Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5FKa1mhfkVP8g3Bi_crThX2cyAk.roa
File: 5FKa1mhfkVP8g3Bi_crThX2cyAk.roa (raw, json)
Hash identifier: bHDIBKyZjsvqywOMLpcI5JpazRp3QNhLLCmWBL9GFrk=
Subject key identifier: E4:52:9A:D6:68:5F:91:53:FC:83:70:62:FD:CA:D3:85:7D:9C:C8:09
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 387F27A9
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5FKa1mhfkVP8g3Bi_crThX2cyAk.roa
Signing time: Sat 01 Jan 2022 05:54:17 +0000
ROA not before: Sat 01 Jan 2022 05:54:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34702
IP address blocks: 46.19.201.0/24 maxlen: 24
185.176.116.0/24 maxlen: 24
46.19.207.0/24 maxlen: 24
185.176.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947857321 (0x387f27a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 05:54:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4529ad6685f9153fc837062fdcad3857d9cc809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:43:bf:90:16:a3:ea:2f:f7:8f:02:e4:73:
82:1c:48:11:9e:eb:e4:f1:73:83:64:7c:0d:41:24:
62:90:ad:54:89:58:c4:92:12:e2:5e:95:04:64:47:
bd:72:22:26:7e:d2:83:e3:55:88:c6:11:be:8c:3c:
49:7a:38:01:0e:38:a7:d7:6d:2d:72:63:23:c0:24:
71:f2:5d:c8:7e:73:01:e3:30:3a:f5:a1:f8:5d:53:
24:5a:f8:b1:1f:fc:60:68:45:62:14:ac:8f:fd:67:
cd:32:4a:0f:48:0c:20:9a:49:2a:1b:02:e0:d1:f3:
0d:79:ec:38:b8:cb:cb:2b:75:6b:b6:50:6b:69:51:
c1:75:dd:78:80:54:46:33:ca:ee:24:ca:98:4c:b9:
3b:97:95:6a:a1:ea:58:40:75:1c:9b:01:40:ee:f0:
39:e6:82:9f:9d:79:34:f3:5b:24:6a:9e:82:b2:d0:
04:72:0b:14:d4:55:8b:e2:61:2e:1b:78:c9:9e:36:
73:20:f3:02:90:6c:ca:6f:24:1c:df:15:ee:bc:82:
c3:50:33:24:59:75:c6:49:b0:4c:d2:dd:53:86:01:
67:5a:0b:48:5f:df:34:ec:09:fd:9e:dc:51:6d:ee:
40:26:da:f1:a9:f1:10:b8:b4:20:6d:86:16:66:7c:
0c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:52:9A:D6:68:5F:91:53:FC:83:70:62:FD:CA:D3:85:7D:9C:C8:09
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5FKa1mhfkVP8g3Bi_crThX2cyAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.201.0/24
46.19.207.0/24
185.176.116.0/24
185.176.119.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:73:26:55:49:91:24:2a:ea:97:4b:a6:ef:97:46:0a:b1:09:
e4:27:20:32:9f:b6:d6:28:93:4b:ea:e3:60:3b:f9:a0:09:3f:
1f:7e:1b:53:48:29:24:fc:96:96:b9:12:38:1a:eb:5e:88:75:
06:77:d0:0c:89:eb:ef:ee:43:8c:38:01:94:d9:25:84:26:dd:
a4:06:9d:7e:35:4f:84:e8:0e:6e:2d:b3:b2:4d:90:49:ce:d9:
d1:2b:51:e8:dc:4d:75:7a:54:8c:73:8a:95:8d:5e:de:39:ed:
1f:ed:5f:02:0f:10:ef:72:6f:e0:44:5d:0d:31:90:d8:da:33:
44:4f:d8:21:51:77:78:0f:68:15:96:47:b1:57:ed:53:0c:f5:
db:45:fc:0c:55:f9:13:1d:29:95:fa:29:49:70:fa:f3:30:fb:
0d:8a:65:18:49:f8:d9:06:18:8f:41:6b:08:bb:e5:b6:fe:71:
a7:38:60:f1:13:9a:fa:ad:e0:d5:f8:48:c8:a6:84:03:46:9a:
66:d1:6c:57:01:d4:2c:96:b6:28:69:41:b1:d7:03:98:4c:57:
fd:87:20:8d:2c:e0:39:b8:90:cf:30:93:d9:a1:f5:2a:08:e7:
b9:2b:92:f3:78:f7:a2:25:ce:02:73:0a:5a:fa:a4:b6:81:20:
ec:43:48:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:45 2023 by rpki-client on console-fra.rpki-client.org