Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/rnqobXHRIwzYLRbqMi8N2PDgwWA.roa
File: rnqobXHRIwzYLRbqMi8N2PDgwWA.roa (raw, json)
Hash identifier: CYHSZRntkNiMZeTiOSj2+uAgVAUk3iF/zSLHrJ5lx1E=
Subject key identifier: AE:7A:A8:6D:71:D1:23:0C:D8:2D:16:EA:32:2F:0D:D8:F0:E0:C1:60
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01840BD5E223D767FCC884C459E86A8C7F48
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/rnqobXHRIwzYLRbqMi8N2PDgwWA.roa
Signing time: Mon 24 Oct 2022 21:11:17 +0000
ROA not before: Mon 24 Oct 2022 21:11:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 146.247.103.0/24 maxlen: 24
146.247.105.0/24 maxlen: 24
146.247.108.0/22 maxlen: 24
146.247.116.0/22 maxlen: 24
146.247.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0b:d5:e2:23:d7:67:fc:c8:84:c4:59:e8:6a:8c:7f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Oct 24 21:11:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae7aa86d71d1230cd82d16ea322f0dd8f0e0c160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:a4:63:e2:d8:c4:13:16:9e:9a:bd:52:b0:
5f:a2:e7:7d:bf:35:58:6e:2c:33:40:4d:c3:19:df:
c9:9a:05:fe:17:3c:6e:8e:4a:e7:3c:3d:e9:6c:96:
4b:8d:7b:fe:42:f0:44:4c:7c:e7:ea:df:08:64:2c:
2c:bd:1c:e1:7a:11:8c:42:be:29:87:7c:d8:d3:f0:
c8:3c:2e:ee:da:9d:2f:ea:81:9b:da:b7:62:62:22:
a7:a5:8b:3b:b6:57:56:83:cb:3f:ca:24:04:c4:1b:
ef:d5:78:06:db:3e:16:bf:78:89:f1:1d:08:7f:7d:
28:75:4b:f7:f0:b6:9b:de:eb:d8:48:12:bc:88:be:
f9:ee:16:3f:c3:3d:0b:99:d1:ae:5d:c0:90:76:b1:
06:f6:a7:d2:88:16:2c:72:74:4d:60:85:f5:d5:fb:
6f:de:13:fa:47:03:e9:75:2e:59:7b:ed:39:ab:53:
3e:c8:77:3c:73:18:af:d1:bd:f3:1a:8e:da:7d:87:
4b:cd:7d:3e:76:90:92:99:20:7f:e5:ad:8b:59:53:
f0:3f:43:ad:a0:40:44:d4:53:96:09:61:9f:6d:63:
e5:f8:12:2e:40:47:77:74:ba:8a:be:52:9b:60:b1:
a3:09:bf:f0:6e:95:5b:6f:18:6b:ac:71:3d:d8:60:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7A:A8:6D:71:D1:23:0C:D8:2D:16:EA:32:2F:0D:D8:F0:E0:C1:60
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/rnqobXHRIwzYLRbqMi8N2PDgwWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.103.0/24
146.247.105.0/24
146.247.108.0/22
146.247.114.0/24
146.247.116.0/22
Signature Algorithm: sha256WithRSAEncryption
42:27:e4:68:13:41:4e:d2:5c:ed:fe:c5:5b:7a:d9:a3:e1:cb:
b3:aa:04:ae:10:63:5a:a5:4f:d6:db:ca:0f:d4:29:ec:20:6f:
d3:4b:6f:6c:39:8f:52:5d:9f:50:47:65:0f:8d:bd:78:4f:77:
b8:70:30:4b:78:b3:86:ee:df:04:1a:2e:b2:a2:00:a7:fa:33:
ea:a1:92:81:19:fd:b5:80:b1:6b:9c:09:4a:f4:5c:2b:2c:79:
3e:4a:34:fb:00:5b:25:0c:31:f9:5b:34:27:c2:b2:1c:99:49:
ab:63:90:6e:f3:5c:9d:69:5d:c4:ae:19:af:2c:1f:f8:67:10:
ec:5a:d7:53:80:34:35:34:94:e2:8a:27:67:f0:13:6d:a3:ba:
e0:0b:3a:ab:3e:eb:d6:93:99:f1:c2:88:20:c6:5e:fc:8e:20:
1e:07:2b:cd:00:4d:bb:cb:32:11:8f:1b:2e:9f:6e:ec:37:99:
3d:90:d0:33:18:bf:23:9b:e4:e0:67:2e:a1:d3:37:41:bb:55:
76:56:28:cf:5d:90:06:ff:7d:12:50:89:9d:1c:a9:c7:07:a3:
7f:55:d8:9b:d2:0e:9e:cc:55:8f:dc:bb:86:7a:da:55:8c:27:
28:dc:bc:64:e2:89:e8:20:1b:c2:7d:22:b3:63:b3:90:28:d3:
d2:b7:80:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org