Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/SQff0sZxbXAqcSlF4WvBjjkd5uc.roa
File: SQff0sZxbXAqcSlF4WvBjjkd5uc.roa (raw, json)
Hash identifier: z+OIhW1cNo33MRnoCxAkEIf4A5YBVWJP1zbc+aTaW9k=
Subject key identifier: 49:07:DF:D2:C6:71:6D:70:2A:71:29:45:E1:6B:C1:8E:39:1D:E6:E7
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 3835FD60
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/SQff0sZxbXAqcSlF4WvBjjkd5uc.roa
Signing time: Sat 01 Jan 2022 01:51:17 +0000
ROA not before: Sat 01 Jan 2022 01:51:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12931
IP address blocks: 46.35.48.0/20 maxlen: 32
213.182.0.0/19 maxlen: 32
2001:14e0::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943062368 (0x3835fd60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: Jan 1 01:51:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4907dfd2c6716d702a712945e16bc18e391de6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:12:5c:e2:bb:0e:5b:a2:50:76:5f:99:60:ba:
a1:1a:ff:fb:d5:ed:22:5e:e9:98:dd:a2:10:6d:6d:
9b:6a:f2:39:5f:41:15:97:0e:48:ea:42:72:4f:93:
af:49:24:ef:59:bf:ba:7f:95:ec:1f:c7:0f:1a:da:
aa:9e:a0:84:63:dd:35:52:1d:e9:d4:fe:aa:d7:1b:
2d:92:59:64:68:31:dc:01:2c:fb:fe:99:5c:6e:1b:
74:8d:21:54:92:32:3f:27:aa:35:e4:a6:19:0c:dd:
fc:8c:6f:70:a7:36:c9:b5:cb:64:86:44:0e:f4:eb:
02:c7:67:5a:f5:a3:18:37:ea:ae:a1:e2:3b:12:db:
f0:74:91:b8:e5:ea:8f:6c:f1:be:3b:11:4a:8d:cf:
c2:f7:52:3f:9a:47:31:b9:13:b6:58:9b:99:92:50:
19:50:2e:a2:33:37:5a:e1:e7:e1:48:3c:46:09:17:
2c:51:e0:e6:26:5f:47:dc:1f:69:3b:62:e9:e8:d8:
6e:60:1b:0f:b4:53:37:b9:64:04:98:44:57:23:8b:
1b:30:c8:12:50:06:ef:4b:d7:e5:78:35:0e:f9:4b:
d5:a7:b4:98:6d:f8:bc:74:22:3d:f2:50:75:d4:51:
7c:06:5f:d8:e7:eb:f7:4b:f9:e4:42:2a:5d:23:f9:
00:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:07:DF:D2:C6:71:6D:70:2A:71:29:45:E1:6B:C1:8E:39:1D:E6:E7
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/SQff0sZxbXAqcSlF4WvBjjkd5uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.48.0/20
213.182.0.0/19
IPv6:
2001:14e0::/32
Signature Algorithm: sha256WithRSAEncryption
4d:90:45:af:8a:4f:0c:b8:37:7c:96:25:f3:a0:4b:8a:2c:3d:
4a:62:fe:b6:a8:0c:b8:d9:40:a2:4d:34:d3:77:cb:5f:0f:c9:
89:c9:b7:32:ad:3a:9a:30:a8:71:41:ff:91:da:8a:5c:0b:cc:
f3:0a:52:e6:95:92:ac:7d:30:26:51:4d:4a:8c:6f:8f:2c:26:
74:b6:9d:97:f1:98:07:a4:48:66:44:63:86:fe:63:2c:01:f4:
c9:a5:35:8d:8e:2f:95:0c:d2:78:eb:d6:d7:c8:58:17:1c:64:
c5:a9:f8:63:2f:a6:d7:81:6f:bb:b9:95:8a:b4:c0:81:43:4e:
5a:28:81:09:5f:a8:69:1a:f2:a0:9e:b0:d2:2b:19:79:d2:48:
9c:3a:85:d7:1a:ce:51:48:5f:9d:62:0f:1a:a6:bd:f3:e3:dd:
cc:b0:4f:bb:a6:9c:bd:3b:d1:13:ad:0a:fd:87:16:53:a6:38:
d5:8a:9c:a7:de:75:a8:59:46:9f:b0:ab:20:31:95:b2:08:3d:
fb:8b:19:78:e0:3c:28:3f:4a:09:bc:93:61:67:47:3a:95:1a:
12:89:6b:e3:58:7a:7c:03:c2:86:28:41:5e:9a:c0:b8:32:4b:
5d:bd:8b:73:b6:f7:c6:d6:9a:8b:d8:1c:da:f8:aa:8d:23:1d:
12:3e:3b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:13 2024 by rpki-client on console-ams.rpki-client.org