Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/X58UKA9NHy9DM-n697mU2kQrf5w.roa
File: X58UKA9NHy9DM-n697mU2kQrf5w.roa (raw, json)
Hash identifier: tYv+v6Gyf3wazRQSa2rlACn8uLdePsjWUhuiuT4wiFM=
Subject key identifier: 5F:9F:14:28:0F:4D:1F:2F:43:33:E9:FA:F7:B9:94:DA:44:2B:7F:9C
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0182EEA0A965B73D0BEA6B8FF21661F2E684
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/X58UKA9NHy9DM-n697mU2kQrf5w.roa
Signing time: Tue 30 Aug 2022 12:01:22 +0000
ROA not before: Tue 30 Aug 2022 12:01:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57037
IP address blocks: 146.247.102.0/24 maxlen: 24
146.247.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:a0:a9:65:b7:3d:0b:ea:6b:8f:f2:16:61:f2:e6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Aug 30 12:01:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f9f14280f4d1f2f4333e9faf7b994da442b7f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ec:a5:8d:7a:75:65:45:19:8e:7e:8f:9f:f1:
c7:06:21:d3:e2:1a:cb:6c:07:e6:ad:82:d5:78:0a:
87:d0:80:a6:f8:d7:d8:26:c2:9c:1d:bc:bd:a5:89:
11:3a:b0:2e:6f:e6:69:35:6d:33:12:cd:6c:d9:13:
d6:62:3c:72:66:f6:cb:14:e7:df:33:55:40:72:9d:
cd:23:e0:15:9f:18:9d:dc:c8:4a:92:dc:78:94:47:
e1:d5:0b:1f:16:f3:3c:02:76:b6:f2:8f:3d:af:78:
c6:65:1a:7c:a3:10:fc:76:f2:e1:fa:8b:0f:68:36:
de:78:46:9f:96:15:53:bb:a2:b3:ab:59:36:91:9e:
e0:20:13:6c:c8:cd:37:8b:de:1a:0e:75:89:b3:68:
e3:f2:f8:0b:55:12:62:64:57:95:cb:60:c9:2c:45:
5c:be:b4:25:ab:70:12:98:8f:d9:86:73:8f:d2:9a:
e0:aa:6e:ca:ef:36:33:a9:c2:d1:5e:4b:9c:16:08:
96:45:99:f0:df:14:22:6a:7d:9d:d3:c4:ac:6a:3d:
de:86:84:dd:b6:14:de:1f:9a:70:ee:d0:e6:e5:5d:
c7:ab:83:fc:03:7b:85:74:dd:61:1f:70:ee:f9:dc:
ea:2d:df:1a:8f:2b:e8:40:bf:d3:66:bb:c0:6d:22:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9F:14:28:0F:4D:1F:2F:43:33:E9:FA:F7:B9:94:DA:44:2B:7F:9C
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/X58UKA9NHy9DM-n697mU2kQrf5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.101.0-146.247.102.255
Signature Algorithm: sha256WithRSAEncryption
64:b7:51:46:e2:63:a5:5c:62:bd:60:eb:1c:5e:58:05:ef:e3:
f1:0c:4e:6f:54:94:8b:cb:e4:2d:9d:53:b1:7a:54:85:79:54:
32:11:c3:2b:1a:cc:d1:bc:e6:12:ac:c1:af:bb:6f:b2:86:42:
7b:b9:8b:3a:de:85:3a:a6:20:86:f4:d6:3c:30:fd:b3:cb:38:
fd:10:01:cc:3f:ab:63:dd:4d:01:36:7f:c7:53:0a:05:dd:09:
d1:b7:b9:02:53:48:8c:c1:df:04:a8:9e:4e:1e:5c:95:07:32:
62:97:c0:23:11:57:15:0a:22:19:c4:29:41:a8:7c:c8:88:a3:
3c:9f:da:c3:59:cb:3c:34:86:62:40:02:97:81:ce:6a:13:5e:
80:fb:9d:95:82:07:64:3a:09:ce:eb:39:aa:57:f1:8f:99:cc:
37:c2:7c:c1:54:ea:3f:5e:3d:04:2f:3c:ef:81:e5:b6:da:be:
79:6a:fd:c4:56:15:d3:b3:7a:4c:10:ca:85:3a:86:b6:fa:20:
8e:05:a3:a3:26:65:60:7d:30:3e:30:82:26:70:d3:38:00:f7:
dd:79:48:ba:74:f3:32:cb:7f:43:95:07:f9:90:c4:e8:8e:36:
f7:cb:94:91:03:53:0b:27:f9:70:3d:bc:aa:19:b4:25:bc:47:
73:81:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org