Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/edSn8_Q5s0SDfGn9P2xkeNRf6Yg.roa
File: edSn8_Q5s0SDfGn9P2xkeNRf6Yg.roa (raw, json)
Hash identifier: kLv0IUVzWe3pskZTZkcXPKHUgsKZB0Ze4bNRyOJeow8=
Subject key identifier: 79:D4:A7:F3:F4:39:B3:44:83:7C:69:FD:3F:6C:64:78:D4:5F:E9:88
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01840F976C352FD610DAF2391DA24320CC57
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/edSn8_Q5s0SDfGn9P2xkeNRf6Yg.roa
Signing time: Tue 25 Oct 2022 14:41:32 +0000
ROA not before: Tue 25 Oct 2022 14:41:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4826
IP address blocks: 46.161.212.0/24 maxlen: 24
46.161.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:97:6c:35:2f:d6:10:da:f2:39:1d:a2:43:20:cc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Oct 25 14:41:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79d4a7f3f439b344837c69fd3f6c6478d45fe988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:4f:0c:b3:5a:a1:de:91:37:ab:7e:49:c9:
a3:08:a9:a2:bf:c3:d2:41:89:25:ff:01:12:e6:44:
2e:92:4f:70:bc:57:88:98:ff:a3:dc:8f:a6:92:ef:
92:40:2f:62:5b:15:bb:a0:85:79:c6:07:df:93:f5:
ac:b9:b2:a9:66:e9:53:e7:41:b9:7c:20:72:7f:16:
51:45:0e:8b:ac:d9:02:f7:3b:5f:4d:26:29:85:24:
39:81:65:34:94:3f:a9:f3:8a:66:a1:f9:77:ee:d4:
8e:6e:ce:c9:04:4d:13:e4:59:b9:e4:15:64:27:e3:
25:c4:3d:72:62:ed:4a:50:ff:e1:c2:04:9e:67:42:
93:eb:c7:24:d0:83:8f:7a:b5:30:eb:4d:aa:37:c4:
20:3b:86:9d:f0:c5:da:cd:f6:66:66:84:20:7e:12:
27:45:0c:ab:35:24:31:eb:5f:63:35:4a:e6:54:14:
a0:d4:72:3b:c4:b5:55:77:ef:b7:6d:05:dc:61:73:
18:ee:53:58:0d:48:33:79:04:97:96:fc:51:ee:cc:
00:02:7b:3b:e5:78:15:f8:4f:31:32:fe:4a:34:7e:
18:a5:42:1e:9f:9c:69:aa:9e:33:5d:88:6b:fe:f8:
1f:3f:80:41:96:d4:74:d8:c4:93:fe:12:df:f7:59:
0a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D4:A7:F3:F4:39:B3:44:83:7C:69:FD:3F:6C:64:78:D4:5F:E9:88
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/edSn8_Q5s0SDfGn9P2xkeNRf6Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.212.0/24
46.161.217.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a0:3a:2d:64:ec:f7:18:3d:7a:6c:83:8b:e4:17:fd:0a:ac:
d1:3c:e0:19:78:13:f6:4a:4b:58:82:d4:1d:16:42:e6:68:7a:
ef:85:a5:23:5a:a4:cf:7e:18:18:f9:84:cc:0a:d5:16:58:fd:
bf:03:68:3d:01:d1:46:d6:26:b3:d3:89:85:4f:2a:26:56:74:
e7:68:4f:98:27:d6:f3:01:a8:c0:c7:48:91:8e:e2:4f:3b:97:
69:f8:51:b0:df:4c:56:e9:97:50:4d:2d:ea:df:65:0c:34:d5:
0d:6b:2a:b7:eb:e0:3f:31:b4:90:09:bb:09:13:be:13:38:2f:
37:98:9c:3e:df:c3:bf:5a:39:11:ad:de:b4:09:af:b9:ad:e0:
c9:2a:12:23:9a:7e:1e:f6:fe:02:fe:4a:84:1a:bc:a2:64:d6:
bf:34:32:a6:bf:83:da:21:2c:e2:4d:1e:7e:86:e9:8b:ee:1b:
81:20:f2:00:46:52:7a:79:db:5c:0a:bc:3a:b7:3c:9b:0d:0f:
6e:20:7d:b1:0f:40:68:aa:23:04:3e:ce:b3:f1:1a:f1:c5:77:
cd:20:de:77:c2:b1:6e:1f:f0:e8:c9:e2:58:64:54:99:36:5a:
89:b4:9d:46:1b:41:47:12:a7:9d:18:da:5d:d8:ee:b6:a4:59:
6b:bf:e6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org