Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/mhSwyl7VBPpIHavolgxoiSzY74c.roa
File: mhSwyl7VBPpIHavolgxoiSzY74c.roa (raw, json)
Hash identifier: 79GZoYybz3i6q70QjfNtwY5EzENivAL0wjALHcKBnzk=
Subject key identifier: 9A:14:B0:CA:5E:D5:04:FA:48:1D:AB:E8:96:0C:68:89:2C:D8:EF:87
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 348FBA81
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/mhSwyl7VBPpIHavolgxoiSzY74c.roa
Signing time: Sat 01 Jan 2022 09:57:35 +0000
ROA not before: Sat 01 Jan 2022 09:57:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39756
IP address blocks: 83.246.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 881834625 (0x348fba81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Jan 1 09:57:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a14b0ca5ed504fa481dabe8960c68892cd8ef87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b7:8d:de:15:7b:27:72:5d:a4:d2:43:1d:40:
84:93:4b:df:1e:83:54:f6:6b:dd:9f:59:8a:9f:9b:
4d:df:09:d7:46:d8:4d:83:14:5a:69:75:fd:e9:52:
50:f0:84:97:a1:10:45:34:35:e3:9b:65:a4:56:39:
10:1c:30:2b:bb:37:46:52:c9:09:6c:68:fb:fe:cf:
d2:77:c4:dc:f3:8e:1f:5e:15:3a:71:7f:34:11:f0:
44:d5:3e:72:fb:c1:99:d5:de:ad:8b:b1:b9:25:b8:
d0:8a:ff:fe:72:ad:20:1a:2c:42:2e:a6:a1:19:e6:
08:7c:a7:48:dc:0f:54:a4:a8:4e:10:4e:e9:ed:b0:
11:48:54:12:4f:61:5a:9a:06:d9:f4:e3:da:ed:89:
ca:a0:86:08:70:26:e9:ed:0b:05:fe:d1:70:a4:7b:
f8:ff:d6:d7:9e:11:a2:30:49:ee:3e:d3:01:75:f8:
32:33:12:d0:33:a5:f5:d0:60:d2:0e:73:22:05:aa:
b4:3b:c2:9a:4c:de:d3:f2:4c:96:84:03:4f:ec:4a:
36:1a:9f:88:c3:3c:48:f1:ae:cd:63:1d:84:93:50:
bb:82:b4:c9:2a:17:88:47:79:18:a6:a5:4f:8f:39:
a6:8f:86:9b:a1:0d:82:e3:1c:5b:7b:ac:9c:ff:71:
4b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:14:B0:CA:5E:D5:04:FA:48:1D:AB:E8:96:0C:68:89:2C:D8:EF:87
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/mhSwyl7VBPpIHavolgxoiSzY74c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.246.0.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:f0:e5:5f:1e:53:50:17:e2:e7:94:51:6e:f9:b9:f2:c0:73:
64:ff:a7:dc:0e:38:e1:42:48:40:a9:26:ea:ef:e3:f1:7d:04:
05:26:f4:44:28:57:51:0c:18:5a:21:72:da:0c:6c:94:a6:39:
38:4e:e1:74:2d:50:d0:58:45:98:91:c2:aa:51:7a:b4:7e:63:
a0:96:2b:69:c9:ae:6b:50:85:c9:1d:b0:9f:06:dc:cd:82:0d:
e4:f8:65:af:4c:3a:3f:51:53:3b:2c:73:09:58:b2:2c:d8:c7:
f9:12:57:ed:da:b1:d7:36:4e:10:39:30:89:52:72:00:f6:b6:
41:11:be:ec:6a:e9:9d:10:6e:72:b2:c4:6a:0a:ba:a1:40:54:
ae:2b:b9:ab:66:0b:bd:58:34:d9:3d:a9:3f:3f:6e:1f:ba:b2:
b0:b0:7b:53:a3:f6:dd:6e:1c:97:43:e7:5e:85:78:8e:3f:ae:
92:99:40:0e:ba:7a:82:2c:c7:c2:34:6e:6e:cd:6d:46:06:d8:
12:02:80:d4:a6:dc:f2:90:d6:6f:97:5a:ab:ee:73:d0:1b:16:
4f:27:8c:bd:d4:72:10:e8:0c:e5:ed:35:4a:5a:9a:2a:1c:eb:
74:39:f2:f6:41:e7:44:4e:9d:02:62:1e:0d:4f:f4:a4:00:ea:
25:9e:7e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:14 2024 by rpki-client on console-ams.rpki-client.org