Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/Q0td-FUi7Z9WaXSbJ1izskaKuec.roa
File: Q0td-FUi7Z9WaXSbJ1izskaKuec.roa (raw, json)
Hash identifier: urTtPI9XjSSNemgJARhBprW/s55rw+uh+3Ha1Iwu0kc=
Subject key identifier: 43:4B:5D:F8:55:22:ED:9F:56:69:74:9B:27:58:B3:B2:46:8A:B9:E7
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0183369218A920690197B1C3505FE606FC2D
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/Q0td-FUi7Z9WaXSbJ1izskaKuec.roa
Signing time: Tue 13 Sep 2022 11:18:07 +0000
ROA not before: Tue 13 Sep 2022 11:18:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 146.247.115.0/24 maxlen: 24
146.247.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:36:92:18:a9:20:69:01:97:b1:c3:50:5f:e6:06:fc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Sep 13 11:18:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=434b5df85522ed9f5669749b2758b3b2468ab9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:11:ad:59:c6:6c:49:24:06:5d:42:61:61:
46:7e:22:bb:22:b3:7d:dd:16:2f:48:ed:57:ca:40:
ab:4e:ea:f2:2f:25:ce:7e:12:d3:82:86:b2:f2:f4:
39:76:19:ea:d8:15:c3:6f:28:bd:99:e0:52:aa:71:
66:45:22:51:55:c4:25:a2:1c:68:15:7b:e4:0e:c6:
59:4b:87:3a:bc:8f:09:c7:3e:6f:1d:35:32:ab:f7:
98:1c:6d:30:db:32:07:28:73:88:d1:83:4f:7f:d7:
70:2d:76:0f:1b:02:ce:60:34:ac:ef:a7:e0:17:db:
a9:2d:e3:2d:1b:68:2c:1e:8f:a4:ae:3c:fc:6f:00:
8b:41:fd:0c:c2:36:2d:2f:4d:a9:d4:ed:6d:61:83:
04:c1:1f:97:72:3c:6c:cb:4b:0b:56:76:36:65:0b:
02:ed:37:6e:72:69:da:3d:12:03:00:f9:d7:fa:e4:
9a:58:d4:64:50:c8:2e:79:2d:b7:5b:03:46:e1:92:
68:37:b3:e6:ed:96:07:cf:10:d9:ce:e5:fa:49:dd:
d3:79:ac:3a:55:01:38:96:88:c3:8f:07:96:30:32:
9a:f5:74:fe:35:0b:74:b2:06:25:46:e6:c1:44:42:
c0:27:17:b3:31:e3:a7:8b:34:06:ea:5b:ea:9f:e1:
68:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4B:5D:F8:55:22:ED:9F:56:69:74:9B:27:58:B3:B2:46:8A:B9:E7
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/Q0td-FUi7Z9WaXSbJ1izskaKuec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.115.0/24
146.247.121.0/24
Signature Algorithm: sha256WithRSAEncryption
35:08:88:0a:3a:b0:d1:93:5a:f6:5f:b2:95:15:02:5c:e3:d6:
bf:52:ac:bc:83:2d:b6:5b:88:ab:67:af:4a:c0:28:58:e9:ad:
05:dc:56:d8:b9:61:a3:98:ee:c1:7d:4e:00:07:22:14:1f:7f:
6f:a4:7e:62:3e:1f:21:48:3c:67:d5:a2:c2:4f:b0:d3:6b:33:
f3:c6:1e:78:ec:a7:6b:f2:96:d1:b5:0c:64:c1:c7:d7:2a:0d:
92:ff:d6:24:8f:c6:dd:ac:2e:1b:c5:cf:8d:99:80:9d:38:70:
0b:d6:f1:b5:84:69:95:eb:0f:6a:37:23:42:12:17:49:95:56:
7c:2f:eb:3d:5c:d2:04:90:fc:4a:bf:e6:2a:41:c3:65:61:ab:
0b:01:83:a4:20:cd:dd:71:49:0b:d9:84:03:49:d9:0f:2e:97:
10:ab:bb:b6:c4:2b:6f:2b:46:7e:b7:12:51:44:f6:74:44:a4:
dd:35:16:6f:d3:3f:3e:d5:cd:6e:85:dc:d6:db:59:b6:b4:51:
30:35:27:72:fe:fa:80:c2:9b:2c:66:1c:ae:a1:df:73:57:41:
a4:48:11:95:bc:57:93:d9:29:14:85:17:9d:f8:b9:a3:15:21:
3c:6f:3e:35:65:96:8a:eb:fa:29:95:1e:f7:1c:45:a9:06:0b:
63:40:3e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org