Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/oDIvIgZvG3AAuQYIn0O7yiVDC6k.roa
File: oDIvIgZvG3AAuQYIn0O7yiVDC6k.roa (raw, json)
Hash identifier: aXIuIFenDy1VBOsbAJg3tmyEk9UHOTai4MqnCcEzRo4=
Subject key identifier: A0:32:2F:22:06:6F:1B:70:00:B9:06:08:9F:43:BB:CA:25:43:0B:A9
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01848746383E05D6B2B9B6C29E34990A1918
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/oDIvIgZvG3AAuQYIn0O7yiVDC6k.roa
Signing time: Thu 17 Nov 2022 20:27:16 +0000
ROA not before: Thu 17 Nov 2022 20:27:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.101.0/24 maxlen: 24
146.247.112.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:87:46:38:3e:05:d6:b2:b9:b6:c2:9e:34:99:0a:19:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Nov 17 20:27:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0322f22066f1b7000b906089f43bbca25430ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fb:fd:fd:ca:5e:06:49:9b:5e:89:1f:84:cf:
10:28:55:70:93:0e:37:63:2e:97:6a:c5:55:a7:18:
94:4f:98:b5:69:71:34:8d:7c:7f:99:1d:51:40:7d:
67:23:8d:ab:76:1a:26:60:40:50:14:89:31:e1:fa:
65:17:1a:9b:b6:80:a4:68:63:7d:e6:3e:43:ca:16:
22:68:18:db:e1:94:b0:74:14:0f:38:da:08:61:9c:
00:86:a1:39:cc:8b:66:1b:48:87:e5:8b:1d:f4:ec:
a1:88:d7:d4:58:37:0b:db:ab:81:37:20:89:24:b7:
e1:d2:72:82:3f:17:5d:09:01:29:00:86:12:b9:71:
2f:df:e3:68:bb:af:68:22:4b:ed:bb:e1:1a:df:fc:
dd:a8:b2:c8:44:33:e5:1f:44:3b:28:82:d8:7e:64:
fa:e4:e9:ed:e7:67:8e:cf:d7:0c:8f:1e:cb:63:ba:
97:6d:de:59:27:10:9c:ff:87:ef:b0:7e:e5:10:e7:
52:8d:9c:17:f1:8f:c3:11:44:03:5c:45:69:fa:36:
77:49:c4:57:61:df:68:79:6f:fe:9d:86:ba:69:65:
ca:c7:17:52:a9:df:bd:36:98:8a:d2:9f:ac:a6:2e:
a1:56:74:5d:f5:40:c2:cc:93:f6:de:50:93:2a:73:
7f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:32:2F:22:06:6F:1B:70:00:B9:06:08:9F:43:BB:CA:25:43:0B:A9
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/oDIvIgZvG3AAuQYIn0O7yiVDC6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.101.0/24
146.247.112.0/23
Signature Algorithm: sha256WithRSAEncryption
43:1d:2f:32:7c:53:21:65:50:52:65:9c:b3:19:9b:10:29:4b:
b8:d8:6d:97:9f:5d:10:ad:2a:22:46:bd:94:87:02:04:7d:fc:
7a:e9:69:06:72:6a:a3:49:9c:e1:ca:82:0f:af:1e:98:ed:b5:
a7:49:28:4b:5c:0a:c4:de:e5:96:2b:76:40:42:04:b1:2e:70:
ed:6b:f4:d6:0a:c8:6b:8c:ef:6e:2d:21:2e:22:d6:ee:34:b4:
15:fc:19:97:bb:fe:e8:87:30:9b:01:b1:fc:cd:f5:27:33:3e:
ef:f1:b7:a7:c2:d6:33:90:94:e9:df:29:28:f3:8b:17:d7:23:
2b:bf:10:7f:e5:bd:f1:63:1f:80:4e:b3:ef:52:bd:ee:05:8c:
43:61:21:ec:a3:18:65:12:c2:2f:5e:ef:81:2f:1c:e5:07:3e:
77:94:c5:c8:51:b6:70:5c:13:cd:55:02:71:62:95:d7:05:2e:
ee:23:29:31:8d:88:1d:7b:6f:1b:51:39:63:d6:10:96:30:3c:
08:0c:d5:30:ec:c6:3a:cf:82:22:64:b1:25:40:f9:b5:fc:80:
87:63:5f:d9:91:cd:2d:34:e2:17:36:ab:c0:23:62:1c:fb:a6:
80:35:d8:c6:02:7d:2d:48:8a:23:90:39:ff:1b:37:bd:22:d1:
2b:2d:9c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org