Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/gbeRObx1zRNj3bt-hubxYFv8F0w.roa
File: gbeRObx1zRNj3bt-hubxYFv8F0w.roa (raw, json)
Hash identifier: PCilQKl0ZS31suvuOC19QtuyGp4UX8otYydoyA9eLZ4=
Subject key identifier: 81:B7:91:39:BC:75:CD:13:63:DD:BB:7E:86:E6:F1:60:5B:FC:17:4C
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 1387C329
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/gbeRObx1zRNj3bt-hubxYFv8F0w.roa
Signing time: Wed 26 Jan 2022 12:07:52 +0000
ROA not before: Wed 26 Jan 2022 12:07:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 46.249.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327664425 (0x1387c329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 26 12:07:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81b79139bc75cd1363ddbb7e86e6f1605bfc174c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:40:0e:ab:86:03:cc:2c:c2:79:53:49:86:
9b:cf:2a:aa:72:d6:b2:c1:61:3f:d7:33:b3:1e:01:
8d:8c:f8:1e:47:b7:a6:19:0d:26:f8:68:54:ee:12:
c8:66:d2:aa:f6:83:46:ca:a7:e6:e7:55:40:77:0f:
b7:e1:5c:b2:de:ec:93:e9:9f:32:45:79:39:59:e4:
71:eb:22:8e:68:87:bf:91:74:8a:67:70:3f:a8:55:
47:4f:28:c5:7b:63:86:7f:83:34:7d:2a:04:6c:77:
ed:e8:67:23:4c:99:bf:01:21:a3:b6:cf:c2:38:e2:
e5:f6:aa:20:1a:c3:4c:0f:3a:73:b3:42:ff:02:f6:
08:0f:c3:53:a1:7c:37:45:47:53:fe:b3:44:ba:85:
8c:fa:c9:aa:39:2e:aa:51:9d:4b:41:27:3f:a0:4e:
9e:26:a6:3e:5f:25:b4:7f:71:0d:36:1c:47:90:a5:
50:cf:0c:4d:dc:3e:1c:b1:1f:42:31:5f:1f:13:4d:
5a:82:2e:74:c9:28:90:75:3d:c6:30:4c:3b:41:e9:
c3:4f:29:4f:eb:88:6f:d8:ad:f6:ce:27:8a:b8:d0:
c2:bc:b0:aa:45:65:34:ad:11:dd:43:a6:21:04:93:
13:fb:cd:52:b6:75:8e:a1:19:a2:29:9f:c1:eb:f2:
2a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B7:91:39:BC:75:CD:13:63:DD:BB:7E:86:E6:F1:60:5B:FC:17:4C
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/gbeRObx1zRNj3bt-hubxYFv8F0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.97.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:bb:7e:8d:42:c2:18:8e:e6:fd:1c:ae:28:94:75:cc:8f:69:
fb:0c:78:57:08:ff:8a:bd:e6:48:5b:d5:75:07:c6:22:c4:8d:
23:7b:57:02:d5:69:4b:81:1b:d8:8a:63:c2:39:96:40:b9:07:
f2:91:11:c8:e6:88:35:d8:d8:35:a1:97:e0:43:2b:0c:4f:6d:
00:86:65:52:99:c9:aa:33:bf:76:30:33:14:25:a3:c0:2f:2a:
b8:1a:35:2a:99:1d:72:f5:cf:fe:e4:a1:65:ff:ac:88:47:f2:
ef:0e:18:3a:8f:1e:6e:ee:50:8e:5d:a0:13:df:95:bc:78:69:
38:27:01:13:0b:f5:a5:1c:d0:da:54:5e:79:63:05:f5:65:0c:
b7:48:33:a3:79:a7:01:bd:60:5b:89:7b:8d:38:e8:6f:6c:bf:
b5:75:d9:67:61:9b:25:a6:4b:66:5c:47:b5:1e:6c:23:6c:77:
05:a6:d1:f7:33:65:ba:d1:6a:5a:4f:f8:56:bf:01:fe:4b:7e:
87:30:12:ad:d7:7f:45:5a:01:5d:6c:23:4a:1c:d8:ce:36:5c:
32:c5:ec:74:22:0b:28:da:5c:41:c4:7f:93:3b:65:5f:b3:c6:
d3:76:50:53:d9:0c:a0:1e:00:88:91:fe:bb:36:62:53:2a:b6:
e6:c7:0b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:35 2024 by rpki-client on console-fra.rpki-client.org