Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/303X6V1k4U3XeVDz51HAbuByMl4.roa
File: 303X6V1k4U3XeVDz51HAbuByMl4.roa (raw, json)
Hash identifier: PkxNwC0dLgVcJLUPVH+a5e/nxnSATB9++PqVXBTDdrE=
Subject key identifier: DF:4D:D7:E9:5D:64:E1:4D:D7:79:50:F3:E7:51:C0:6E:E0:72:32:5E
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 14CA0492
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/303X6V1k4U3XeVDz51HAbuByMl4.roa
Signing time: Mon 02 May 2022 07:22:01 +0000
ROA not before: Mon 02 May 2022 07:22:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9331
IP address blocks: 46.249.98.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348783762 (0x14ca0492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 2 07:22:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df4dd7e95d64e14dd77950f3e751c06ee072325e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4b:57:e8:0f:87:c4:57:5e:5c:13:18:e5:53:
85:09:ba:de:c4:b6:02:6f:9e:c8:9a:48:70:ba:60:
23:ff:18:ee:f9:58:c5:17:17:c2:bc:fb:f8:c9:b0:
c2:0a:f7:73:34:08:22:96:3c:80:1f:ce:a3:0d:70:
0f:7a:c0:39:de:84:d0:e0:5e:15:66:bd:8a:4b:99:
3f:6a:fa:c0:1e:01:e3:97:99:ae:3f:fc:70:b2:89:
ba:de:36:a0:6e:af:f6:f4:c9:b7:8a:80:e9:07:97:
1a:b5:87:78:ea:f7:3a:da:0e:ac:77:5f:4f:89:8b:
e3:ae:d7:46:c0:a2:99:19:13:a5:a8:d3:69:b9:53:
b8:02:93:fb:ee:e6:fa:51:0f:5d:e7:7c:ab:3d:de:
6d:75:fc:f9:a6:a6:9d:15:d2:c1:17:c4:46:cf:8a:
05:d9:ce:21:96:ea:79:4a:3b:8a:3d:1f:a4:ee:2b:
72:99:2f:71:f1:84:ba:42:2e:ba:28:d0:61:ec:95:
27:67:83:3b:d1:bc:d7:27:76:d1:c9:b7:1f:91:81:
ef:b9:93:78:ba:7d:0c:51:7d:47:ec:70:20:c0:b5:
95:e5:2e:26:9b:2d:44:f2:d6:1c:2c:33:5f:5c:ea:
53:e7:f4:11:19:88:de:a6:56:ea:f6:bc:9b:7f:07:
c8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4D:D7:E9:5D:64:E1:4D:D7:79:50:F3:E7:51:C0:6E:E0:72:32:5E
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/303X6V1k4U3XeVDz51HAbuByMl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.98.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:e7:1a:a8:4f:58:71:59:78:d6:43:d9:c6:17:4c:63:ae:16:
89:ae:a8:70:97:ed:9e:24:53:db:6b:9a:4e:e7:bd:4b:67:a5:
a7:03:c6:60:3b:07:d2:b6:1c:3e:e2:b1:e9:9f:54:ec:32:cd:
44:66:f0:8b:03:54:12:bd:07:14:cf:c4:cb:79:9b:df:3a:2a:
d1:aa:b4:64:9c:c4:1b:ef:1d:7a:c6:16:a0:10:74:79:66:27:
34:b5:7b:bf:3b:8a:97:3a:83:7a:ce:1a:46:e6:f8:d1:9f:fa:
88:0a:b0:8c:e9:d2:6d:71:dd:e8:45:5f:2a:36:21:c9:84:42:
ed:14:00:e2:e3:ce:4d:d5:17:25:a2:f7:09:26:7b:da:a5:61:
ec:93:80:c2:25:86:3d:ba:d2:d4:01:20:a3:aa:e2:aa:70:8b:
4d:f6:c8:e9:e3:1c:3b:19:eb:6c:a2:a8:47:47:4f:e8:68:ee:
94:da:ef:19:94:f5:74:37:2d:8f:67:e5:da:7e:be:75:af:62:
00:89:50:79:0e:5b:72:6b:af:2d:ea:91:90:02:95:0b:02:34:
83:d0:0b:8d:21:e4:33:43:d2:c3:a5:04:9a:56:8a:87:1e:86:
3e:7a:bf:36:f1:30:95:04:a5:ad:3b:19:f7:54:b3:a1:11:a1:
54:20:3f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:34 2024 by rpki-client on console-fra.rpki-client.org