Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/g30Q4AJvQMUznREm0iN8lRrXGWs.roa
File: g30Q4AJvQMUznREm0iN8lRrXGWs.roa (raw, json)
Hash identifier: ifZCVNyKUQzLdS2+npIL4+kIV2MKBv7aNzyiRqZNlCM=
Subject key identifier: 83:7D:10:E0:02:6F:40:C5:33:9D:11:26:D2:23:7C:95:1A:D7:19:6B
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0184F194062D9E9D07496482C45F4C3F7FB9
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/g30Q4AJvQMUznREm0iN8lRrXGWs.roa
Signing time: Thu 08 Dec 2022 11:52:00 +0000
ROA not before: Thu 08 Dec 2022 11:52:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 146.247.104.0/24 maxlen: 24
146.247.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:94:06:2d:9e:9d:07:49:64:82:c4:5f:4c:3f:7f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Dec 8 11:52:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=837d10e0026f40c5339d1126d2237c951ad7196b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:25:df:45:cc:45:be:cc:cd:62:8d:3e:0d:
72:a7:bf:40:3a:b9:6f:f2:d3:bd:56:15:42:0d:0e:
9f:f0:7f:cb:20:14:9a:82:f7:c3:a8:d5:9b:3f:0d:
7b:97:b0:4a:f9:dd:6c:fb:13:7b:59:a6:2a:0d:17:
55:1f:1e:09:c9:c0:0e:79:68:e6:ba:5b:e3:b9:96:
37:cf:fe:29:f5:08:02:09:b1:d8:90:e8:a8:d3:94:
7f:55:18:a1:a2:81:69:fb:ed:e0:f1:41:c6:65:fc:
bc:bd:60:32:73:d2:e9:ca:72:d1:35:b8:cc:b6:05:
82:a0:59:1b:06:c8:59:f6:5e:58:43:1e:19:90:1d:
a3:f7:57:92:f6:fb:75:d6:a6:ab:f6:5f:d6:97:4c:
2a:09:ba:4f:7c:6b:4f:0d:c7:a1:8e:c8:a7:41:d7:
5a:0c:4c:b1:01:67:fd:38:ff:e9:de:92:4e:d7:0c:
ba:11:aa:c3:88:7b:17:f3:0d:29:53:23:3d:4f:3a:
00:02:f9:f9:c1:44:af:c5:70:d8:a9:e6:79:2d:3f:
82:35:71:40:84:5e:d4:06:6b:81:94:9b:a6:ee:da:
a2:af:bc:1e:37:21:cf:ec:5c:1d:40:ae:70:4b:29:
a4:6b:fd:00:c8:3d:bd:93:2c:9f:f7:39:0d:79:e9:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7D:10:E0:02:6F:40:C5:33:9D:11:26:D2:23:7C:95:1A:D7:19:6B
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/g30Q4AJvQMUznREm0iN8lRrXGWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.104.0/24
146.247.123.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2d:0a:ca:bd:76:c2:4c:83:58:fa:e2:26:ba:48:98:1d:a0:
9c:3f:77:a7:3b:ea:aa:4a:ba:d2:0a:fc:7a:1a:6e:4d:ce:84:
db:60:7c:4f:af:c8:26:65:c6:70:5d:02:72:45:80:de:15:4f:
08:bf:90:5d:5c:96:31:74:dc:26:f7:4c:9e:24:d5:33:32:34:
fb:56:80:08:00:ba:a6:64:80:77:46:bf:7e:25:b8:53:3f:77:
e3:ed:19:08:30:28:0e:f6:98:9f:50:43:98:32:90:0b:e3:d9:
3e:e1:76:ab:9a:4a:b7:e8:d0:bf:a6:c2:82:e5:c5:5f:5a:72:
7c:64:53:9d:8d:35:c3:18:6e:3c:a4:f0:c1:f3:42:21:4b:dc:
3c:f4:50:bf:16:e0:22:60:c3:cb:0a:5a:c1:8e:44:59:b4:86:
1d:86:23:13:76:35:dc:70:61:71:20:5b:3f:aa:a5:c7:9c:b1:
22:52:d1:94:04:8a:95:9c:e7:83:26:d2:ff:d1:72:1d:d6:c1:
5d:78:aa:9f:5e:6e:2e:ac:d0:25:14:97:0f:60:12:b7:02:b3:
65:2d:85:ce:2e:a6:20:72:c2:af:a2:13:56:16:8f:4c:2c:59:
39:48:b5:34:00:7b:8d:b5:05:52:31:bb:f0:a7:a5:bd:ea:7e:
dd:a1:9d:5c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYTxlAYtnp0HSWSCxF9MP3+5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjIxMjA4MTE1MjAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzdkMTBlMDAyNmY0MGM1MzM5ZDExMjZkMjIzN2M5NTFhZDcxOTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmkl30XMRb7MzWKNPg1yp79AOrlv
8tO9VhVCDQ6f8H/LIBSagvfDqNWbPw17l7BK+d1s+xN7WaYqDRdVHx4JycAOeWjm
ulvjuZY3z/4p9QgCCbHYkOio05R/VRihooFp++3g8UHGZfy8vWAyc9LpynLRNbjM
tgWCoFkbBshZ9l5YQx4ZkB2j91eS9vt11qar9l/Wl0wqCbpPfGtPDcehjsinQdda
DEyxAWf9OP/p3pJO1wy6EarDiHsX8w0pUyM9TzoAAvn5wUSvxXDYqeZ5LT+CNXFA
hF7UBmuBlJum7tqir7weNyHP7FwdQK5wSymka/0AyD29kyyf9zkNeenBUQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIN9EOACb0DFM50RJtIjfJUa1xlrMB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvZzMwUTRBSnZRTVV6blJFbTBpTjhsUnJYR1dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkvdoAwQA
kvd7MA0GCSqGSIb3DQEBCwUAA4IBAQB7LQrKvXbCTINY+uImukiYHaCcP3enO+qq
SrrSCvx6Gm5NzoTbYHxPr8gmZcZwXQJyRYDeFU8Iv5BdXJYxdNwm90yeJNUzMjT7
VoAIALqmZIB3Rr9+JbhTP3fj7RkIMCgO9pifUEOYMpAL49k+4Xarmkq36NC/psKC
5cVfWnJ8ZFOdjTXDGG48pPDB80IhS9w89FC/FuAiYMPLClrBjkRZtIYdhiMTdjXc
cGFxIFs/qqXHnLEiUtGUBIqVnOeDJtL/0XId1sFdeKqfXm4urNAlFJcPYBK3ArNl
LYXOLqYgcsKvohNWFo9MLFk5SLU0AHuNtQVSMbvwp6W96n7doZ1c
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org