Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/T4WfldF8Bta4II9SmY4o3P901VE.roa
File: T4WfldF8Bta4II9SmY4o3P901VE.roa (raw, json)
Hash identifier: UmI1O47l59CPbhIrhuCGgvWgBEpJZW3LaxCXgXHUUi8=
Subject key identifier: 4F:85:9F:95:D1:7C:06:D6:B8:20:8F:52:99:8E:28:DC:FF:74:D5:51
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018459445F013E04ACC32CD8443C7AFB02C4
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/T4WfldF8Bta4II9SmY4o3P901VE.roa
Signing time: Tue 08 Nov 2022 22:02:43 +0000
ROA not before: Tue 08 Nov 2022 22:02:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 146.247.104.0/24 maxlen: 24
146.247.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:59:44:5f:01:3e:04:ac:c3:2c:d8:44:3c:7a:fb:02:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Nov 8 22:02:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f859f95d17c06d6b8208f52998e28dcff74d551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:85:20:d4:e8:01:af:e2:6e:b6:28:ef:91:6e:
26:1f:f7:63:de:aa:7d:2c:ad:16:58:cc:f2:5b:7a:
7f:53:ee:25:a5:36:39:3c:6a:36:55:e6:be:e6:9a:
e6:32:d3:02:e2:29:31:2d:f9:39:73:bc:29:f5:d6:
71:72:78:98:52:c0:83:6a:ae:cd:8d:4e:09:36:53:
8d:0a:c7:e4:f3:48:f0:ef:71:f8:6a:f3:9a:e6:6b:
91:99:5d:5b:27:9b:a1:b0:2a:d8:fd:1b:3a:10:36:
ec:63:83:2d:36:7f:d1:17:6c:03:82:3d:5b:2e:26:
01:2b:ee:15:3e:fc:0f:e3:45:d1:cb:6a:e6:f1:5b:
f2:d0:d1:4a:84:ca:c5:f2:e9:be:b4:eb:00:9c:4a:
39:89:0d:53:0d:86:d0:1b:29:e2:16:58:c6:df:ac:
a2:6c:f9:f8:84:39:1f:bf:48:58:5d:f9:4d:c4:8d:
5b:20:31:93:20:85:db:51:b7:2d:a4:e9:9c:a8:f6:
45:df:45:ac:6d:29:4f:d8:0c:13:a5:c9:3d:38:8a:
5b:4f:eb:41:b3:4f:f9:29:67:fc:61:59:86:c7:4c:
2d:83:13:1c:b3:10:01:1e:c8:30:c6:84:34:f8:6e:
2d:27:29:05:53:54:24:ab:c6:80:74:25:a8:63:e0:
a6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:85:9F:95:D1:7C:06:D6:B8:20:8F:52:99:8E:28:DC:FF:74:D5:51
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/T4WfldF8Bta4II9SmY4o3P901VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.104.0/24
146.247.108.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f6:82:89:36:88:3e:d0:22:cd:f3:0e:cc:4f:e6:d5:de:92:
6d:cd:50:e1:49:15:33:2e:cf:8c:dc:70:53:9e:b7:d4:9b:81:
36:79:07:f5:bd:b9:cd:13:eb:07:39:b6:8e:4b:ba:5c:67:6d:
30:6a:d4:05:35:ec:6e:87:f9:12:00:69:e4:f0:37:1d:1e:9f:
9b:cd:e3:19:d3:6c:e2:c3:98:18:51:6d:87:c3:b9:ec:da:04:
c4:80:fc:ce:9e:63:87:96:63:27:c7:93:9d:a8:cd:41:59:7b:
4f:26:65:b8:3f:8c:65:a9:10:94:61:3b:f3:a6:74:75:86:57:
53:5b:f7:60:71:ae:e4:61:5c:4b:5d:a6:c4:38:56:f6:6b:ef:
8e:53:24:f8:53:96:10:26:5e:b3:b5:82:e3:9a:7a:6e:a1:11:
ee:4f:b0:ff:aa:f8:7e:75:62:3c:4b:2f:9e:b7:bc:b3:6e:8d:
f7:92:b9:f1:52:2e:36:67:9a:1a:40:81:4d:bb:91:63:86:6b:
24:0b:6c:fc:10:d1:4c:d1:ad:9d:d1:a1:dc:ff:13:90:54:22:
3a:53:9a:7e:52:37:ef:d0:86:88:06:8f:72:c6:b1:de:7e:62:
f8:76:b6:36:7c:f5:6e:4e:d8:3b:8a:ab:a7:db:dc:f1:8a:a3:
8a:d3:31:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org