Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/5lcTl9ptBiCyA5tQ3wj8lM_448w.roa
File: 5lcTl9ptBiCyA5tQ3wj8lM_448w.roa (raw, json)
Hash identifier: 9CJBKrceuw4p6RcSoSl3qTB7QsCl+UXKWyfdMKp0Yvg=
Subject key identifier: E6:57:13:97:DA:6D:06:20:B2:03:9B:50:DF:08:FC:94:CF:F8:E3:CC
Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Certificate serial: 0184EE1EB364E34DBB3A8F09F88CDC876DD8
Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/5lcTl9ptBiCyA5tQ3wj8lM_448w.roa
Signing time: Wed 07 Dec 2022 19:45:00 +0000
ROA not before: Wed 07 Dec 2022 19:45:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211882
IP address blocks: 46.231.240.0/23 maxlen: 24
2a0c:e303::/32 maxlen: 32
2a0c:e300:12::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ee:1e:b3:64:e3:4d:bb:3a:8f:09:f8:8c:dc:87:6d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Validity
Not Before: Dec 7 19:45:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6571397da6d0620b2039b50df08fc94cff8e3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:e0:04:9e:69:70:c2:38:0a:5e:6a:36:dc:
49:2e:48:39:83:b1:db:b0:62:aa:a0:9f:83:c2:80:
ce:6b:f5:fe:f1:1d:79:7d:16:c2:76:b8:d8:27:e7:
66:1e:12:ea:db:60:75:16:40:82:bd:b5:80:93:74:
cb:d5:89:a7:fb:a7:bd:9b:fe:d4:b3:d3:ca:3e:b2:
1c:d3:a3:b7:ee:79:ba:c5:83:6e:9f:96:ad:c0:2a:
24:b2:04:af:6c:cb:4f:21:15:be:5d:30:86:6d:ae:
89:b3:4e:79:55:8a:11:23:55:18:dd:23:c1:96:fe:
ef:86:5c:49:e8:06:bb:16:c5:6d:d3:f6:fb:49:37:
6f:40:19:48:71:68:3b:f1:06:f7:bf:03:8d:7d:ad:
e3:33:9e:06:6e:72:b4:bf:3d:5d:4c:6c:6c:35:0c:
a7:d6:a9:e5:1a:25:20:aa:ba:6a:06:eb:94:17:10:
92:2d:f9:b5:d3:89:98:8e:88:88:73:84:3d:9f:58:
16:93:61:68:5f:9e:18:29:d8:21:4f:bd:24:fa:9c:
32:1a:32:3d:53:57:00:6f:bd:66:67:df:69:3b:38:
c7:fb:b7:7a:af:24:49:67:4f:69:ed:72:ee:9c:19:
d4:df:58:19:74:78:0b:6e:46:d2:d6:77:83:0b:0b:
d0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:57:13:97:DA:6D:06:20:B2:03:9B:50:DF:08:FC:94:CF:F8:E3:CC
X509v3 Authority Key Identifier:
keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/5lcTl9ptBiCyA5tQ3wj8lM_448w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.240.0/23
IPv6:
2a0c:e300:12::/48
2a0c:e303::/32
Signature Algorithm: sha256WithRSAEncryption
42:51:69:c1:85:76:84:28:c4:a5:1f:73:40:ad:c2:4f:47:55:
13:57:39:bd:2b:7b:d5:09:93:e8:3e:97:31:7f:c8:7d:fa:76:
20:48:3c:ae:0f:11:8d:75:5a:65:12:c2:82:d3:ff:3f:67:73:
0c:b1:84:32:ee:96:1e:a5:22:17:5f:32:2d:ca:7c:9e:91:63:
c8:10:94:7d:4c:b5:2a:11:a5:84:0b:b6:ce:17:6c:02:04:43:
2b:91:e0:ec:56:9d:d4:d6:af:71:98:9e:4b:c2:9e:e0:7e:36:
5a:e4:8a:25:74:65:01:53:3d:2f:57:3e:37:4c:c5:31:5c:45:
aa:0d:1d:8b:14:9a:57:9a:69:b7:dd:ac:52:fd:07:b3:c8:d2:
71:fa:c4:98:0e:22:0c:4c:8b:6a:fb:e4:44:28:1d:77:a2:ac:
72:de:f7:4d:ad:04:16:27:9b:9a:00:66:c4:25:b1:07:84:71:
d0:4a:e7:f4:26:d8:26:1f:ba:5d:c9:1d:33:4c:83:8c:c5:8a:
62:97:4c:50:6d:d7:90:7e:79:90:f4:b4:6f:ae:b0:f3:13:87:
c8:96:7f:4d:ca:1f:da:8b:9d:b2:7f:64:d4:63:e2:d0:e3:f9:
41:0b:4f:2c:0d:23:8f:e5:f0:87:66:89:c2:a8:b7:f7:89:89:
7d:b1:a3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:09 2024 by rpki-client on console-ams.rpki-client.org