Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/SRDzAhNnT5tWbnb4k12irAyjvLM.roa
File: SRDzAhNnT5tWbnb4k12irAyjvLM.roa (raw, json)
Hash identifier: WMlAac4NMBJjP1PX4WLOnrS4AS+gT01i5dPURtHOPHU=
Subject key identifier: 49:10:F3:02:13:67:4F:9B:56:6E:76:F8:93:5D:A2:AC:0C:A3:BC:B3
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0182201B58E698EA8BBB80CC6198C9F9BCB8
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/SRDzAhNnT5tWbnb4k12irAyjvLM.roa
Signing time: Thu 21 Jul 2022 09:33:59 +0000
ROA not before: Thu 21 Jul 2022 09:33:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 146.247.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:1b:58:e6:98:ea:8b:bb:80:cc:61:98:c9:f9:bc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jul 21 09:33:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4910f30213674f9b566e76f8935da2ac0ca3bcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:fa:a7:66:2f:d6:f1:d9:23:fd:7e:6d:2f:
c7:c5:6a:10:b8:14:ac:0f:a9:03:88:1e:64:09:b0:
44:64:23:dd:9c:48:1f:e7:20:58:04:ce:ca:89:e5:
1b:8f:c5:60:a3:0e:78:0b:30:74:6f:fa:13:69:f6:
38:99:e1:dc:7a:92:9d:64:8f:a1:58:48:41:d5:94:
7e:c0:13:4f:39:07:2d:e0:0d:c7:1d:b7:04:4c:bf:
ad:d1:e0:0b:67:51:ce:bc:b6:b7:87:38:7e:59:2b:
84:56:bc:c0:b3:1e:f3:2f:55:9f:ad:40:b1:b6:a3:
da:9b:e1:e8:1b:1f:a2:58:df:73:34:28:5f:f9:c6:
da:a9:58:0d:d6:83:13:4d:19:7d:df:a5:0a:1a:fd:
0e:69:c3:67:d2:a2:84:3d:bd:78:a3:25:d5:ff:28:
40:86:2b:02:1a:ff:cb:2b:41:b6:be:0c:a2:51:d0:
e7:ec:ce:66:be:80:ad:58:62:35:7c:31:97:f3:70:
fb:1c:ca:6b:a0:6d:e3:1f:3d:a9:81:86:b4:0e:95:
2c:70:0f:82:28:c5:f4:36:3f:50:96:c2:59:14:9b:
67:e6:b9:21:4e:19:74:eb:eb:e0:62:86:c5:82:2a:
d8:41:9c:8c:b1:e5:d4:5d:fa:29:23:d2:4f:c4:cf:
0a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:10:F3:02:13:67:4F:9B:56:6E:76:F8:93:5D:A2:AC:0C:A3:BC:B3
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/SRDzAhNnT5tWbnb4k12irAyjvLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.102.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:51:c1:1c:7d:12:39:d8:0a:22:94:0e:4a:dc:8a:bd:0c:55:
03:64:e9:ba:28:d0:03:78:b4:38:ed:78:ef:26:b7:4d:30:db:
16:0e:44:03:d9:82:0f:45:fb:76:c4:0b:b8:73:44:6c:47:08:
9b:c5:b1:1a:18:ee:7e:64:c0:eb:4f:2c:57:96:ea:bd:82:e7:
91:b0:a9:5c:cd:7b:b5:53:14:eb:4c:01:d6:de:14:bc:99:a2:
5d:64:bf:8b:c8:4a:65:f3:48:f8:36:35:12:fe:60:e4:7c:5e:
d6:d5:35:98:33:d4:68:e1:29:0a:3e:3f:1f:d5:fb:c4:06:69:
0d:7e:e7:c9:69:96:6b:fa:22:6e:f9:7a:be:26:cb:dd:86:01:
34:b8:97:25:a8:b7:e3:2d:69:ca:eb:f7:8c:d5:3e:0a:18:1d:
4b:26:7b:71:fa:d6:6b:a5:da:82:48:1f:3b:e5:ee:75:a3:31:
dd:04:c6:52:b9:33:be:9c:b1:4b:90:47:9e:eb:1e:77:a2:9f:
0b:2b:70:9d:f6:7e:f0:23:7b:d9:42:98:49:b8:b4:dd:1a:94:
58:dc:8d:bd:57:04:82:8f:01:80:55:16:c1:e9:2f:da:9c:6a:
ee:43:9e:dc:b4:80:91:6e:b1:6f:2f:f4:75:e0:47:50:40:ac:
96:43:e7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org