Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/1jFBHBqILtySX57UZ3xb7im548M.roa
File: 1jFBHBqILtySX57UZ3xb7im548M.roa (raw, json)
Hash identifier: W+wz1xKhYdn+jRkPNMrqeZRuBQjO9EAn9Og2oYFiKQE=
Subject key identifier: D6:31:41:1C:1A:88:2E:DC:92:5F:9E:D4:67:7C:5B:EE:29:B9:E3:C3
Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Certificate serial: 011A02
Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/1jFBHBqILtySX57UZ3xb7im548M.roa
Signing time: Wed 29 Jun 2022 10:21:05 +0000
ROA not before: Wed 29 Jun 2022 10:21:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50590
IP address blocks: 46.175.168.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72194 (0x11a02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Validity
Not Before: Jun 29 10:21:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d631411c1a882edc925f9ed4677c5bee29b9e3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:80:18:c5:93:d0:ee:8d:45:fb:f8:f9:52:
01:7b:ed:b1:ae:5f:cc:b6:eb:f2:12:d4:3a:4d:47:
17:bc:be:4c:70:d6:1b:85:1a:b9:4a:09:59:f6:f4:
8b:33:c9:e7:71:83:10:92:97:c8:f5:5a:d1:f8:fc:
6d:00:9a:2c:6f:7a:f5:18:71:f1:83:13:e9:4a:b2:
c2:5c:d3:7c:05:d4:81:5b:bb:eb:3e:fb:9b:8a:19:
1a:63:0c:73:3f:7c:97:34:56:ac:2e:fd:65:01:08:
f1:e4:0b:0c:d4:43:dd:21:55:08:ca:f0:10:57:96:
44:a4:a7:03:cf:c8:0f:89:bf:cf:47:d9:6c:19:4e:
e6:ba:8e:04:75:12:96:2c:65:30:6d:db:55:37:ce:
22:30:a2:5e:23:0e:95:51:51:a1:a0:36:ad:06:b4:
f0:77:ab:fa:2b:d7:9e:1a:39:fc:1f:13:78:51:b4:
df:d7:56:7d:dd:96:7b:f0:00:37:96:99:98:19:59:
87:e6:58:93:fb:00:4d:e3:96:0f:46:a7:30:b4:7f:
2e:a4:d6:89:24:d8:1a:ff:6f:62:69:cb:ed:e8:61:
3a:35:c7:bd:9d:30:20:e5:dd:f1:4a:74:07:20:d0:
fb:ee:d6:e6:79:14:74:a4:fe:38:b4:67:a8:71:d4:
f1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:31:41:1C:1A:88:2E:DC:92:5F:9E:D4:67:7C:5B:EE:29:B9:E3:C3
X509v3 Authority Key Identifier:
keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/1jFBHBqILtySX57UZ3xb7im548M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.168.0/21
Signature Algorithm: sha256WithRSAEncryption
17:cf:1b:86:f6:da:e2:60:84:22:e0:d6:d7:ad:de:58:8d:fb:
49:63:55:49:b6:38:ca:27:a7:83:14:66:02:6e:de:98:b7:be:
5e:f5:c1:59:0a:fb:4f:70:27:f1:f7:6c:71:6c:81:1e:e4:e4:
26:c6:06:93:d3:e0:72:b6:1b:b1:12:ca:3b:b6:8f:fe:15:e7:
b4:c3:8e:90:ff:f7:78:44:ef:0b:e5:b4:44:9d:d5:63:6c:4b:
39:12:3d:d5:b7:e3:7b:58:71:cc:6b:e2:6a:84:09:c9:4e:1d:
7b:4d:48:ea:c3:2e:7e:d7:c2:40:14:23:fd:51:b7:1e:ce:d4:
1f:d8:3c:df:0f:d1:6e:f0:7e:fb:08:63:88:c4:09:b4:8f:cc:
e2:c7:2a:99:3e:6d:40:b7:29:4b:7e:0e:c9:5e:0d:8f:e8:83:
37:e4:2a:11:be:a1:b1:87:79:a0:61:f3:52:8e:bd:d6:7a:73:
ef:74:b4:5b:0a:a7:d8:f4:ae:cc:31:9d:98:e3:74:fd:11:61:
0e:25:c6:21:35:97:46:0b:64:d5:17:9f:a2:dc:a7:02:50:2f:
1a:fe:24:01:ac:53:68:26:d8:8b:b3:af:f3:0c:0a:8a:de:3e:
97:22:35:86:92:a6:21:6e:4b:b5:6e:86:8e:86:47:0d:79:03:
ba:38:d1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:21 2024 by rpki-client on console-ams.rpki-client.org