Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/J7z0IuUAkWVsNXCKt6cgbcE9C14.roa
File: J7z0IuUAkWVsNXCKt6cgbcE9C14.roa (raw, json)
Hash identifier: CXgFPWXuLQ7plELj07l0dGMzxBtcXFS6KnV3Cj9xSCI=
Subject key identifier: 27:BC:F4:22:E5:00:91:65:6C:35:70:8A:B7:A7:20:6D:C1:3D:0B:5E
Certificate issuer: /CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Certificate serial: 12BB05D4
Authority key identifier: 31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/J7z0IuUAkWVsNXCKt6cgbcE9C14.roa
Signing time: Sat 01 Jan 2022 15:00:43 +0000
ROA not before: Sat 01 Jan 2022 15:00:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204818
IP address blocks: 46.16.205.0/24 maxlen: 24
46.16.206.0/24 maxlen: 24
46.16.207.0/24 maxlen: 24
185.148.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314246612 (0x12bb05d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Validity
Not Before: Jan 1 15:00:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27bcf422e50091656c35708ab7a7206dc13d0b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:5b:f1:8d:ff:59:a9:71:00:cd:bb:58:b2:
23:2e:91:93:29:06:fc:2f:fd:03:59:31:12:14:c0:
11:f6:19:48:d4:18:b6:cb:63:bd:98:74:dc:b2:0e:
c5:f7:63:94:93:58:7f:02:41:07:cf:d8:10:eb:f6:
ce:2f:55:b6:db:17:13:f5:55:48:ba:6b:09:2a:ec:
11:76:2f:f2:4b:3d:48:de:66:4a:61:31:ef:2a:48:
9b:82:c5:df:04:ad:7c:42:56:3e:36:c8:2d:5f:98:
79:d0:59:cc:9d:d6:2e:92:30:04:66:7f:32:5d:af:
10:5b:68:23:63:aa:56:a7:dc:59:27:b0:dc:90:d7:
95:cf:28:f2:12:a6:e9:54:cf:b9:76:59:4a:2e:1f:
53:20:56:96:e1:5f:4f:40:ad:0d:38:a6:5c:ec:17:
f1:b0:a9:4c:35:9f:cb:d0:bf:67:51:2f:5b:4d:2b:
a4:86:19:d4:28:5b:11:82:a1:4d:13:70:f0:0a:d5:
af:4d:7b:ef:f7:19:42:02:a1:54:6e:8e:ea:01:4d:
42:7c:af:06:5d:8f:9d:29:c1:bd:48:cd:9a:69:c9:
58:0d:e3:48:99:d9:a9:a9:b9:56:7b:19:aa:0d:de:
8a:57:95:2b:ac:0f:99:5f:ce:5f:2e:46:2c:c0:f1:
bb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BC:F4:22:E5:00:91:65:6C:35:70:8A:B7:A7:20:6D:C1:3D:0B:5E
X509v3 Authority Key Identifier:
keyid:31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/J7z0IuUAkWVsNXCKt6cgbcE9C14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.205.0-46.16.207.255
185.148.79.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c4:12:b8:eb:7b:24:76:07:80:dd:e9:d5:7a:86:fd:a9:b8:
ec:b9:ba:d7:e1:73:5e:f3:fc:7a:7e:66:7a:5e:00:1a:44:2d:
6e:f9:5a:49:a8:04:6f:7e:98:f4:f9:77:93:a8:57:9f:f0:f5:
38:e0:7a:ab:04:f7:7d:f3:6d:2d:d1:94:e2:6d:04:46:34:7f:
4d:25:f1:dc:95:85:c3:ac:1b:3f:dc:92:6f:34:cd:b5:38:14:
2c:a4:56:1e:16:b1:b0:86:6f:ff:f4:5c:c1:9a:2c:96:6d:60:
0d:94:11:f1:29:a5:3f:e7:a9:03:b7:6e:98:ef:92:fe:53:bc:
5b:0e:0a:11:ec:7c:5b:8b:13:d2:ff:25:fe:79:d9:51:90:6a:
74:c9:75:92:34:ab:67:2f:0a:29:fb:f4:e6:0b:8b:b9:70:e5:
5f:fe:83:6b:32:b0:b1:6f:61:f4:80:58:6f:9a:92:24:9e:03:
6e:7d:5f:83:aa:80:7c:40:a5:6f:1d:d2:84:36:82:38:e0:df:
51:33:79:6c:f0:b8:39:4d:c9:e7:6a:c4:c9:81:61:7c:03:1f:
10:82:51:24:3d:d4:36:8f:aa:7c:b9:4f:aa:bc:51:f6:0d:a3:
9c:58:b3:24:68:09:68:cf:50:0c:b7:29:75:e1:28:a7:10:c2:
c5:85:23:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:59 2024 by rpki-client on console-ams.rpki-client.org