Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/14nICIF9uTDjFE865EE4lORcYeM.roa
File: 14nICIF9uTDjFE865EE4lORcYeM.roa (raw, json)
Hash identifier: YApyDCAxq8WN+GguRb//mKa0XUYkgdZ8qR72Kbahw3c=
Subject key identifier: D7:89:C8:08:81:7D:B9:30:E3:14:4F:3A:E4:41:38:94:E4:5C:61:E3
Certificate issuer: /CN=106c0f395410f286c8576576d7d2f78304b5e83a
Certificate serial: 01830CA682D956F882FEAE82E414CA30C223
Authority key identifier: 10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/14nICIF9uTDjFE865EE4lORcYeM.roa
Signing time: Mon 05 Sep 2022 07:56:22 +0000
ROA not before: Mon 05 Sep 2022 07:56:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50802
IP address blocks: 46.151.104.0/21 maxlen: 24
195.135.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0c:a6:82:d9:56:f8:82:fe:ae:82:e4:14:ca:30:c2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=106c0f395410f286c8576576d7d2f78304b5e83a
Validity
Not Before: Sep 5 07:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d789c808817db930e3144f3ae4413894e45c61e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a0:87:48:8d:b0:36:c7:2b:97:c4:8e:ef:cf:
e2:00:4b:f0:34:5f:23:57:78:7e:d7:45:59:28:78:
6c:6a:8b:e1:31:b4:0a:ef:e7:36:07:3c:71:36:fa:
ef:61:36:d9:bb:ef:d4:c1:cf:34:ed:f2:c2:89:ac:
80:32:99:3e:2d:6a:8e:6c:64:e6:ad:55:be:e2:da:
57:a1:51:1f:9e:76:17:2c:2c:35:d0:42:49:20:b9:
c5:a1:1b:9b:d9:f8:4b:b1:9d:f9:a7:18:02:a7:be:
16:d3:4e:5a:72:15:85:90:cb:a5:cf:f1:2a:02:dd:
aa:d6:d7:8c:25:86:3d:32:30:33:9c:9a:2b:a2:d2:
bf:19:63:27:2d:10:08:c0:ae:b4:9c:fa:51:ee:db:
a5:74:5f:71:0e:69:f2:8e:a8:be:6e:66:0f:88:65:
e6:f8:4f:94:d9:bd:4c:ec:5a:7e:69:e8:b8:4a:0e:
d9:63:90:b2:0d:e3:6d:82:8e:50:8c:cb:db:e8:5f:
0a:fa:a4:4a:c3:bb:0e:f4:7a:d3:50:5c:df:88:cf:
80:09:0a:15:e5:ad:48:65:72:58:f3:75:e0:04:cc:
48:77:d3:c5:2b:f7:6d:a4:6e:17:2b:a8:3b:19:bf:
5d:19:3c:df:f0:91:5a:d6:00:b7:3d:e9:24:09:12:
6b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:89:C8:08:81:7D:B9:30:E3:14:4F:3A:E4:41:38:94:E4:5C:61:E3
X509v3 Authority Key Identifier:
keyid:10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/14nICIF9uTDjFE865EE4lORcYeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.104.0/21
195.135.240.0/22
Signature Algorithm: sha256WithRSAEncryption
27:79:e0:51:09:da:ee:ac:64:49:37:45:53:b8:83:97:93:d5:
22:af:11:20:02:ad:c8:f2:1c:ad:d0:3a:7c:70:60:44:5a:22:
4d:a2:ba:01:a7:d6:1e:69:f2:d4:14:9c:1e:30:28:f5:a7:e2:
11:76:1b:65:22:a0:bd:ec:db:54:5c:ed:61:d4:20:aa:12:cc:
71:f5:26:df:40:fb:83:c2:65:76:7a:20:02:28:4d:3d:4a:63:
24:b2:0e:41:9a:c0:93:3d:d5:b1:01:52:f6:51:22:37:97:29:
ee:92:92:bf:cc:7f:77:4d:1b:61:42:32:eb:0b:94:0f:28:fa:
11:92:ab:3e:25:7c:93:7d:c8:17:a8:40:ec:e2:e5:f8:54:54:
10:54:7b:23:d0:9a:48:36:47:a4:20:05:63:08:01:b1:5c:8e:
51:02:f8:ea:55:1e:4c:38:54:65:1f:58:88:31:6a:b1:a7:47:
d0:c7:e1:ea:44:26:2f:57:08:ad:59:8b:a7:6e:18:fa:79:68:
36:ff:b0:ec:8f:b3:1c:07:28:12:ae:7b:8d:1d:6e:44:a1:39:
9f:81:2f:e7:f8:d8:f4:a5:e9:ba:cb:05:7a:ce:30:00:97:6e:
c6:8a:24:ba:37:27:6f:0d:4a:a7:ed:ae:dd:d1:91:5a:e1:6a:
42:17:60:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:54 2023 by rpki-client on console-fra.rpki-client.org