Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/bcIXzRVo0YfROuNBLC9JwSn4Qcg.roa
File: bcIXzRVo0YfROuNBLC9JwSn4Qcg.roa (raw, json)
Hash identifier: ke8B89fJv7lSChhqvY3+6H3GORlzmyeFwOrzkmM6zz4=
Subject key identifier: 6D:C2:17:CD:15:68:D1:87:D1:3A:E3:41:2C:2F:49:C1:29:F8:41:C8
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 09463957
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/bcIXzRVo0YfROuNBLC9JwSn4Qcg.roa
Signing time: Sat 01 Jan 2022 06:00:36 +0000
ROA not before: Sat 01 Jan 2022 06:00:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200615
IP address blocks: 46.243.76.0/22 maxlen: 22
94.154.136.0/22 maxlen: 22
193.42.60.0/22 maxlen: 22
77.83.32.0/22 maxlen: 22
2a09:e683:1::/48 maxlen: 48
2a09:e685::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155597143 (0x9463957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 06:00:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6dc217cd1568d187d13ae3412c2f49c129f841c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:cd:48:92:ed:66:17:13:1b:42:c8:36:66:
4e:e8:9d:55:36:d1:da:30:7e:68:14:3b:55:13:29:
4d:9e:b5:1a:72:7a:17:49:08:70:4e:7d:a3:5c:42:
88:63:7f:fa:b3:62:20:c0:c3:5c:c9:45:8a:4a:19:
c3:97:5e:95:c7:d6:86:4e:f8:fa:57:9a:3e:63:12:
7f:0b:73:a9:7e:c0:70:20:b4:e1:d5:36:2c:13:3a:
88:11:73:96:41:11:0b:3f:b0:57:94:ca:9e:3f:1e:
4e:46:3c:6b:ac:8a:ce:77:cb:c9:17:8c:85:6b:72:
6c:a9:c0:dc:14:5e:c4:9a:77:7d:29:71:41:c0:67:
48:7d:c4:5d:b7:b1:7e:f7:ac:84:4c:07:7d:7d:21:
f4:e4:18:87:3c:3c:5e:b6:f8:a4:7e:81:cd:ab:8c:
d0:77:20:22:2c:40:28:41:15:c9:41:fd:b6:88:d6:
85:5a:81:bf:ab:a7:49:22:a1:49:e9:77:a0:23:70:
4e:cc:ad:f4:75:66:57:d6:be:46:99:c4:0b:31:f6:
7e:e1:56:2c:34:e7:37:bd:48:de:41:6d:03:ac:88:
df:c2:d6:e3:c3:fd:44:e7:83:aa:b7:eb:7f:7f:6f:
2e:56:ef:f1:71:2a:ec:a6:df:6d:a3:ef:a7:ee:d7:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C2:17:CD:15:68:D1:87:D1:3A:E3:41:2C:2F:49:C1:29:F8:41:C8
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/bcIXzRVo0YfROuNBLC9JwSn4Qcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.76.0/22
77.83.32.0/22
94.154.136.0/22
193.42.60.0/22
IPv6:
2a09:e683:1::/48
2a09:e685::/48
Signature Algorithm: sha256WithRSAEncryption
10:18:30:dc:4b:a0:e9:a4:e1:b2:ce:26:27:0f:40:dd:96:5c:
e7:3e:6f:4b:21:bd:1d:32:07:37:1a:0f:4a:bc:db:8d:f7:44:
ca:45:f3:e0:25:b9:53:00:36:98:b7:83:4b:ea:c5:99:bb:f9:
89:fa:e8:81:ef:23:a6:73:2e:84:a2:0c:3f:6a:19:62:a4:6d:
3e:38:bd:37:dc:5b:c8:bf:63:be:d7:78:58:20:11:71:41:2e:
2c:7f:d5:e4:0a:ab:86:0c:87:e1:b4:55:bf:62:a9:69:b5:63:
b9:cb:38:b7:b7:ab:2d:39:83:f4:7f:0b:ab:7e:ae:54:20:b8:
10:06:da:75:72:13:76:d3:dd:94:66:ca:ed:db:32:f9:d8:b0:
e7:1b:fe:ab:48:a8:33:e5:e7:a4:ae:cf:a7:cd:5e:32:13:ed:
67:21:bc:97:db:7f:a3:74:9b:f9:70:05:d9:8c:bb:4e:bc:84:
56:b7:76:0e:dd:a4:b5:fa:f0:d4:26:1d:2b:94:03:a4:7f:bf:
8c:10:5f:ff:30:f3:b7:3b:c1:d0:b2:d3:45:bb:b3:f3:bf:af:
6e:c3:d9:de:f3:6b:d8:f8:35:28:08:39:b9:a8:aa:2e:76:0b:
9e:4e:25:31:ab:98:4a:c9:12:67:b9:46:12:ea:79:7e:ba:7d:
9b:ef:cd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org