Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/aFbksNKcL1WIVSaA-5ruuq5NIDo.roa
File: aFbksNKcL1WIVSaA-5ruuq5NIDo.roa (raw, json)
Hash identifier: SCQ8VolDZWgLaXrTO+fnC9y/U1ve+MseEb7x8hiPoCo=
Subject key identifier: 68:56:E4:B0:D2:9C:2F:55:88:55:26:80:FB:9A:EE:BA:AE:4D:20:3A
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01845E9B3FE6223568F74632D29A04AC98BB
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/aFbksNKcL1WIVSaA-5ruuq5NIDo.roa
Signing time: Wed 09 Nov 2022 22:55:43 +0000
ROA not before: Wed 09 Nov 2022 22:55:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 146.247.103.0/24 maxlen: 24
146.247.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5e:9b:3f:e6:22:35:68:f7:46:32:d2:9a:04:ac:98:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Nov 9 22:55:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6856e4b0d29c2f5588552680fb9aeebaae4d203a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:b5:17:23:53:c8:53:fa:9c:39:35:2f:6b:
95:77:e1:22:f7:86:90:04:58:fc:18:8a:46:4f:4b:
99:99:59:af:e5:1d:76:5c:6a:26:5d:5f:af:be:1b:
0e:41:e9:61:b0:28:b5:6e:0c:3a:de:04:ef:df:71:
96:79:3e:9d:bd:24:b4:a3:8d:7a:a2:03:b5:de:55:
18:6e:2d:16:22:18:c0:0a:51:82:8a:ac:93:6e:b5:
6f:55:36:c8:7d:97:21:6e:00:82:78:c4:40:83:41:
5c:be:37:7a:96:94:73:be:79:00:6f:1d:fb:ac:ac:
c7:66:96:16:8c:02:9f:40:4e:66:5f:16:13:ea:e8:
5e:ea:52:52:2d:9b:02:cf:f3:f1:e7:62:2e:07:81:
4f:e6:dd:43:ee:72:dc:66:d3:5a:23:c5:c9:69:36:
b9:43:5f:c6:78:a5:b3:97:40:14:27:54:17:df:0e:
ad:f9:21:c1:66:a7:f8:26:8c:88:f9:86:b9:1f:a3:
a8:38:46:6a:f1:c7:12:7e:38:0f:1e:75:54:23:8e:
d0:29:42:f7:d6:ac:e8:5b:93:7d:ac:b3:29:4a:8d:
02:b1:4b:e5:2c:34:07:bd:b9:5f:bc:0d:96:6b:49:
8d:99:9d:12:c2:96:2c:bc:c6:58:d2:5e:d5:11:f4:
15:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:56:E4:B0:D2:9C:2F:55:88:55:26:80:FB:9A:EE:BA:AE:4D:20:3A
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/aFbksNKcL1WIVSaA-5ruuq5NIDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.103.0/24
146.247.105.0/24
Signature Algorithm: sha256WithRSAEncryption
46:89:1c:82:91:b9:4a:a3:dc:ee:c8:48:71:59:2e:13:40:77:
0b:2b:f2:f4:c2:50:4f:55:aa:02:48:04:67:ed:c9:4f:96:1d:
d7:19:89:b2:7e:6e:03:84:20:57:ee:32:6d:53:5e:b6:a7:ba:
5c:37:6d:85:8b:44:81:8e:d3:d5:99:e0:b7:a2:73:02:cf:e7:
b1:ac:a4:21:00:09:5e:c6:48:11:43:ad:e4:ff:3e:0e:d2:a6:
75:24:93:e1:68:0f:fb:63:c2:0a:fb:ee:62:4e:92:d9:82:a6:
51:35:f4:e7:9d:b9:85:54:04:ff:43:b1:fb:dc:37:88:00:13:
fb:c8:fa:2b:7b:22:69:68:bb:fc:34:81:a4:5c:48:31:90:df:
42:64:bf:4e:db:75:d0:f0:24:85:01:a6:e3:60:92:e8:e7:9a:
73:ad:b4:30:7a:de:9e:a6:a4:96:71:8e:d9:31:80:4f:bb:67:
37:77:f2:88:f0:c6:ff:df:d2:70:36:08:db:de:e2:de:b3:ca:
6d:7c:70:1e:bb:42:f1:94:c7:4a:f0:16:3c:13:7f:f8:2b:54:
cd:0c:6c:b5:0d:b2:61:f9:b7:a7:5d:eb:6a:4b:79:dc:28:5c:
91:d8:89:87:da:af:11:1e:c9:19:ad:db:e1:99:45:1b:19:8d:
02:58:ee:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org