Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/FGH5U1a6ghvFSegNjnLKqZFV2PE.roa
File: FGH5U1a6ghvFSegNjnLKqZFV2PE.roa (raw, json)
Hash identifier: 0iLua659IE8xldJl/EQmXDwQytzbtuzqjMMtB1v20T4=
Subject key identifier: 14:61:F9:53:56:BA:82:1B:C5:49:E8:0D:8E:72:CA:A9:91:55:D8:F1
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 018544C113CF83F5D01BADBD7A5E27D5C2C6
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/FGH5U1a6ghvFSegNjnLKqZFV2PE.roa
Signing time: Sat 24 Dec 2022 15:29:42 +0000
ROA not before: Sat 24 Dec 2022 15:29:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58192
IP address blocks: 46.148.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:44:c1:13:cf:83:f5:d0:1b:ad:bd:7a:5e:27:d5:c2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Dec 24 15:29:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1461f95356ba821bc549e80d8e72caa99155d8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a9:13:01:fe:15:bf:7b:bb:93:0c:8f:ec:ca:
ce:fd:43:dd:0c:5e:85:78:97:40:5a:7d:67:61:92:
f7:6c:de:b9:63:96:18:26:37:1d:a1:1a:a9:bf:fd:
be:b8:43:1f:74:d9:b3:fa:4b:ff:df:49:9b:27:f9:
0e:1b:f9:d2:21:91:04:f3:f2:a4:64:a8:12:30:4f:
2c:fe:51:54:6e:82:f7:16:b6:6b:65:b6:d4:61:02:
bf:d3:2b:f1:3a:a5:8c:98:a8:31:3a:a7:93:ed:44:
51:8c:cb:4d:1a:2a:f8:ee:60:e2:27:ff:8c:10:73:
d1:c3:de:a4:dd:b5:9b:ca:59:7a:b3:1d:41:25:0d:
79:df:69:58:4e:f5:5b:05:e9:3d:48:64:f0:a3:ed:
73:32:41:43:5f:fc:cf:1a:51:95:c9:1c:37:59:f5:
29:8b:af:9f:43:37:7d:45:e9:87:87:12:75:c6:91:
e4:07:f5:ee:c0:b1:ef:4b:01:6e:51:2a:c0:1d:8c:
9f:29:ff:d4:e2:cf:d2:f2:1a:64:83:7e:2c:1f:2f:
ce:51:58:7b:2d:6c:ac:ef:22:5a:cf:29:49:06:cd:
a0:84:6f:e2:58:cf:8e:8b:6a:14:b1:58:f5:7c:f9:
41:ca:33:63:dc:c9:7d:3a:07:c6:3c:f1:52:1c:99:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:61:F9:53:56:BA:82:1B:C5:49:E8:0D:8E:72:CA:A9:91:55:D8:F1
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/FGH5U1a6ghvFSegNjnLKqZFV2PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.41.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e8:80:76:a9:03:cc:a3:95:89:ed:ac:71:01:79:13:e9:09:
27:45:55:a9:e8:7e:c5:77:43:cf:79:b3:61:76:f9:59:d7:68:
9d:0b:39:cc:e4:e7:2e:30:04:4c:f0:81:66:77:c7:36:36:a3:
b7:6a:c2:8b:bf:09:37:ff:fe:f3:98:5f:9f:a4:b4:be:dc:66:
0d:bb:31:2a:18:01:04:38:0f:b6:71:e0:e5:85:e3:5f:9f:3e:
00:00:e5:b8:8e:43:bd:ea:b4:67:36:11:80:8a:ef:8e:43:e9:
5d:fc:dd:0e:e8:db:74:47:9a:23:56:47:cb:b9:ef:77:b5:88:
24:27:2f:03:18:df:5e:5a:37:82:f7:a1:c8:50:08:d7:c7:c6:
fa:22:6e:d5:9f:55:eb:6d:02:81:21:8a:d4:cc:80:d4:46:7d:
f5:38:dc:10:b1:76:a9:56:7d:8f:a3:38:68:02:47:0d:51:72:
36:09:48:e7:1e:0f:18:eb:a5:9a:3f:29:10:9a:48:de:60:2a:
05:a9:70:92:93:9a:5b:0c:df:73:38:3a:2c:5a:f7:d1:11:02:
48:fc:12:e5:03:ac:42:25:de:72:2e:0a:44:18:e6:cc:1b:42:
4d:08:49:e7:e2:93:d2:60:82:60:46:36:e2:6e:b7:f8:ee:06:
6f:bb:7b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:47 2024 by rpki-client on console-ams.rpki-client.org