Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/tihq6gY49FY1ipBIBU0aeRcWNHs.roa
File: tihq6gY49FY1ipBIBU0aeRcWNHs.roa (raw, json)
Hash identifier: r9WpQTjB8GmTVbFFXYb+4CmyjVgGp4KhYPeAfzwiVSw=
Subject key identifier: B6:28:6A:EA:06:38:F4:56:35:8A:90:48:05:4D:1A:79:17:16:34:7B
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01821276C5BBFB1F03BD2A137929A4DED68A
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/tihq6gY49FY1ipBIBU0aeRcWNHs.roa
Signing time: Mon 18 Jul 2022 17:59:09 +0000
ROA not before: Mon 18 Jul 2022 17:59:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/19 maxlen: 19
46.34.32.0/20 maxlen: 20
46.34.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:12:76:c5:bb:fb:1f:03:bd:2a:13:79:29:a4:de:d6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jul 18 17:59:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6286aea0638f456358a9048054d1a791716347b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:62:d9:ab:e8:a0:99:e8:37:e1:2a:15:09:
8c:6b:c1:b2:d2:c4:c7:ec:da:ba:85:36:ee:33:da:
2c:89:98:43:35:a7:56:f2:a7:95:d1:17:73:1f:73:
d1:36:1f:05:1b:13:b6:c0:f5:ff:0c:ee:b1:b9:bd:
e3:b5:fe:4a:7e:99:0e:e5:ee:87:0d:00:68:33:36:
8b:5b:8a:1e:56:d0:fd:24:6d:79:e7:e5:ff:1a:25:
be:6f:30:41:1a:b9:53:20:8b:f6:94:26:e1:4a:96:
29:65:bb:d8:24:2c:5c:74:d0:b2:33:69:f1:65:f5:
e7:2c:9d:a5:53:38:90:f6:93:dd:71:3d:05:13:7a:
5a:37:0c:f1:fe:82:f4:18:92:50:4f:84:47:9c:66:
82:30:b1:e1:5d:ba:4a:00:f5:a3:88:90:45:be:83:
ce:d7:70:bf:51:b8:1c:08:c4:78:38:00:51:f8:a9:
7d:03:d9:67:3f:96:d2:b9:a6:d3:11:67:47:d2:30:
62:73:0f:41:e8:56:5b:53:9c:ce:a6:fe:3d:64:0a:
b8:f9:27:58:e4:69:95:6f:b3:a6:19:97:0f:64:02:
72:4d:13:9b:cd:82:98:4e:5d:36:75:f5:4d:a9:c5:
f8:6d:82:7a:18:33:6e:cc:45:5f:ac:e3:3a:23:eb:
c1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:28:6A:EA:06:38:F4:56:35:8A:90:48:05:4D:1A:79:17:16:34:7B
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/tihq6gY49FY1ipBIBU0aeRcWNHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:17:74:81:ac:4b:f1:c4:a6:7f:a0:d6:c1:af:e5:18:f9:2d:
85:9d:16:33:fd:c2:c5:eb:86:ea:f5:22:f0:a7:4e:4a:ca:1f:
f4:7c:1b:5b:cc:79:45:2c:f9:19:6a:71:7e:76:84:8b:ac:e3:
08:e0:19:ff:b3:1b:47:4f:bd:60:b7:1d:6e:41:a0:e0:43:8a:
79:b7:ca:11:77:08:60:1c:6b:6d:2d:a2:67:d4:f7:04:f8:a2:
84:a9:fc:ea:88:67:d8:1d:f0:e6:bb:5e:a7:50:93:94:6a:7a:
e0:8b:95:34:1d:fb:59:42:09:2a:04:ff:af:72:38:12:7f:90:
d6:fa:04:06:5e:cc:b1:92:11:38:a7:fe:f7:e5:ad:fe:ba:a3:
98:34:1f:d3:98:29:d7:8d:54:54:89:43:73:c5:67:fa:07:9b:
66:2d:ac:bf:92:33:d4:0c:c6:b9:98:0d:44:48:29:c3:58:eb:
bb:3c:1f:df:6a:51:75:2a:6b:20:2e:68:94:1d:ca:a7:cf:78:
d0:f6:e0:36:26:a4:4d:cb:6f:dd:fc:e2:ee:a7:f1:21:6a:b6:
9d:98:e2:89:a2:1d:a0:77:df:6b:c0:13:78:ac:a5:be:bc:1b:
8f:3b:10:12:23:b4:78:fb:e0:ba:d4:5f:ef:32:74:e1:e2:29:
7d:a9:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org