Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/rJzZzTT06QfTkvmfvta-6BvfiXM.roa
File: rJzZzTT06QfTkvmfvta-6BvfiXM.roa (raw, json)
Hash identifier: RLKCt7uPPCPtq8q9pxKzYOCgVY/aJAEXgR3atDdunqo=
Subject key identifier: AC:9C:D9:CD:34:F4:E9:07:D3:92:F9:9F:BE:D6:BE:E8:1B:DF:89:73
Certificate issuer: /CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Certificate serial: 1B638371
Authority key identifier: 35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/rJzZzTT06QfTkvmfvta-6BvfiXM.roa
Signing time: Tue 15 Mar 2022 13:06:28 +0000
ROA not before: Tue 15 Mar 2022 13:06:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 46.31.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459506545 (0x1b638371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Validity
Not Before: Mar 15 13:06:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac9cd9cd34f4e907d392f99fbed6bee81bdf8973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:00:14:12:2f:15:be:ab:98:9d:8b:37:7a:
dc:0b:44:a8:fc:96:cc:7c:1f:39:42:d5:e7:af:7f:
57:a5:78:15:83:b9:24:0f:10:27:f7:d9:41:ea:92:
53:5f:ea:43:e9:44:f1:48:92:78:58:1d:94:6c:36:
6b:d6:e1:c9:ae:fb:7a:f3:35:46:ae:f2:4a:ba:43:
aa:98:c7:66:6e:4b:b0:04:14:a0:d5:58:2e:c6:7e:
d8:58:66:51:e4:96:a8:34:f6:02:c2:a4:8f:ad:2e:
69:79:e1:4b:2f:4b:29:44:c0:13:24:17:41:01:43:
af:cb:fe:0f:ea:57:78:a4:7a:11:1d:3a:22:52:cc:
9e:ea:7c:b1:b7:c9:75:80:0c:de:10:77:c0:24:60:
18:dc:64:7c:0d:0f:62:be:23:ad:60:a9:a7:10:ea:
bb:00:e7:01:32:3c:06:bf:d3:81:84:08:d1:b6:35:
d7:ab:aa:5b:8e:43:cb:0c:3b:00:66:a6:04:a3:a8:
55:9a:e2:a2:7e:f1:02:61:cd:f9:42:ea:21:8f:71:
98:d6:20:23:0c:bf:fa:26:4b:52:49:4d:06:84:7f:
73:bd:34:14:c7:a4:bd:0a:cd:ee:0e:71:c6:50:ba:
ff:e5:7b:36:c2:76:c9:af:25:55:bb:dc:39:0a:81:
64:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9C:D9:CD:34:F4:E9:07:D3:92:F9:9F:BE:D6:BE:E8:1B:DF:89:73
X509v3 Authority Key Identifier:
keyid:35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/rJzZzTT06QfTkvmfvta-6BvfiXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.77.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:8c:e7:b2:68:cf:aa:a8:ee:04:f6:50:0a:b8:da:0a:2c:2b:
fa:5a:26:2a:2b:af:65:87:fc:ac:d9:ee:de:8f:43:5f:46:df:
8d:56:b0:aa:f4:e5:e4:b8:81:58:c4:a7:5c:68:24:dd:5b:ba:
cd:64:e3:16:5e:aa:af:96:4e:74:f1:48:92:f5:e7:b6:4b:55:
63:4d:da:e2:61:fb:5f:6d:49:85:5f:8e:62:91:2d:7f:fe:20:
cd:b8:a1:32:25:91:36:fa:3b:5f:b9:fc:10:05:6e:7a:1a:74:
7e:ec:97:49:1c:f9:4b:97:ef:07:14:1e:03:a7:68:44:52:90:
76:b4:18:af:25:60:2d:bb:3b:eb:59:ee:07:4c:01:48:7c:3e:
7b:ee:56:6d:6a:32:68:37:12:96:c6:ba:ba:e3:11:61:d2:48:
9b:bb:b5:ef:d1:57:63:51:c8:9a:27:47:08:e5:a6:82:77:03:
fd:4b:d5:0b:78:b7:6f:01:c7:81:18:8e:21:49:b6:d5:32:61:
90:03:80:fe:e3:de:ec:cc:b7:c4:4a:fe:9c:ae:6b:df:e0:32:
b6:09:f8:46:aa:84:8b:5c:45:48:c7:55:14:a0:91:11:26:10:
c1:03:b0:6b:b4:7b:f7:e0:ae:5d:c7:a5:a5:31:1b:3c:29:87:
d2:a0:ff:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-fra.rpki-client.org