Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/xOol3T1t3k_q2wZfvA6Ut6elOk0.roa
File: xOol3T1t3k_q2wZfvA6Ut6elOk0.roa (raw, json)
Hash identifier: A9npw8unYh2oRn4J+In9TV3gSxDuqLkv604I09GizKM=
Subject key identifier: C4:EA:25:DD:3D:6D:DE:4F:EA:DB:06:5F:BC:0E:94:B7:A7:A5:3A:4D
Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial: 0D47674C
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/xOol3T1t3k_q2wZfvA6Ut6elOk0.roa
Signing time: Sat 01 Jan 2022 08:56:29 +0000
ROA not before: Sat 01 Jan 2022 08:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44187
IP address blocks: 46.226.232.0/22 maxlen: 24
87.237.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222783308 (0xd47674c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
Validity
Not Before: Jan 1 08:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4ea25dd3d6dde4feadb065fbc0e94b7a7a53a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:73:d9:d0:d9:5d:25:1b:c9:67:55:07:fc:
df:5e:25:a2:bf:a0:5f:55:76:66:a1:4b:e3:51:db:
c1:f5:82:87:9e:c2:16:6c:bc:a7:15:78:d9:fa:d3:
a2:f6:ac:ef:67:0f:bb:ea:08:21:54:b9:d1:57:86:
e5:17:65:27:6e:9c:65:51:68:ef:ca:5c:aa:c3:61:
ef:b9:80:8a:71:89:10:48:86:c0:3f:ab:29:a9:bb:
cc:98:65:98:9a:9d:ca:fe:dc:c1:16:01:78:ce:b8:
87:72:13:e3:e9:63:20:16:51:72:44:33:1e:80:a4:
32:0b:43:ad:29:0b:b9:ba:61:b3:8a:3d:a1:47:ad:
1a:5e:d7:8f:10:6d:77:ba:1a:cd:05:52:d9:7f:db:
58:9b:5b:46:1d:94:ed:e9:c8:16:08:34:a0:4b:52:
87:4c:97:a0:28:a2:e4:89:5a:98:3e:68:7f:60:8d:
ff:30:35:03:35:6f:8c:47:0d:06:7f:dd:8e:51:55:
68:5f:b0:04:b8:09:3a:40:28:7e:a5:d2:b1:25:e8:
a2:16:dd:69:37:08:54:25:27:0a:06:ca:96:71:c4:
5b:eb:57:e3:be:85:aa:a4:e7:f2:b8:12:c5:c0:a2:
de:e0:24:87:93:19:7d:a2:69:9b:b7:32:b7:04:ff:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EA:25:DD:3D:6D:DE:4F:EA:DB:06:5F:BC:0E:94:B7:A7:A5:3A:4D
X509v3 Authority Key Identifier:
keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/xOol3T1t3k_q2wZfvA6Ut6elOk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.232.0/22
87.237.24.0/21
Signature Algorithm: sha256WithRSAEncryption
19:7b:bd:b1:f1:6b:88:0f:06:68:cb:8f:9f:5f:36:a5:34:64:
d2:80:36:b0:80:68:39:c9:68:90:0d:f5:0d:34:46:68:e3:15:
f4:09:96:1d:03:f6:73:17:10:f8:11:6b:39:0e:68:87:ff:6e:
7b:52:30:a8:1a:0b:10:23:59:0b:39:57:96:7c:a1:df:d4:21:
20:c7:2a:0f:4b:db:ad:bc:86:82:54:58:25:a6:78:8b:5c:9a:
49:55:ad:58:31:c7:5f:f2:4a:fa:ea:44:ec:c3:e9:e5:1f:83:
21:89:a3:5a:09:97:91:7b:cd:c8:d5:1b:91:19:e2:3d:c3:dd:
25:0b:38:ad:32:7e:3c:56:67:3b:5c:e4:b8:1b:e8:bc:48:ea:
4a:8a:9a:65:e6:93:82:39:9e:81:dc:be:48:65:2a:aa:a3:ff:
2a:7f:30:5b:8f:36:19:86:b6:e9:7d:18:da:71:17:ae:a4:e4:
4f:41:7e:a9:52:c4:d8:39:74:0e:e2:84:30:45:a1:4a:14:6c:
92:1f:e8:61:f1:da:7a:df:18:67:1c:ac:a3:b7:33:40:0c:b9:
96:e7:66:e8:5d:94:8b:d5:29:4a:2e:e2:ac:6f:1f:8e:2b:a0:
87:25:db:46:1a:a4:5b:db:cf:57:c9:8b:95:71:4b:28:12:6c:
67:09:c1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:47 2024 by rpki-client on console-ams.rpki-client.org