Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/o-hJ_OJQkcY-JnqTuRhRqpeBi-c.roa
File: o-hJ_OJQkcY-JnqTuRhRqpeBi-c.roa (raw, json)
Hash identifier: ZhaNJ8svvD3MHybPfhL3VrmjJs7VHdrG2lFo68yLRpY=
Subject key identifier: A3:E8:49:FC:E2:50:91:C6:3E:26:7A:93:B9:18:51:AA:97:81:8B:E7
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018385BF94AE808E4DDE7F4FAD2081CD7777
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/o-hJ_OJQkcY-JnqTuRhRqpeBi-c.roa
Signing time: Wed 28 Sep 2022 20:17:48 +0000
ROA not before: Wed 28 Sep 2022 20:17:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 146.247.103.0/24 maxlen: 24
146.247.105.0/24 maxlen: 24
146.247.108.0/22 maxlen: 24
146.247.106.0/24 maxlen: 24
146.247.116.0/22 maxlen: 24
146.247.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:85:bf:94:ae:80:8e:4d:de:7f:4f:ad:20:81:cd:77:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Sep 28 20:17:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3e849fce25091c63e267a93b91851aa97818be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:ca:49:52:27:4d:a7:79:88:08:3e:b8:dc:
8b:aa:4c:65:54:46:77:c3:7b:70:3e:05:5e:84:35:
71:3c:66:e2:e1:ef:59:e6:34:1a:00:39:82:be:28:
15:b4:ec:05:aa:10:21:f2:95:62:82:80:5e:8b:f8:
fc:c2:a9:b7:e8:1f:d0:29:c2:89:82:ce:68:28:6e:
8f:5a:77:7a:08:75:d2:60:c6:f1:45:4b:b4:7d:da:
56:96:ef:64:1c:04:92:66:c5:50:e6:44:8c:f6:e0:
86:66:c3:4e:fa:96:3b:43:49:89:69:6b:78:2a:a8:
c3:97:1a:e3:23:d4:81:0c:08:62:6c:48:fe:67:08:
47:b3:eb:d0:21:47:80:73:af:5d:49:24:c5:04:cd:
b9:f8:34:61:a3:cc:b9:69:f8:e8:64:c8:3c:1f:d5:
cf:2e:76:3d:6a:f6:13:c5:cb:97:5d:fe:5e:71:fc:
8c:dd:b2:13:f7:1b:c3:a8:2e:c4:10:16:61:4a:7d:
08:ed:21:23:c8:1f:59:9d:9b:0a:58:0c:10:5b:eb:
e5:be:18:88:ef:26:ff:f5:2c:29:63:b7:57:ef:f4:
19:67:bb:11:07:50:b2:19:0d:cd:8d:07:9c:98:d9:
9b:ed:1a:c0:a0:cd:da:9d:3f:08:7c:09:58:06:d1:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E8:49:FC:E2:50:91:C6:3E:26:7A:93:B9:18:51:AA:97:81:8B:E7
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/o-hJ_OJQkcY-JnqTuRhRqpeBi-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.103.0/24
146.247.105.0-146.247.106.255
146.247.108.0/22
146.247.114.0/24
146.247.116.0/22
Signature Algorithm: sha256WithRSAEncryption
26:6d:d1:b1:89:3e:f6:c5:19:5a:00:cc:64:a6:7a:ea:3f:9c:
dd:cc:6f:09:b1:1c:5a:e6:98:eb:2e:2d:a3:fe:42:0b:0c:44:
40:64:f3:c0:75:74:f1:11:b6:f0:73:a8:04:23:33:06:59:12:
32:59:38:2c:7a:96:a3:03:b1:b5:f8:2b:c3:f2:92:d1:ed:d1:
23:4c:98:b4:7a:83:54:bc:e6:db:dc:ec:35:46:bf:3f:d0:70:
09:62:98:a9:6d:fa:ab:55:ef:d1:83:96:e9:30:93:21:bd:5d:
c2:f6:95:33:a7:28:f3:0e:1b:ab:70:95:2d:71:7b:e1:61:a7:
06:bc:0f:41:37:a9:04:38:4e:b1:52:b3:ee:7f:e3:50:33:47:
8f:a7:3c:46:3f:68:59:bc:64:74:33:a7:f0:e8:71:fc:3f:29:
ba:61:76:93:f6:43:ed:a8:42:80:db:bf:bb:00:8d:0e:b8:d0:
ee:29:d1:05:60:38:a8:58:a4:1c:b3:32:16:19:33:51:99:8f:
c3:3f:32:e3:0e:83:ab:bc:45:dc:4b:b7:41:4a:da:d6:e8:86:
b8:54:6e:02:c3:5b:82:d5:c4:b3:2b:6d:c8:28:ec:02:ca:c6:
74:12:bd:ff:81:d1:6e:e8:3f:b1:a2:b6:12:9e:53:cf:f3:34:
e7:62:4b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org