Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/Qtk2sqr2tz0gQ1lNhShAStk54AI.roa
File: Qtk2sqr2tz0gQ1lNhShAStk54AI.roa (raw, json)
Hash identifier: qx5CWD4aHbXtKQTtpf2oWohhqTBzTQ6YQVnM7CKbJIM=
Subject key identifier: 42:D9:36:B2:AA:F6:B7:3D:20:43:59:4D:85:28:40:4A:D9:39:E0:02
Certificate issuer: /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial: 01842E567ABCD0A439AF6FAD5A5C18632B74
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/Qtk2sqr2tz0gQ1lNhShAStk54AI.roa
Signing time: Mon 31 Oct 2022 13:58:50 +0000
ROA not before: Mon 31 Oct 2022 13:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202773
IP address blocks: 46.226.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2e:56:7a:bc:d0:a4:39:af:6f:ad:5a:5c:18:63:2b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Validity
Not Before: Oct 31 13:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42d936b2aaf6b73d2043594d8528404ad939e002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a6:e5:c2:4e:a6:ee:42:74:fb:1c:26:44:79:
96:2c:13:79:d6:40:39:db:8c:1e:11:74:da:41:43:
a7:f1:17:e3:4d:3d:b9:50:79:9b:ee:d6:51:07:4e:
f1:b9:58:17:c9:3f:2b:3d:19:aa:96:08:4b:4d:d7:
e8:51:48:a3:72:33:07:11:79:be:63:16:1d:23:36:
31:d0:b3:74:29:77:e4:3d:2c:cd:f1:a1:5e:17:a6:
a8:3c:1a:8c:32:ad:3a:5e:d4:e1:41:26:5e:ed:ee:
8f:5e:9f:ad:04:26:dc:31:77:e2:51:d4:be:49:bd:
cc:0a:73:6b:33:93:3a:5f:33:cc:75:89:ad:10:ff:
7f:9c:ad:a6:a1:43:14:8b:5f:68:57:d0:4a:3f:3d:
db:cb:59:03:cc:48:fa:fe:ef:bb:dd:bc:ef:55:b6:
9c:5c:10:0a:6b:79:1e:67:4e:21:11:9b:e0:f5:ea:
16:51:ee:d7:24:f8:d0:a3:77:d7:7e:93:0f:0b:90:
89:e5:b9:eb:04:34:ae:5f:03:98:9c:9d:f6:91:83:
da:73:a1:5a:4a:85:11:c2:97:2e:02:74:3f:c8:cc:
3c:54:5e:28:9f:4d:15:ff:bb:9b:2a:43:cd:20:b5:
f2:d4:d6:78:40:65:ce:1b:81:dc:0b:4c:41:5a:1c:
97:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D9:36:B2:AA:F6:B7:3D:20:43:59:4D:85:28:40:4A:D9:39:E0:02
X509v3 Authority Key Identifier:
keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/Qtk2sqr2tz0gQ1lNhShAStk54AI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.209.0/24
Signature Algorithm: sha256WithRSAEncryption
58:62:5c:6b:49:2f:06:19:00:52:88:d5:54:55:b2:1a:cf:35:
c0:c3:a7:72:9a:5b:fe:db:cc:65:b8:3b:0b:09:95:b3:9a:39:
36:c6:c2:00:42:10:c6:36:07:72:bb:81:2b:6a:2f:5f:b8:0f:
1d:3f:2a:44:61:f2:ec:12:5e:b9:4a:fa:1c:c9:93:19:1d:79:
85:1b:2f:83:ad:28:6d:3f:3e:9b:ec:69:ea:0f:1f:27:6f:5a:
46:a1:fb:88:dd:f3:a5:85:9b:1c:a1:d0:5d:a6:8f:a1:72:ca:
04:b2:e9:d0:c4:39:2a:17:1a:b0:78:c1:a3:2c:5c:5f:c0:2e:
ef:ae:e2:2f:3d:c3:7f:cf:94:f8:4f:09:4e:d4:4a:6e:8e:35:
27:af:c4:f2:4b:7b:a8:ee:09:72:ea:f6:12:a4:8f:a8:da:0c:
39:3c:5f:3b:64:7a:69:5f:b7:08:e2:c3:d5:a9:d4:f2:27:00:
dc:70:44:ea:3a:d4:c7:67:4b:f8:87:6a:82:a6:0d:6d:1e:a3:
2c:ce:2b:3f:be:80:8e:1c:4a:c4:4d:7d:2b:f3:75:a2:1c:65:
2c:fa:df:38:f8:35:31:70:a8:b1:76:50:42:20:59:f6:f9:41:
b7:e4:4a:76:7d:9b:d6:bc:7e:68:ec:f6:94:1e:98:e5:45:84:
37:4f:bf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:11 2024 by rpki-client on console-ams.rpki-client.org