Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/A3JMn2W8cbyfQPL8wYXGJ72tN6c.roa
File: A3JMn2W8cbyfQPL8wYXGJ72tN6c.roa (raw, json)
Hash identifier: 1Tu7KFtaas2BeOWGV2OiJCHKj9GKbi99YGYCCKfFMwM=
Subject key identifier: 03:72:4C:9F:65:BC:71:BC:9F:40:F2:FC:C1:85:C6:27:BD:AD:37:A7
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 387B6EBB
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/A3JMn2W8cbyfQPL8wYXGJ72tN6c.roa
Signing time: Sat 01 Jan 2022 05:54:15 +0000
ROA not before: Sat 01 Jan 2022 05:54:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25004
IP address blocks: 46.19.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947613371 (0x387b6ebb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 05:54:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03724c9f65bc71bc9f40f2fcc185c627bdad37a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:db:79:d1:d1:a7:36:83:33:f7:9e:3f:e0:dc:
1f:54:87:13:dd:f9:db:99:2f:ac:7a:01:ab:ab:e6:
c7:0c:f8:cb:e9:56:e8:1b:66:43:36:76:b6:af:c3:
53:d3:10:e8:9a:4a:7b:fd:3f:35:05:2d:60:11:53:
53:b0:66:8a:37:c0:1c:98:c2:cb:07:83:d1:aa:09:
26:a1:d1:25:dd:29:8a:a7:bd:b5:21:66:31:38:c5:
ff:ba:de:37:4f:9c:ec:b7:37:ff:bf:28:97:1a:6a:
77:7f:99:0d:40:6d:2c:b1:44:a2:21:bf:05:6a:cb:
48:3c:04:3d:6f:cc:59:10:db:8b:6e:57:20:e6:d1:
16:aa:33:ed:ed:14:18:a2:85:28:17:46:4c:56:40:
e8:cd:f7:f0:96:96:f0:e0:ec:55:f4:6e:0d:1f:7c:
c8:de:9c:df:ac:6e:a7:33:a3:16:cb:50:f8:25:43:
8b:77:44:04:c9:64:de:c3:32:96:e5:60:2f:08:65:
36:28:77:d6:7c:84:5e:f6:7b:40:ab:3f:b0:9f:ec:
6c:19:d2:f4:f4:8a:f2:7a:26:4a:7b:06:95:6f:13:
69:9e:2b:26:be:62:87:e3:e1:fe:4f:e7:5b:cd:9a:
2d:cd:26:ec:98:1b:32:b7:e7:1d:ef:2c:f9:f0:80:
77:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:72:4C:9F:65:BC:71:BC:9F:40:F2:FC:C1:85:C6:27:BD:AD:37:A7
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/A3JMn2W8cbyfQPL8wYXGJ72tN6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.203.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ac:27:13:d2:d1:20:22:30:af:69:14:43:6d:d7:f3:a5:f9:
bc:6d:a7:e5:0c:38:0e:49:0d:df:c6:be:f8:36:e8:f9:33:f1:
3e:94:e1:16:89:45:8c:67:d2:f8:37:95:c8:15:fc:68:94:c5:
b9:9b:d0:f4:7f:eb:85:5f:79:0f:f7:c2:7f:ec:78:56:b0:fd:
9e:7d:d7:86:ad:57:b0:92:e3:05:67:d4:1b:aa:28:dd:5a:1a:
dc:65:89:e6:2d:70:f7:39:8f:ff:98:e6:a8:6c:89:08:fa:07:
34:58:34:2b:b9:f9:6e:39:7c:df:9f:d0:8f:9a:88:77:e4:08:
e5:b5:dc:6a:cc:48:30:a0:fd:50:3d:cf:b6:90:d9:b6:b1:e5:
e9:d6:57:2a:70:d3:03:f3:c2:69:a7:48:4a:41:d1:a4:8c:8e:
1b:b4:84:ee:61:7e:7e:e9:7e:06:b7:f8:0b:13:84:1c:02:eb:
0e:29:5a:92:a2:19:fb:f5:9a:ed:fe:ec:cd:d3:15:2e:1f:e3:
6c:25:69:c5:3c:d5:87:a6:6d:80:f7:bb:15:da:09:ef:b1:b6:
b1:89:c2:e1:d7:af:93:d9:a1:e0:00:cd:0f:63:cc:f1:a3:19:
ef:f6:e4:cd:d9:43:c2:82:cf:4b:d6:44:78:4f:a6:9f:bd:29:
b9:d3:bd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:45 2023 by rpki-client on console-fra.rpki-client.org