Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/TWLPIEAsH2i0NXpyiRyvWfzWHzo.roa
File: TWLPIEAsH2i0NXpyiRyvWfzWHzo.roa (raw, json)
Hash identifier: Z+qae4cv3dw+BY2snAK5sx7JutOMlxH+9aHE0yc0XGY=
Subject key identifier: 4D:62:CF:20:40:2C:1F:68:B4:35:7A:72:89:1C:AF:59:FC:D6:1F:3A
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01841AE9AD9BAF31563F13B7F5731CD112F2
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/TWLPIEAsH2i0NXpyiRyvWfzWHzo.roa
Signing time: Thu 27 Oct 2022 19:27:12 +0000
ROA not before: Thu 27 Oct 2022 19:27:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.112.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1a:e9:ad:9b:af:31:56:3f:13:b7:f5:73:1c:d1:12:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Oct 27 19:27:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d62cf20402c1f68b4357a72891caf59fcd61f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:54:6f:22:34:9a:10:16:11:6e:1f:d1:17:89:
e0:04:51:6f:51:1d:67:7b:06:83:45:12:f7:c3:03:
2c:d9:8b:36:f6:2f:87:2d:74:8b:ed:9b:64:85:ee:
f1:70:8b:ee:a6:cd:f6:a3:c5:f3:1a:ee:25:e8:b2:
0c:cf:0b:af:31:14:f8:b1:b5:83:27:17:ed:d1:16:
e5:e3:47:b7:46:5d:ce:bd:b7:e5:d2:59:32:fd:07:
64:52:82:5b:b6:55:54:03:98:6e:ac:23:30:f6:a5:
c1:58:61:09:04:4c:ed:a0:9e:a8:d3:8d:b8:b7:63:
ce:f8:a2:f6:84:a3:18:92:6d:6d:13:34:fb:82:b2:
13:6b:75:22:be:b9:0f:41:eb:80:ce:e2:ba:b1:76:
0e:af:15:e4:b8:ca:b9:5a:fe:a6:59:46:6e:12:b7:
fb:34:32:4b:40:1f:3e:46:2c:fc:2f:3b:92:06:ca:
38:a9:6e:47:3e:63:93:41:7e:09:d0:78:b6:14:24:
4a:52:1e:24:31:01:ac:5e:71:be:b9:3a:aa:b0:09:
e7:32:46:02:24:e9:c3:fc:a5:02:bc:ef:92:a3:1a:
29:32:ba:cf:22:c2:cc:e1:ca:f4:6b:5c:78:08:06:
f2:95:ab:28:5d:be:ee:09:4a:66:1d:53:17:90:74:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:62:CF:20:40:2C:1F:68:B4:35:7A:72:89:1C:AF:59:FC:D6:1F:3A
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/TWLPIEAsH2i0NXpyiRyvWfzWHzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.112.0/23
Signature Algorithm: sha256WithRSAEncryption
18:e7:68:9d:0c:f2:c6:c6:a7:8e:5a:45:96:91:3e:fe:d2:02:
e4:d9:78:04:a4:1f:06:47:34:15:75:24:b4:47:5f:71:cc:df:
1c:ae:76:e0:a9:2b:3e:d8:5b:56:47:ef:76:32:fe:7b:26:76:
1d:26:83:fc:39:cd:0f:25:8f:40:39:6c:67:d4:40:51:e3:72:
1c:d4:d9:ec:fa:24:8f:01:fd:25:7c:fa:1a:26:af:ac:6a:13:
27:5d:7f:30:e7:8a:0f:d7:18:12:21:51:fd:84:60:48:7e:3f:
29:48:e2:ba:f6:65:e5:f1:65:8c:28:b0:86:67:b8:44:c6:e0:
fd:b0:31:c4:0d:86:5f:0c:b2:29:44:7c:50:d8:70:59:9f:37:
94:f9:02:fe:25:c9:88:9b:64:0b:10:60:9d:bf:3d:88:7c:56:
7a:8c:59:da:ad:74:f0:b5:30:19:f7:b7:c8:a7:dd:4c:51:f4:
5d:81:47:d8:c1:2b:fa:d2:79:6f:de:17:12:80:73:10:4c:25:
73:5c:83:e2:cc:35:58:93:cb:13:20:e0:60:c9:7a:01:ac:44:
71:40:37:39:d9:96:a8:d5:d4:0d:1a:99:58:70:8d:60:5a:ca:
9a:b6:ea:23:21:0a:cb:88:c5:c3:c5:93:01:4f:ce:9f:ae:6d:
e1:57:26:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org