Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/_tIO3-xTaaz6ZTaJBQI9Wv3hGbQ.roa
File: _tIO3-xTaaz6ZTaJBQI9Wv3hGbQ.roa (raw, json)
Hash identifier: bpQDeRVG+9RWjy2NMiJA94MnLwFgBPYPa+cMNF0UcnQ=
Subject key identifier: FE:D2:0E:DF:EC:53:69:AC:FA:65:36:89:05:02:3D:5A:FD:E1:19:B4
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0184198CC566CD2C7F834F8D262A642C3CA8
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/_tIO3-xTaaz6ZTaJBQI9Wv3hGbQ.roa
Signing time: Thu 27 Oct 2022 13:06:06 +0000
ROA not before: Thu 27 Oct 2022 13:06:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 146.247.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:19:8c:c5:66:cd:2c:7f:83:4f:8d:26:2a:64:2c:3c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Oct 27 13:06:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fed20edfec5369acfa65368905023d5afde119b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1e:67:64:9d:89:0d:36:4d:76:a5:f3:d7:9b:
fd:94:ec:d6:2c:85:fe:28:62:46:8a:29:59:ba:0c:
f5:f5:3c:d5:e2:62:d4:0a:32:58:46:fc:58:97:25:
19:03:fa:83:ff:20:95:34:5a:96:35:ab:de:bd:89:
65:a7:3c:16:85:9c:23:5c:c3:45:31:4c:9d:b9:54:
54:50:c2:d2:98:36:03:16:35:32:7a:8e:43:fa:ea:
9f:e1:08:56:9d:3c:b7:08:f4:3d:99:2e:b6:d7:0d:
48:63:57:3f:e6:b5:0d:45:08:71:4e:ac:11:75:e9:
73:35:86:a7:af:21:db:66:10:a8:21:33:2c:c7:35:
b4:e4:b6:ae:14:8d:98:f3:ad:7a:aa:55:1e:e0:86:
c2:97:10:ef:bd:8f:f4:61:15:95:d5:80:44:ce:80:
dc:9f:3d:7f:26:d6:50:a4:f9:89:89:94:b0:a3:bf:
a9:88:1f:25:ef:f3:37:3a:79:cc:15:cb:d5:7b:48:
ba:39:a8:a3:08:23:3d:3a:f3:e1:2c:56:60:a4:10:
3a:8d:57:73:8f:53:b7:dd:e8:6c:62:27:f1:81:cd:
63:e4:b3:f9:2c:92:25:b5:ce:1a:af:d5:b2:5a:28:
c2:4e:1c:30:53:d9:1d:d0:c4:bd:9d:53:97:1d:5a:
64:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D2:0E:DF:EC:53:69:AC:FA:65:36:89:05:02:3D:5A:FD:E1:19:B4
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/_tIO3-xTaaz6ZTaJBQI9Wv3hGbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.105.0/24
Signature Algorithm: sha256WithRSAEncryption
65:54:e7:70:28:70:21:12:92:75:73:ca:7a:75:7a:e7:ff:7f:
24:fe:30:c0:fe:73:0b:46:8c:8f:bd:6f:cc:fc:e5:4d:67:e6:
db:b5:8d:73:b6:75:c8:fe:81:2b:88:45:bc:77:92:54:a6:74:
96:19:66:b5:5e:3d:b7:44:8c:36:9e:37:25:e5:5f:7a:12:4d:
47:74:05:24:8b:a0:fb:a8:13:c8:98:38:4c:e8:8d:26:3d:f6:
99:fd:9c:7d:92:75:78:fc:25:fe:0d:bb:8a:41:a4:73:db:13:
fd:c9:f7:e0:21:8d:44:17:8c:c5:26:88:37:15:9b:ba:1e:7a:
f5:da:b3:b6:39:71:07:0c:99:76:7a:38:a7:1a:22:f5:0e:1f:
55:06:07:bf:c1:a7:b7:f1:5f:8a:33:8f:2c:db:4a:42:7a:3f:
86:ec:88:1a:4e:6b:56:f4:f4:51:3b:fe:5e:ba:e3:03:5d:6f:
4d:c8:85:eb:13:59:e4:fe:c3:ad:02:c0:ff:38:b9:20:1a:4f:
3d:2f:26:47:f4:fc:cb:b5:3c:e2:27:61:f7:fe:d2:1c:e3:ef:
27:97:e9:04:05:84:d2:22:8e:00:f7:02:9d:2f:18:0b:60:0e:
b6:bb:8b:d2:6d:71:cf:c2:81:9d:ce:8f:1b:1f:44:5c:8c:44:
34:f4:a6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org