Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/mDqF2oUneezaJegtNwxnC9NnKPk.roa
File: mDqF2oUneezaJegtNwxnC9NnKPk.roa (raw, json)
Hash identifier: jfWAWboj9+27U6XpgrVg5V3q/6JLLL++SncKuMRBaw8=
Subject key identifier: 98:3A:85:DA:85:27:79:EC:DA:25:E8:2D:37:0C:67:0B:D3:67:28:F9
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018433231EF62CA9A5A45950F55CEC7F53EF
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/mDqF2oUneezaJegtNwxnC9NnKPk.roa
Signing time: Tue 01 Nov 2022 12:20:50 +0000
ROA not before: Tue 01 Nov 2022 12:20:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 146.247.103.0/24 maxlen: 24
146.247.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:33:23:1e:f6:2c:a9:a5:a4:59:50:f5:5c:ec:7f:53:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Nov 1 12:20:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=983a85da852779ecda25e82d370c670bd36728f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:11:bb:06:af:f0:53:7d:65:e2:24:52:16:90:
fa:ed:f4:c3:6e:f1:47:9c:d9:bc:78:84:17:29:fe:
f7:c7:65:30:f8:37:3b:87:a6:27:d8:77:8c:51:65:
57:a1:1a:4a:c5:d2:1a:ec:71:a6:a9:6c:09:53:ff:
d4:f0:4a:d8:68:a9:ce:e0:0c:8c:25:5f:ac:4f:52:
e4:23:aa:27:61:0b:a5:d7:ea:03:d1:3f:31:cb:4c:
bf:b6:85:e1:79:4a:5c:90:ea:4f:64:64:30:e2:d9:
c8:d6:29:c2:73:a9:52:30:37:ed:38:15:de:97:5f:
34:0a:97:a5:c9:66:25:81:54:cd:2a:9c:b4:8e:a2:
12:7e:e1:19:67:37:05:16:a8:25:94:b8:7c:dd:dc:
91:76:0a:6c:a0:a3:a2:b0:b8:ed:e5:7b:61:49:73:
b3:78:f8:44:47:96:fa:0e:1e:06:ef:fe:64:81:24:
62:3a:5c:83:e9:ce:5d:d9:63:20:8d:00:f1:a2:48:
e7:e9:30:d1:f1:ef:c0:78:a9:bd:a6:37:a1:be:f4:
0f:e7:6b:3d:70:6b:f0:3e:de:97:0f:ad:15:6f:c4:
e0:93:92:80:41:14:bd:f1:6b:ad:b9:26:5b:69:4b:
a6:e5:2b:4e:0d:11:65:e4:31:39:4c:3f:e8:1f:23:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3A:85:DA:85:27:79:EC:DA:25:E8:2D:37:0C:67:0B:D3:67:28:F9
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/mDqF2oUneezaJegtNwxnC9NnKPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.103.0/24
146.247.105.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:6c:ea:02:ca:2d:e9:00:0e:70:98:71:b2:0c:b9:61:90:39:
3a:ed:2a:9e:16:90:51:88:90:61:b5:98:58:9c:7d:89:88:67:
7c:fb:cc:c0:ca:13:0d:c6:ed:40:42:1f:34:18:a8:18:c5:1f:
84:d8:ca:7b:c0:aa:28:ad:45:69:e9:80:ee:75:65:6e:40:5f:
e3:b4:cf:f8:c3:76:5c:d1:10:10:18:11:fe:c0:40:70:b0:19:
50:4c:bf:40:e1:cf:6e:96:c0:0f:69:55:2c:c7:bb:ae:6c:c5:
f6:53:98:b5:4c:3c:ea:fe:bf:3d:fe:67:9a:2b:01:5c:a8:06:
99:cf:7c:a8:6a:61:f9:7e:0a:a1:94:42:88:52:9c:b8:3a:4d:
24:71:85:07:db:29:96:c0:8f:9a:3b:0d:f7:e2:1f:d8:bb:d5:
a6:27:4b:3f:ff:29:af:c9:ef:29:8a:9f:a7:f0:b0:55:c5:0b:
0e:b3:f4:45:7a:da:1e:ae:bc:77:d7:11:ca:18:61:3a:a4:41:
5e:b4:d8:ce:15:dd:7f:4c:db:9a:2b:87:6b:89:bf:29:3c:8f:
d3:7e:12:2a:a5:2c:d9:77:97:28:04:e7:62:39:59:73:2c:c2:
39:36:69:ea:c8:d7:ec:51:d9:fe:01:da:e0:4a:2d:57:57:d9:
33:77:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org