Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/1-DZ6VR7YBE9rPA0abfAjOXXYNEk.roa
File: 1-DZ6VR7YBE9rPA0abfAjOXXYNEk.roa (raw, json)
Hash identifier: cdQZoXJL1iGxur7kPRVjiGtbONEjtxooK+TE59z6y88=
Subject key identifier: F8:36:7A:55:1E:D8:04:4F:6B:3C:0D:1A:6D:F0:23:39:75:D8:34:49
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 37E3AEF6
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/1-DZ6VR7YBE9rPA0abfAjOXXYNEk.roa
Signing time: Sat 01 Jan 2022 14:56:04 +0000
ROA not before: Sat 01 Jan 2022 14:56:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208965
IP address blocks: 46.229.59.0/24 maxlen: 24
46.229.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937668342 (0x37e3aef6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 1 14:56:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8367a551ed8044f6b3c0d1a6df0233975d83449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bb:30:b0:7a:da:a0:c9:30:bb:99:93:c4:9a:
b9:89:7a:67:18:5e:3a:62:b5:da:d5:4c:a5:d3:82:
36:36:8b:c9:db:5a:83:20:0b:a2:eb:c8:b2:ba:3a:
0a:28:1e:10:9a:aa:f9:3e:c0:99:a5:ea:69:dd:8e:
46:3a:b0:38:f2:99:8e:73:ce:67:54:57:b9:dd:bc:
c0:47:5b:4a:24:11:e7:df:0e:c1:07:0b:dd:3f:c5:
10:ad:62:fe:a2:d9:3d:78:09:07:a2:f9:61:23:ba:
ac:86:55:95:57:40:c4:94:0c:d9:ca:6d:63:87:b1:
2a:b2:7a:42:05:fc:a2:c7:15:8d:6b:e8:c7:06:b1:
27:33:cc:64:c3:4a:6d:5e:e1:bf:1c:99:4c:a7:03:
73:8b:8c:b8:b7:23:76:56:42:e0:34:c1:b2:1e:e8:
4a:d2:01:cd:24:76:cd:b0:55:a8:b2:5b:b3:b8:87:
9a:97:c2:66:83:a8:95:8e:a0:ad:aa:fb:a5:e3:01:
19:32:2a:c2:24:2c:a2:c2:8c:03:30:08:ec:5d:81:
e8:b6:9d:f6:2a:d8:c9:51:fa:6c:14:86:7f:4c:7c:
06:20:68:c3:90:52:38:06:dc:8a:7d:5b:72:14:49:
b4:55:54:f8:45:88:f0:03:95:34:37:87:36:a0:4b:
0c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:36:7A:55:1E:D8:04:4F:6B:3C:0D:1A:6D:F0:23:39:75:D8:34:49
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/1-DZ6VR7YBE9rPA0abfAjOXXYNEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.59.0/24
46.229.62.0/24
Signature Algorithm: sha256WithRSAEncryption
88:6d:65:39:0d:76:87:1a:2d:9d:f9:28:af:e0:7c:ce:7f:6e:
80:b8:41:26:68:57:c4:76:9d:e1:5d:af:00:33:28:72:18:6c:
3a:60:43:8f:a3:f0:2c:f1:01:b8:1a:42:d7:5e:9c:38:77:99:
1f:13:70:da:2e:d0:70:cf:ad:19:98:3b:82:28:75:97:d6:02:
76:37:4d:e8:c3:39:42:cb:23:96:84:0e:37:2c:6d:fd:d0:aa:
07:e8:44:b9:c4:2a:9f:74:16:15:51:3c:03:fb:c8:2f:e9:f9:
a9:86:fb:14:d2:7f:0e:c5:cd:c3:7c:c8:a1:9e:7e:dd:c9:c3:
13:22:67:09:56:b7:08:59:b1:89:7f:a3:94:62:8b:8c:4c:fb:
db:a4:dd:a2:76:04:7d:d9:d7:6a:d9:51:72:89:73:eb:3e:af:
1b:14:03:95:d0:1e:e3:12:5e:67:da:3e:f8:5a:85:ac:59:57:
7f:8d:2d:95:64:d3:b5:27:25:50:72:9f:f4:66:b5:9f:6b:16:
35:c7:f0:4a:9c:8e:62:11:b2:98:1b:64:ed:66:02:9d:a2:a8:
81:72:8f:d1:14:1a:75:0d:a2:3c:1c:2f:d2:8f:72:3c:91:ba:
4f:50:75:e8:96:cf:f2:e4:7a:c5:cd:50:fc:9e:d8:d4:1d:c4:
d4:af:3e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:42 2024 by rpki-client on console-ams.rpki-client.org