Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/jjouwFPmTr6ZLGrHgxwVBzU9EKM.roa
File: jjouwFPmTr6ZLGrHgxwVBzU9EKM.roa (raw, json)
Hash identifier: fBrWCxyco0NOEyzviHLOV0GKQHYwcxVxSpmSj3uVomA=
Subject key identifier: 8E:3A:2E:C0:53:E6:4E:BE:99:2C:6A:C7:83:1C:15:07:35:3D:10:A3
Certificate issuer: /CN=70811ce0ce7353f03ede9cb7ca5116255fbfb7bd
Certificate serial: 018438782FA53CABE14A2CEF6A9508409ADB
Authority key identifier: 70:81:1C:E0:CE:73:53:F0:3E:DE:9C:B7:CA:51:16:25:5F:BF:B7:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIEc4M5zU_A-3py3ylEWJV-_t70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/jjouwFPmTr6ZLGrHgxwVBzU9EKM.roa
Signing time: Wed 02 Nov 2022 13:11:51 +0000
ROA not before: Wed 02 Nov 2022 13:11:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52058
IP address blocks: 46.174.56.0/21 maxlen: 24
91.221.212.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:78:2f:a5:3c:ab:e1:4a:2c:ef:6a:95:08:40:9a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70811ce0ce7353f03ede9cb7ca5116255fbfb7bd
Validity
Not Before: Nov 2 13:11:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e3a2ec053e64ebe992c6ac7831c1507353d10a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:5c:d6:ba:ca:b7:1e:f0:71:74:12:b6:5d:
02:1c:f5:1e:72:bf:be:11:e1:43:fa:60:77:d5:41:
cd:29:a4:43:3d:3f:5f:14:60:0c:41:c4:ad:1e:20:
ce:75:24:03:46:62:ba:6e:cf:b3:8c:8b:df:76:b0:
83:23:ce:95:e3:bd:03:d8:b8:24:ac:4b:fc:0d:6d:
ee:d6:74:22:84:e6:ca:c4:bf:bd:54:68:a4:99:5e:
0c:f0:36:6c:56:49:ee:3a:3a:4d:67:37:1f:04:09:
4f:22:6c:9e:3e:92:b7:39:ba:a3:52:54:09:a7:4a:
4c:89:4f:39:87:e9:3e:f3:37:1c:e3:ee:bd:be:45:
ab:9b:6c:7f:ba:69:62:a6:e7:1a:6c:b1:26:93:a3:
53:42:6c:e7:da:75:a8:29:36:51:c2:f7:2e:e0:c2:
c0:87:4c:bb:f2:75:0b:e4:4a:04:a9:95:66:32:d0:
8b:e5:8e:43:cd:77:2e:5b:67:db:e8:d1:0e:c1:84:
14:6f:cb:b4:02:2d:a5:3a:4b:7d:85:94:29:2e:d4:
a7:1b:88:be:fa:e3:7d:1b:c3:17:ca:01:ca:77:2b:
cd:47:70:ff:6c:b4:f3:67:4a:93:e9:ff:ee:7f:fe:
3c:15:84:2f:18:cc:de:63:68:99:4d:c3:44:ac:91:
62:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3A:2E:C0:53:E6:4E:BE:99:2C:6A:C7:83:1C:15:07:35:3D:10:A3
X509v3 Authority Key Identifier:
keyid:70:81:1C:E0:CE:73:53:F0:3E:DE:9C:B7:CA:51:16:25:5F:BF:B7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIEc4M5zU_A-3py3ylEWJV-_t70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/jjouwFPmTr6ZLGrHgxwVBzU9EKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.56.0/21
91.221.212.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:f1:2c:5e:8d:e0:24:ac:9b:1b:3d:2c:08:a3:11:4a:ae:93:
3f:f9:f2:13:9d:39:3d:7f:dc:4e:b0:5a:7c:4f:87:e4:96:04:
bf:e4:9a:e3:0f:51:41:cf:f3:74:0f:26:4d:2a:c5:2f:9d:98:
a4:c4:d1:28:e8:a5:9b:e4:f8:da:68:97:84:b9:ef:d6:58:10:
2e:90:4c:8c:51:db:67:94:05:d2:2b:36:f7:c1:5a:12:75:24:
7c:12:9e:3a:6a:42:1e:37:ff:bc:af:d1:a9:c8:4a:d3:1b:dc:
00:b2:b0:5b:7c:15:8a:a5:08:1a:2d:e5:dd:19:6d:4c:6c:26:
c2:87:2b:6f:ae:51:3d:68:12:44:1e:9f:03:26:60:ba:d7:c5:
17:cb:3a:1f:77:73:5f:cd:28:78:f8:a3:50:02:69:f0:ac:49:
3a:93:10:dc:3b:d2:93:79:b8:ac:df:d5:98:69:b5:90:d6:b9:
aa:82:14:6d:fb:7a:a2:16:ae:12:31:8d:df:4d:e9:8a:9e:f7:
80:57:ef:eb:c3:3a:e3:2f:2c:8f:ad:4a:df:1e:b1:fb:a1:86:
3f:40:50:16:94:fe:87:7d:76:b3:1b:87:7a:80:51:ea:53:89:
ee:93:2f:b8:43:a8:75:e8:e6:bd:5a:56:4f:c5:a7:4e:f9:9d:
4e:62:ab:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:11 2024 by rpki-client on console-fra.rpki-client.org