Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/tJ-P_rc1mLIJzDa0Awv7RmuDyA8.roa
File: tJ-P_rc1mLIJzDa0Awv7RmuDyA8.roa (raw, json)
Hash identifier: stuEUYlS0nfEGNTt54cYEo0YWvpuz7YtgrX3JdyIBZ4=
Subject key identifier: B4:9F:8F:FE:B7:35:98:B2:09:CC:36:B4:03:0B:FB:46:6B:83:C8:0F
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01855FA4EA30054B236B72CD5E578118BC5A
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/tJ-P_rc1mLIJzDa0Awv7RmuDyA8.roa
Signing time: Thu 29 Dec 2022 20:48:41 +0000
ROA not before: Thu 29 Dec 2022 20:48:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 146.247.108.0/24 maxlen: 24
146.247.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5f:a4:ea:30:05:4b:23:6b:72:cd:5e:57:81:18:bc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Dec 29 20:48:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b49f8ffeb73598b209cc36b4030bfb466b83c80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0a:b4:f1:c7:85:0f:63:bc:3d:4a:9c:10:60:
4c:ab:0d:c3:76:46:89:da:91:ad:cd:4b:00:71:1f:
29:60:4f:27:98:45:15:03:73:71:65:de:86:4b:ed:
08:33:8c:f9:6d:99:a4:f3:71:79:4d:45:f4:b6:6d:
74:d1:51:1d:52:02:30:0b:85:61:f2:db:c2:a5:57:
57:80:a1:7e:97:46:f0:b8:41:09:d4:08:db:e2:6b:
ae:83:bb:73:37:3d:12:3c:f3:df:d6:87:51:62:25:
eb:70:de:b3:9b:62:e7:45:7a:ec:5c:41:63:83:4a:
43:96:1c:37:2c:f6:a5:b5:b2:d8:1a:2d:66:10:21:
e2:c8:be:cf:cb:c4:e6:52:ed:d1:88:c4:a0:95:1c:
74:31:55:a5:77:60:30:9b:53:05:49:f0:4e:97:e0:
b7:3e:d4:12:e2:b1:66:4b:17:de:ae:48:3e:22:11:
a8:08:f9:5d:b0:28:bb:cf:dc:c8:b0:f8:89:a5:9b:
62:13:ad:d5:ab:6b:d5:b5:27:a3:86:d0:f5:fa:33:
1a:c8:13:71:f6:7c:15:4d:60:83:07:6c:b5:d8:f5:
06:18:1e:49:e4:10:9f:32:98:c7:56:3a:ff:8f:7e:
b5:47:c1:fb:ae:d8:cc:6f:aa:e4:46:e5:77:85:ef:
18:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9F:8F:FE:B7:35:98:B2:09:CC:36:B4:03:0B:FB:46:6B:83:C8:0F
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/tJ-P_rc1mLIJzDa0Awv7RmuDyA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.108.0/24
146.247.114.0/24
Signature Algorithm: sha256WithRSAEncryption
95:5c:a3:f8:00:1c:6f:fb:ab:2c:f3:05:c4:e3:98:44:13:c9:
9d:fe:54:b3:ad:ab:f9:e6:1a:a6:75:ca:f5:58:ba:48:19:61:
5a:d0:50:d9:3b:b9:92:57:9f:5b:dd:32:8e:6c:94:ad:96:d7:
07:e8:6f:1b:33:ae:a3:09:39:68:14:1f:12:2d:1c:34:d8:d4:
09:29:13:8c:71:5e:37:ee:e7:4c:48:93:26:c5:71:98:f1:64:
46:50:bb:77:eb:49:41:81:0a:51:59:d7:dc:cf:dc:ee:80:d0:
cb:61:a5:f1:7d:a8:11:a5:36:1a:da:a9:bd:18:b5:2e:73:68:
57:93:de:7f:ad:46:23:92:66:35:94:4f:f6:9c:16:cb:cf:66:
26:f9:00:85:65:7f:59:44:f3:c3:f0:0c:31:a6:ed:39:af:3a:
12:8d:21:14:68:81:76:66:f3:a8:17:73:15:62:05:a1:d7:e2:
13:1c:5e:1e:a6:8a:8a:55:ab:89:dc:c4:7f:61:f1:6a:d1:52:
91:9f:c6:67:06:e2:55:87:73:b7:6c:79:62:fa:a9:ff:93:a2:
54:7a:8e:b3:30:b7:85:d3:5e:6a:3f:e6:93:25:01:0a:15:84:
1e:97:b4:ca:7f:22:f9:82:fc:f3:48:12:2d:af:54:d5:f7:f7:
d4:e3:5a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org