Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/Trl5hB_T9dnfr3rCIO9NWmd6aTI.roa
File: Trl5hB_T9dnfr3rCIO9NWmd6aTI.roa (raw, json)
Hash identifier: EVl2BRyNwpERs9HY0ltkApsJR+TWlZjGXbHlJmt+0bo=
Subject key identifier: 4E:B9:79:84:1F:D3:F5:D9:DF:AF:7A:C2:20:EF:4D:5A:67:7A:69:32
Certificate issuer: /CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Certificate serial: 09710102
Authority key identifier: 80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/Trl5hB_T9dnfr3rCIO9NWmd6aTI.roa
Signing time: Sat 01 Jan 2022 00:56:16 +0000
ROA not before: Sat 01 Jan 2022 00:56:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211600
IP address blocks: 46.243.74.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158400770 (0x9710102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Validity
Not Before: Jan 1 00:56:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4eb979841fd3f5d9dfaf7ac220ef4d5a677a6932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:b1:95:f7:7a:4c:42:af:5b:97:4f:49:0d:
85:12:10:1e:77:4e:f8:08:d6:ee:94:d0:ef:d2:e2:
be:72:11:57:5c:70:bf:e0:9a:aa:a3:43:48:38:ae:
17:e1:d6:e2:5c:93:52:4c:30:6a:fb:2d:8d:58:a9:
b9:ce:f8:d7:a2:76:9d:44:93:8c:aa:d5:1d:d0:bb:
6d:a3:2d:c2:7e:66:78:f2:f1:58:55:ad:89:70:00:
59:f5:97:d8:4a:31:6d:d9:8c:28:ac:c7:a3:1d:c3:
56:5f:33:63:62:92:7b:27:87:33:bd:6b:78:d5:4f:
1c:64:7b:45:01:7e:62:84:d9:63:8c:f9:3d:32:a4:
3d:a4:95:b7:3d:3e:8b:00:7d:b2:0c:6b:87:92:d5:
d1:f6:e1:76:8d:f1:ab:42:52:37:c5:69:c8:17:8c:
d3:b1:f5:ce:75:d9:09:97:44:51:4a:a7:20:40:2d:
d9:8d:c9:09:51:61:3d:0e:2f:24:b3:f0:49:06:58:
fa:78:f8:9c:e7:3c:d6:2e:b9:68:d4:fe:1c:d6:10:
b0:d5:54:a0:2a:06:88:af:71:11:65:a3:30:7f:1c:
da:c2:60:02:dd:2f:8a:f2:8f:24:b3:92:e4:44:87:
59:66:6b:8b:6d:19:93:07:a2:98:24:47:3e:3f:f0:
b2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B9:79:84:1F:D3:F5:D9:DF:AF:7A:C2:20:EF:4D:5A:67:7A:69:32
X509v3 Authority Key Identifier:
keyid:80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/Trl5hB_T9dnfr3rCIO9NWmd6aTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.74.0/23
Signature Algorithm: sha256WithRSAEncryption
36:a4:2f:18:e2:d6:65:ce:3f:5e:b0:a5:06:db:a8:e9:64:35:
d9:fe:bf:d5:de:88:30:f4:45:5e:d3:67:31:e7:85:13:f7:ea:
af:c9:5e:4e:7b:87:81:1f:e6:f6:de:c3:79:4b:24:42:fb:be:
71:6b:5c:9e:92:d6:2f:df:25:e0:4f:fc:9b:a2:0e:ae:25:cb:
a4:38:cc:23:99:2b:bf:b6:23:bd:b3:60:dc:a0:f9:83:a1:c5:
c6:d6:25:5f:4c:20:cd:20:6b:5e:32:05:a0:1e:12:9f:0d:ee:
f4:42:c3:f7:59:6b:9d:7f:2f:db:ec:65:c2:7f:85:79:b8:5d:
97:a8:b7:83:b5:f4:59:e3:46:53:e9:3f:d5:68:90:bb:f5:49:
82:d5:53:4b:d5:95:c7:68:2d:02:fa:88:5d:f1:29:13:3b:82:
8d:4d:48:2b:c5:6f:b0:82:67:9a:c8:30:b5:f6:96:48:e8:10:
27:95:43:9b:d1:ee:9d:8c:aa:64:ac:e3:f9:fc:82:9a:6b:84:
f9:dc:ff:10:c6:fa:d0:6b:a3:27:55:13:e3:7f:e8:5d:a8:0b:
c3:a0:b6:d7:22:86:c2:76:11:35:08:6f:ac:35:43:4d:15:30:
ac:c9:67:4b:eb:69:2f:4c:b6:9b:61:87:5c:49:29:8c:b0:31:
78:89:b1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:30 2024 by rpki-client on console-ams.rpki-client.org