Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/TZ9RySxBqLycKqcskOpWFttoIt0.roa
File: TZ9RySxBqLycKqcskOpWFttoIt0.roa (raw, json)
Hash identifier: KOWBh+GhY6Ah7ZnfCyDNTbF18mj9iCSnl4ppwMP1J9s=
Subject key identifier: 4D:9F:51:C9:2C:41:A8:BC:9C:2A:A7:2C:90:EA:56:16:DB:68:22:DD
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 018262C6F979FAEE2971DDE663383FE2C05C
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/TZ9RySxBqLycKqcskOpWFttoIt0.roa
Signing time: Wed 03 Aug 2022 08:16:23 +0000
ROA not before: Wed 03 Aug 2022 08:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48551
IP address blocks: 46.148.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:c6:f9:79:fa:ee:29:71:dd:e6:63:38:3f:e2:c0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Aug 3 08:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d9f51c92c41a8bc9c2aa72c90ea5616db6822dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:8d:95:41:0d:29:0d:68:09:85:07:39:3d:
77:54:b1:d0:4f:da:61:f6:ad:03:4b:dd:0a:45:94:
2e:c3:7e:fe:14:66:39:62:4c:97:c2:9d:cb:90:99:
b6:d4:46:18:a4:ef:40:8f:42:3f:b4:8d:c1:72:4f:
68:27:2c:7a:5f:bb:e5:20:e9:52:bb:e9:a0:1d:33:
4b:52:4d:22:63:e6:ae:d2:a4:dd:3d:ff:91:99:38:
5a:e3:f6:99:f0:8c:cb:3d:81:7c:47:45:b6:19:f9:
b9:b6:73:f3:d2:43:81:09:bd:b8:41:75:0f:ae:23:
ce:96:1c:d3:6f:0b:68:c9:d3:f0:ad:27:5b:77:00:
d7:43:b3:d8:00:2a:f8:50:37:f2:4c:21:a5:e5:45:
3b:f3:e1:77:f6:27:64:26:24:8f:d8:02:c5:93:1c:
09:ed:5b:e1:0f:04:34:d4:56:4e:ba:91:fe:f2:28:
5d:73:b6:08:cd:17:99:c1:8e:d5:c6:63:f2:97:93:
ea:94:7c:a7:73:90:33:cf:ce:d4:a8:59:d7:af:5b:
10:a4:c3:3d:5a:53:d0:8c:a0:32:0c:f2:b5:16:15:
02:78:b4:5d:0f:3f:ce:53:81:e8:ea:14:20:af:90:
58:b4:83:42:0c:26:e3:6f:52:c6:0b:26:45:9e:29:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9F:51:C9:2C:41:A8:BC:9C:2A:A7:2C:90:EA:56:16:DB:68:22:DD
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/TZ9RySxBqLycKqcskOpWFttoIt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.39.0/24
Signature Algorithm: sha256WithRSAEncryption
91:25:0b:82:6f:47:3b:d0:8b:9d:a2:67:c8:07:7b:e0:99:5e:
9f:e3:4e:68:93:49:a7:c7:d6:b8:4e:4a:5c:72:8c:3a:d2:0f:
12:0b:74:f6:9a:68:52:21:37:77:09:e9:eb:63:98:94:28:b2:
30:e9:34:27:33:80:9e:3b:ed:40:42:bc:fa:c6:3a:36:7b:cf:
82:b2:50:62:a2:14:7c:d6:fc:5c:c3:57:1c:92:8a:bb:a1:d0:
9b:29:04:9d:40:1b:b5:35:02:00:0c:f0:4a:04:d1:df:2b:65:
32:6f:ca:dd:48:62:1b:a3:ae:13:9a:f1:60:72:8e:d4:a7:53:
a4:32:9e:24:62:76:0b:e0:b1:6c:26:c1:6d:fd:01:e0:19:70:
32:16:5c:ad:44:ef:23:ae:c9:1e:95:50:5d:4d:99:6b:a0:27:
59:c3:5c:6d:d1:69:27:8f:32:a7:14:27:f1:47:db:dd:4f:c9:
76:06:04:ff:79:05:2b:3e:a0:40:d3:db:05:ca:5c:46:2a:3f:
f7:b6:cb:40:33:a3:69:bb:c4:53:48:0f:8c:60:40:44:47:66:
50:2a:24:6a:f8:61:7c:ac:49:2a:47:f7:a8:83:10:2e:26:a0:
f4:3b:45:4f:6b:de:a1:1e:d6:75:92:12:06:a0:de:70:5d:b2:
b6:34:d4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:47 2024 by rpki-client on console-ams.rpki-client.org