Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/zHlsD_2vCMajcm_AO53wEzziMV0.roa
File: zHlsD_2vCMajcm_AO53wEzziMV0.roa (raw, json)
Hash identifier: q8AiwfmJ9xJ6rOzp+Q3eKsQgqcijximNE2qyUIcKrVQ=
Subject key identifier: CC:79:6C:0F:FD:AF:08:C6:A3:72:6F:C0:3B:9D:F0:13:3C:E2:31:5D
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01825F581193872AEF09716A14D6F56B5AE5
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/zHlsD_2vCMajcm_AO53wEzziMV0.roa
Signing time: Tue 02 Aug 2022 16:16:23 +0000
ROA not before: Tue 02 Aug 2022 16:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 146.247.105.0/24 maxlen: 24
146.247.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5f:58:11:93:87:2a:ef:09:71:6a:14:d6:f5:6b:5a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Aug 2 16:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc796c0ffdaf08c6a3726fc03b9df0133ce2315d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:c3:6d:74:2b:d1:18:18:4c:62:3a:ea:e3:
c0:0c:f8:d5:06:09:12:e5:b9:08:e7:cf:fc:7a:91:
cb:da:84:47:ec:63:c8:d6:f4:69:ca:6c:ef:46:1a:
ae:9c:22:ac:25:99:3a:04:f6:04:36:46:34:db:b1:
0c:01:f8:4f:3c:4d:33:b8:2b:3a:c6:dd:c4:7c:b6:
57:fc:90:c5:e5:61:98:ca:c1:b7:6c:61:43:4b:b5:
78:9e:88:59:d8:f2:e6:aa:7e:65:37:86:55:9f:b1:
38:c6:0e:91:45:24:48:25:44:98:2e:31:7c:ab:f8:
43:e3:e3:dd:de:85:0a:2b:19:32:b5:8a:fc:bc:07:
c3:5a:cc:77:66:9d:e2:3a:5f:0d:4a:1c:1a:16:0a:
07:47:d4:de:84:2b:c7:ca:8b:b5:1a:e0:c5:86:5b:
fd:de:d7:9f:a9:93:47:30:7f:71:0f:2a:ff:77:cd:
53:be:59:c8:21:90:4d:15:92:a8:62:56:94:91:dc:
e2:ba:68:6f:df:70:99:7c:9b:13:54:0b:cb:57:29:
f7:a6:54:c6:20:9f:9d:7d:bf:a0:86:55:63:4e:fe:
f7:66:c7:ae:fc:f2:71:ab:f5:9a:6d:24:4f:9b:c5:
65:16:69:6f:1e:74:24:f2:89:23:0b:d9:74:c7:b6:
03:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:79:6C:0F:FD:AF:08:C6:A3:72:6F:C0:3B:9D:F0:13:3C:E2:31:5D
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/zHlsD_2vCMajcm_AO53wEzziMV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.105.0/24
146.247.114.0/24
Signature Algorithm: sha256WithRSAEncryption
24:4e:32:33:e2:db:bc:1d:4b:56:12:f5:59:88:cd:30:37:fc:
bc:04:91:42:d4:f9:1b:d4:1a:07:e4:f2:85:b6:9c:5f:ff:5c:
44:05:6e:48:cb:69:dc:84:99:55:1c:0f:b7:3a:16:99:03:b5:
ca:1b:ec:ec:99:d0:7a:68:ed:4a:26:b9:56:ea:29:6e:9a:4c:
c3:90:75:70:9f:b4:18:68:d9:3c:16:2d:63:6a:99:11:b9:70:
44:db:51:43:81:e2:94:af:c0:70:ac:f8:5e:c6:ff:89:70:fc:
07:9f:c6:62:df:16:c3:51:0d:de:dc:1c:fe:d2:7b:7c:b6:ce:
47:7d:61:d6:ff:d4:9e:e0:bc:82:f2:88:99:1c:5f:c9:ab:7f:
aa:f6:31:7c:80:76:e3:58:12:3b:37:49:fc:b7:18:7d:d3:a8:
d0:f0:44:d3:b5:ab:39:f4:a2:1b:2d:fb:3b:15:2b:7f:2d:8c:
8f:12:fa:c6:d4:0a:bd:db:78:4b:d5:7a:59:53:e5:8d:94:5b:
9e:11:98:69:18:5e:20:6b:4b:50:39:31:94:14:66:8a:67:90:
ca:aa:ef:3c:1b:94:43:1f:9a:90:ae:a0:0a:f6:32:b6:72:4e:
0c:14:bc:3c:37:da:32:96:7b:2e:e6:f8:e7:a3:4f:53:8a:5e:
69:82:c1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org