Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/C32rgt4ttdbxyPbs76Q7pCELirE.roa
File: C32rgt4ttdbxyPbs76Q7pCELirE.roa (raw, json)
Hash identifier: d3htONW2djqxyD+dp5mq5QVGU0IuBupRjtZjoxh2BZ4=
Subject key identifier: 0B:7D:AB:82:DE:2D:B5:D6:F1:C8:F6:EC:EF:A4:3B:A4:21:0B:8A:B1
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 08CA3F81
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/C32rgt4ttdbxyPbs76Q7pCELirE.roa
Signing time: Sun 13 Mar 2022 21:37:34 +0000
ROA not before: Sun 13 Mar 2022 21:37:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6762
IP address blocks: 46.161.214.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147472257 (0x8ca3f81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 13 21:37:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b7dab82de2db5d6f1c8f6ecefa43ba4210b8ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:fa:d9:be:0b:81:8a:29:a7:bf:f0:48:09:
de:fd:2d:2f:ff:e4:3d:76:e0:4e:ea:eb:dd:b9:36:
89:25:4c:2c:89:21:0a:03:b3:b7:a1:bb:d9:32:4c:
7b:1c:25:a9:d9:1d:55:af:1d:f9:a7:3f:6d:a9:c3:
0f:3f:5f:03:71:17:30:f6:38:80:d6:d5:bd:a5:1f:
3c:07:9e:25:2b:c7:d1:49:98:38:ad:eb:5b:56:99:
35:4a:05:6a:f6:aa:c1:8f:41:23:20:c0:ea:03:b9:
f6:b0:28:67:49:ea:b9:0b:c2:40:48:89:58:7c:37:
0b:5d:6f:4f:28:67:61:6c:98:47:27:be:a4:6d:59:
b4:fc:7e:de:44:84:ef:37:29:6d:ef:b5:86:4d:a7:
89:dc:81:e3:aa:26:a2:9d:94:6c:ea:e2:c7:94:9a:
d3:39:9d:6c:34:e7:2c:db:0d:67:14:c9:13:79:6d:
44:c3:93:5b:ef:24:8a:42:ef:33:32:cc:81:79:67:
51:9e:d3:cb:68:b2:95:55:1a:19:a2:90:73:34:ec:
51:f7:2b:dd:b7:a9:96:06:a7:dd:e7:76:15:42:b9:
df:75:5d:af:13:d6:4c:7b:e8:e6:ac:5e:d1:c8:4b:
89:1d:e2:96:5b:6a:f9:63:b8:a6:4e:c5:e3:4a:e9:
8b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7D:AB:82:DE:2D:B5:D6:F1:C8:F6:EC:EF:A4:3B:A4:21:0B:8A:B1
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/C32rgt4ttdbxyPbs76Q7pCELirE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.214.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:4f:74:82:24:06:6e:34:a7:1c:a1:b4:8d:22:64:9f:23:82:
41:63:3e:ea:1f:28:14:e8:4d:f7:f9:67:32:60:22:7a:3d:de:
29:de:21:db:ea:b1:72:84:14:3c:b3:54:96:36:66:da:d4:87:
02:d3:fd:84:1e:62:31:74:fd:59:7a:45:7c:02:dc:19:7f:e0:
ba:dc:29:ae:11:1d:f1:4a:49:93:80:21:66:c5:01:59:a6:db:
f2:f5:09:07:aa:4d:72:9b:bd:15:73:aa:03:c3:19:21:56:36:
73:a7:fd:1d:06:66:21:4a:a7:72:fb:b7:7c:4a:74:82:fd:d2:
3e:eb:72:b8:18:31:f1:8b:20:1b:9c:78:b4:c0:17:a6:96:46:
f5:00:45:93:dd:3f:38:c6:fa:5e:ec:13:2a:51:3c:38:34:84:
35:2c:94:78:bc:69:34:c5:27:a6:0d:22:51:c4:55:59:8e:5e:
5d:cf:92:0e:59:be:71:30:43:73:8b:de:15:97:52:08:65:13:
e0:36:de:49:03:be:ab:dd:a5:ed:9b:d8:19:da:49:d6:3a:85:
a2:99:2b:c0:00:16:fd:92:e7:62:a3:ff:7d:c5:c4:09:3b:b8:
9f:38:b1:a5:c7:91:30:ef:8b:c7:dc:b4:44:7a:d0:91:b8:40:
1a:9e:ec:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org