Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/aSBZowsoGjVnPiNmB0XTTsWNoPY.roa
File: aSBZowsoGjVnPiNmB0XTTsWNoPY.roa (raw, json)
Hash identifier: fYixXGPWkQ5v73BKH5+DJvzJjviLdgsMaWiq+TqLH7A=
Subject key identifier: 69:20:59:A3:0B:28:1A:35:67:3E:23:66:07:45:D3:4E:C5:8D:A0:F6
Certificate issuer: /CN=2a019cada163e368cc3362763f206b3deac4d320
Certificate serial: 0182F86E262D1AA73DCAFC944CA07722F575
Authority key identifier: 2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/aSBZowsoGjVnPiNmB0XTTsWNoPY.roa
Signing time: Thu 01 Sep 2022 09:42:24 +0000
ROA not before: Thu 01 Sep 2022 09:42:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16276
IP address blocks: 46.244.32.0/20 maxlen: 20
92.246.224.0/19 maxlen: 19
185.45.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f8:6e:26:2d:1a:a7:3d:ca:fc:94:4c:a0:77:22:f5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a019cada163e368cc3362763f206b3deac4d320
Validity
Not Before: Sep 1 09:42:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=692059a30b281a35673e23660745d34ec58da0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:41:cf:02:4e:a2:26:e9:25:3d:ae:51:8c:
ee:50:e3:f3:09:69:e3:fb:a2:25:ba:c8:e4:1e:82:
2d:05:24:c7:d5:e8:4d:be:ab:06:3d:0e:4e:6d:67:
cf:05:85:58:d5:1e:60:4b:02:92:d8:9e:9b:1d:1c:
55:7d:2b:a8:2b:ee:d7:6a:1d:c3:ce:27:1b:da:4a:
c6:a9:83:4a:fe:cf:e4:42:8b:00:4e:43:23:52:ba:
c9:52:02:e5:76:4f:6b:a0:86:ff:b9:d6:3d:54:ec:
ad:fb:19:c3:68:91:aa:70:89:cb:ac:06:13:82:45:
ea:01:57:a3:4c:4c:09:13:b7:cf:b7:28:eb:fe:aa:
22:c6:74:3d:58:86:af:a1:55:30:d4:60:62:48:1e:
2b:49:be:90:db:3a:43:8d:f1:e2:d0:e6:2c:56:0a:
f3:52:6b:de:be:ae:ff:4c:d3:85:8c:74:1b:a5:d0:
5e:f6:86:1d:79:46:f9:9e:cd:e3:35:77:b6:d7:aa:
f3:ee:c9:f7:04:b5:75:05:ed:36:3a:1f:8e:01:d5:
47:00:e7:94:c2:73:6c:c4:94:3c:de:c5:d6:3c:88:
a8:77:f6:3c:2d:af:53:ab:80:b7:99:c8:b2:c4:da:
16:90:d6:cf:f9:59:8e:88:fb:e7:ec:cb:be:48:b5:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:20:59:A3:0B:28:1A:35:67:3E:23:66:07:45:D3:4E:C5:8D:A0:F6
X509v3 Authority Key Identifier:
keyid:2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/aSBZowsoGjVnPiNmB0XTTsWNoPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.32.0/20
92.246.224.0/19
185.45.160.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:34:aa:25:8c:d2:e0:f4:00:fa:cb:fd:75:46:a7:cc:03:34:
db:c7:0f:40:b1:08:b7:c0:d9:cb:f0:4a:77:5d:48:33:46:b4:
ac:0e:1e:f4:ac:83:04:ab:6a:00:5b:4e:5e:43:3f:17:3b:bf:
db:fe:7d:ab:da:3c:50:52:6b:60:60:7e:9a:5b:1a:80:b2:3c:
c4:9f:88:8a:63:01:86:50:ea:28:bd:eb:31:1a:17:c8:c2:d6:
00:99:61:0c:6b:ee:cd:48:28:b9:b7:a8:30:67:92:9d:75:19:
e5:e2:52:b0:42:52:e4:71:27:02:02:e5:fd:cf:4a:1e:3b:90:
15:30:66:f7:32:ee:cb:08:23:9d:86:5c:dd:a2:5e:4c:08:dd:
b7:f6:5d:6e:73:5b:96:87:20:69:f0:2f:23:f6:94:49:92:8c:
cc:b5:ec:69:25:a4:46:f2:6c:d4:12:06:70:1e:fa:2c:a4:82:
b4:19:b8:c7:db:f1:e3:b5:85:a8:02:89:ab:ef:ae:9c:26:1e:
af:2f:15:52:39:c9:9d:c4:df:5f:8a:62:d6:90:6d:eb:01:81:
5d:4e:c5:b7:e5:b3:6e:d7:b2:95:a1:fe:ae:30:e3:5d:38:0e:
9e:92:73:7a:c8:8d:1b:8d:cf:93:9d:a7:50:aa:f0:9a:15:8b:
39:2b:a7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:22 2024 by rpki-client on console-fra.rpki-client.org