea:8e:59:ea:4b:79:
4d:a3:02:53:dd:2e:42:98:84:b8:f8:07:19:45:6c:a2:66:b5:
cb:56:db:46:69:06:c9:27:18:a4:b0:f7:0c:9d:e4:0a:0e:0b:
e3:e2:a3:2d:5b:3a:6b:53:6c:56:cd:18:39:ce:c3:7e:be:f1:
6d:d0:f7:86:96:8e:8f:70:b6:0e:5d:50:df:a3:f7:78:78:e9:
c6:4f:39:4b:8e:00:4f:30:ce:69:ef:f8:99:0b:70:bd:f8:e0:
21:f3:4d:9f:47:53:2d:d6:76:9d:2b:ed:71:20:24:1d:03:2c:
d5:5b:c1:b9:ce:26:11:94:80:79:87:59:9f:35:25:0b:41:cf:
e0:4c:af:7f:0d:d6:aa:02:85:61:63:0d:58:97:8f:1a:6e:6a:
dc:59:33:92:fb:44:37:e6:00:5d:dd:6a:1b:f4:db:00:6d:be:
c3:4d:28:9a:f2:8a:b2:c7:48:c5:5d:ab:dc:19:77:fc:bb:e6:
0b:b4:c8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org