Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/hZ96dm1aoKY5vZ6wRDIX8dM2Smo.roa
File: hZ96dm1aoKY5vZ6wRDIX8dM2Smo.roa (raw, json)
Hash identifier: M3YqFUcT+1FlWyqBh+AfV4RMuyBgCOh/IPAszE1f/98=
Subject key identifier: 85:9F:7A:76:6D:5A:A0:A6:39:BD:9E:B0:44:32:17:F1:D3:36:4A:6A
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 37E51C75
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/hZ96dm1aoKY5vZ6wRDIX8dM2Smo.roa
Signing time: Sat 01 Jan 2022 14:56:05 +0000
ROA not before: Sat 01 Jan 2022 14:56:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212956
IP address blocks: 46.229.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937761909 (0x37e51c75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 1 14:56:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=859f7a766d5aa0a639bd9eb0443217f1d3364a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:63:b8:0e:93:f1:4b:e1:83:3c:39:c4:50:33:
36:34:39:e1:c4:c2:3f:4a:52:e9:35:77:b6:0a:ff:
58:ff:f9:f9:bd:59:fa:c3:fc:01:de:cd:25:2e:37:
69:3f:d3:5d:16:7e:27:ab:c0:db:f6:7f:5f:0d:98:
42:05:8e:27:fe:7d:84:93:f6:08:03:77:ba:41:9e:
71:09:eb:19:8b:bc:09:26:22:98:5f:ac:b9:62:c6:
f4:01:58:41:59:24:25:42:b1:42:04:fc:25:9e:f9:
b7:75:65:52:06:40:35:2b:02:6d:03:55:36:c8:ed:
41:77:36:85:e4:06:02:98:e9:ae:1a:34:40:ca:24:
27:71:26:70:42:a2:81:c8:27:ea:f8:bf:a5:30:06:
ae:e8:5e:b5:e4:19:e3:34:98:e3:25:13:83:4f:38:
a1:9d:0f:9f:75:c6:d3:5e:50:72:e6:f8:8a:b4:aa:
42:6b:5f:82:26:d8:09:1a:54:29:dc:d4:f7:2b:86:
cb:1c:5d:06:34:49:46:91:ce:49:07:59:2c:44:b4:
5c:6a:1e:7e:37:dd:7e:8a:e6:2f:b8:eb:8f:3b:d5:
2b:e8:58:9a:43:d2:8a:d9:ca:f7:38:58:f4:c4:fe:
cc:6d:9b:8b:a4:d3:ea:10:3c:4b:48:af:a5:73:4e:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9F:7A:76:6D:5A:A0:A6:39:BD:9E:B0:44:32:17:F1:D3:36:4A:6A
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/hZ96dm1aoKY5vZ6wRDIX8dM2Smo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.63.0/24
Signature Algorithm: sha256WithRSAEncryption
38:63:57:20:51:b5:98:b5:5c:2a:1c:ec:2e:fe:1e:93:04:18:
60:39:2e:94:44:dc:56:2c:71:2d:ca:b3:e6:28:2a:95:56:0f:
10:2d:17:a4:f6:28:95:de:6e:53:83:3e:0e:da:10:76:af:aa:
b1:b8:91:b1:91:54:80:a3:79:a1:da:02:c2:6e:09:26:59:92:
43:5d:44:06:c4:c5:4c:7d:0e:4d:be:52:7e:16:d0:e5:26:97:
db:17:41:c6:65:bc:d6:c1:99:0f:dd:ff:c5:45:4c:b7:00:60:
f1:0f:1e:44:0a:8f:53:ba:e4:52:a6:88:40:15:d3:07:21:2a:
50:66:cc:f4:25:f4:71:b7:91:7e:c8:7a:22:bb:79:b1:31:89:
eb:f5:8f:b0:52:4b:46:8f:8e:8c:10:e7:af:d3:10:8f:49:26:
c5:76:5a:de:f8:ea:0c:f1:f3:40:fb:dd:21:a3:94:73:5f:fe:
6e:0e:2e:0d:6e:2d:98:85:06:03:74:55:02:30:15:82:55:a8:
3e:31:08:2a:40:bb:f6:03:02:a3:7a:72:18:0e:10:ec:63:d0:
8a:f4:68:77:77:f9:6b:f1:da:78:c6:8c:79:16:a2:69:83:94:
07:7e:97:0d:1c:77:50:01:1b:a4:ab:ad:42:93:58:b5:47:38:
b7:6c:35:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:07 2024 by rpki-client on console-fra.rpki-client.org