Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/adKc-xv7dAtN1Bq520VnsM9pG50.roa
File: adKc-xv7dAtN1Bq520VnsM9pG50.roa (raw, json)
Hash identifier: xwPTe+t6goWLoEHyOl7HrL5shtAkAHS76+dD2Z6/pR8=
Subject key identifier: 69:D2:9C:FB:1B:FB:74:0B:4D:D4:1A:B9:DB:45:67:B0:CF:69:1B:9D
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 37E2A0DB
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/adKc-xv7dAtN1Bq520VnsM9pG50.roa
Signing time: Sat 01 Jan 2022 14:56:04 +0000
ROA not before: Sat 01 Jan 2022 14:56:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207560
IP address blocks: 46.229.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937599195 (0x37e2a0db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 1 14:56:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69d29cfb1bfb740b4dd41ab9db4567b0cf691b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1e:d7:95:03:c0:a7:76:68:10:11:fe:2b:a1:
c7:29:b3:67:f9:46:ea:7b:7b:e7:2b:f2:3a:3f:93:
58:26:82:37:55:35:b4:16:18:84:a7:61:53:67:e6:
37:51:c2:b1:ec:ba:b6:09:57:7d:a7:bb:8f:94:2d:
53:e7:4f:e2:79:c1:c1:10:de:27:d0:b1:b0:6a:59:
7a:da:68:41:6e:c4:92:b5:bf:e8:84:5b:86:f6:87:
7f:6d:82:b3:42:c2:6c:ba:ab:75:db:6a:89:48:3e:
a3:23:a0:5b:1b:7c:01:b0:3f:9b:b4:ae:0f:87:75:
f5:cd:2e:3d:4d:be:3b:ea:bf:5a:46:51:fb:23:33:
a1:98:08:95:f3:f4:58:74:d2:a6:4a:33:d0:88:5e:
92:5c:78:60:a6:67:02:02:dd:94:f1:7a:25:c7:dc:
bd:5e:c3:d5:a8:d5:7f:2e:b8:1e:86:c5:47:9b:eb:
be:95:ea:fa:60:39:12:f9:f1:bc:71:b5:1a:e8:13:
c1:bd:f9:e4:14:f1:9b:ac:58:4f:6a:6d:8d:05:47:
7f:44:0a:32:ba:2d:87:fc:f5:4f:07:f7:75:f6:93:
50:2f:71:f9:84:09:28:b1:6e:98:a6:2f:b3:81:e3:
78:8c:33:ad:e1:6f:a5:ea:89:6a:43:52:8f:fe:e1:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D2:9C:FB:1B:FB:74:0B:4D:D4:1A:B9:DB:45:67:B0:CF:69:1B:9D
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/adKc-xv7dAtN1Bq520VnsM9pG50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.55.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ff:72:ee:a3:e2:19:88:0b:2b:82:1e:d4:b8:f2:ca:10:46:
77:7b:e5:0b:2b:ee:1b:44:93:3b:9a:2d:9b:cb:af:f9:87:a7:
0a:9a:db:8c:62:3e:b1:8d:46:27:cc:59:4f:86:e1:cc:02:7d:
8f:7f:de:de:8a:88:f4:9e:3f:f0:55:d6:e0:b9:ad:bc:b1:e4:
dd:c0:8c:28:3d:4d:67:46:de:98:07:f9:38:a8:f6:87:d3:0b:
cb:c3:ab:21:f3:c9:75:49:76:1f:8a:c4:db:0c:c4:8d:28:ae:
21:a8:27:51:75:45:71:7b:c4:1d:99:af:01:01:21:9a:ab:85:
fd:df:16:61:33:87:44:e5:fa:33:15:d1:8c:0f:55:12:7b:c0:
2d:51:63:e1:ac:df:37:30:51:22:a6:66:c0:c9:46:c9:ff:56:
30:8d:46:d9:26:d4:8c:8e:02:42:36:88:86:f1:8d:9c:68:17:
e0:01:3e:92:a3:82:fe:1a:27:77:e3:1b:2f:c5:0e:1c:5c:45:
d0:75:d0:e7:80:63:60:a7:68:4c:87:dd:0c:e3:ba:d3:72:d3:
7f:ba:c8:bf:02:9a:76:5f:c3:28:c8:4c:d7:f0:9d:3d:1c:46:
77:94:cb:27:da:76:d7:0c:47:f9:85:74:d5:15:d1:f4:d3:4e:
1a:c3:10:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:07 2024 by rpki-client on console-fra.rpki-client.org