Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/oXnklR_BTP7XKU36XEkywYK-yns.roa
File: oXnklR_BTP7XKU36XEkywYK-yns.roa (raw, json)
Hash identifier: XWteFw57IpjCFBpchHIx80oM2xpuH4WDqpwhHXehsLo=
Subject key identifier: A1:79:E4:95:1F:C1:4C:FE:D7:29:4D:FA:5C:49:32:C1:82:BE:CA:7B
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0183F5398C564FA72B9E7DC6A8B9205E42C2
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/oXnklR_BTP7XKU36XEkywYK-yns.roa
Signing time: Thu 20 Oct 2022 11:48:52 +0000
ROA not before: Thu 20 Oct 2022 11:48:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 146.247.115.0/24 maxlen: 24
146.247.121.0/24 maxlen: 24
146.247.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f5:39:8c:56:4f:a7:2b:9e:7d:c6:a8:b9:20:5e:42:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Oct 20 11:48:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a179e4951fc14cfed7294dfa5c4932c182beca7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:68:da:c6:c5:d3:60:32:a9:81:93:c5:c6:89:
44:c4:9c:f7:09:85:4a:32:c5:7c:14:99:6a:8f:52:
b0:5e:de:ee:c9:d6:7e:55:ea:59:7f:3a:09:68:6d:
40:97:34:1f:28:d2:2f:9d:03:d6:a4:bd:c8:5d:50:
e6:db:0c:66:3f:c3:4a:d4:b2:9c:43:15:b3:a9:b4:
ab:43:9f:c3:4a:e9:b7:a6:b8:66:81:57:7b:17:e7:
ea:d5:ad:e3:01:1d:a5:c2:43:0c:74:de:64:a3:57:
fd:e9:cd:d1:e0:04:1f:93:e5:fa:26:4e:cd:21:69:
fa:81:a2:74:34:ea:4c:8e:b5:b9:6b:b9:6e:95:8b:
b8:cc:b8:a9:22:8b:61:2a:32:ba:82:97:6c:99:57:
35:2e:69:12:01:55:13:f1:1e:99:f8:63:52:f9:6b:
04:da:77:38:98:87:60:15:cc:b3:75:01:55:8c:a4:
d2:e0:6c:b8:8f:59:4c:27:bc:3d:e9:d0:b1:30:93:
d6:04:8a:cd:e3:1a:a3:5f:47:17:9e:8b:0e:36:83:
48:e1:5f:f0:77:c4:5d:f3:6f:73:a1:cf:19:5a:0f:
c3:13:9c:90:23:81:18:4e:eb:fa:92:21:ce:cd:9b:
44:62:a5:1d:7e:fe:7d:3c:bf:ad:41:fd:f4:da:5e:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:79:E4:95:1F:C1:4C:FE:D7:29:4D:FA:5C:49:32:C1:82:BE:CA:7B
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/oXnklR_BTP7XKU36XEkywYK-yns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.115.0/24
146.247.121.0/24
146.247.124.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c0:de:0d:b9:6f:0f:ce:3c:43:d9:cb:3c:87:50:3b:f4:05:
84:c4:70:7a:70:87:5d:62:59:00:04:c8:88:41:e4:db:77:31:
4b:d2:89:3c:3e:48:ee:22:7b:48:dd:31:a8:9a:37:b3:86:54:
b2:1a:b6:56:5f:a3:48:01:78:b5:67:24:6d:0d:64:d4:f4:a3:
9b:87:f1:c6:7a:40:93:b8:c8:c9:4e:19:fc:51:47:f1:9b:3b:
45:1a:01:26:6c:3c:06:15:ad:f7:f5:a4:24:12:aa:13:e0:19:
95:ff:c8:14:aa:a0:b6:27:d1:8a:c1:34:28:fa:68:49:79:bd:
c4:6f:8d:75:28:0d:71:78:15:59:e7:91:65:62:02:4d:93:c5:
42:72:7f:4d:06:10:48:2e:74:12:00:ec:85:6d:5f:4a:82:64:
13:f7:f3:a3:2a:82:f5:76:3f:d6:6a:63:2c:1d:6c:fa:9e:c9:
20:e7:02:86:bc:27:64:c6:f2:2b:35:62:7a:bf:76:4f:21:c0:
8b:09:bf:fb:cc:8f:31:db:d6:8f:df:e7:d4:9d:ff:34:bb:27:
d0:ae:4f:9d:11:16:20:a6:d2:1c:7e:d3:c3:11:74:96:23:6d:
f3:fb:69:1a:34:41:ce:e9:d1:3c:71:ee:4d:57:95:a6:91:1a:
17:d8:82:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:19 2024 by rpki-client on console-fra.rpki-client.org