Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/E4hmhJqZm1KjCB2uXEgS5fkbt74.roa
File: E4hmhJqZm1KjCB2uXEgS5fkbt74.roa (raw, json)
Hash identifier: dpuBfEmrU4CooNRwkLqCG3vF8kcJL+qly2cxJ/H81zQ=
Subject key identifier: 13:88:66:84:9A:99:9B:52:A3:08:1D:AE:5C:48:12:E5:F9:1B:B7:BE
Certificate issuer: /CN=5b0b3e4fbf236cf1651ba734da1b47f62f4aba44
Certificate serial: 0109E743
Authority key identifier: 5B:0B:3E:4F:BF:23:6C:F1:65:1B:A7:34:DA:1B:47:F6:2F:4A:BA:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wws-T78jbPFlG6c02htH9i9KukQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/E4hmhJqZm1KjCB2uXEgS5fkbt74.roa
Signing time: Sat 01 Jan 2022 05:55:36 +0000
ROA not before: Sat 01 Jan 2022 05:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 46.226.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17426243 (0x109e743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0b3e4fbf236cf1651ba734da1b47f62f4aba44
Validity
Not Before: Jan 1 05:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=138866849a999b52a3081dae5c4812e5f91bb7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:da:b2:4f:97:35:e0:ec:fd:0c:0c:9e:c2:
59:8f:7f:1f:06:d9:c7:60:c5:8a:2a:62:19:22:10:
bb:2b:ce:a7:0d:c9:40:53:bd:7f:09:d4:06:94:ac:
1c:8b:78:55:7e:0c:0c:06:28:b9:9c:84:9b:44:18:
28:45:b3:22:15:61:f0:43:ca:04:1f:a0:c0:bd:c2:
65:9a:10:88:1a:bf:5a:4a:b2:e6:a6:23:fd:85:5b:
b4:56:e2:d1:49:cb:93:aa:f4:9e:c4:a2:5e:11:7c:
0f:95:e0:af:54:0e:92:c4:e6:a1:e7:d0:12:d5:6d:
a3:6d:69:7f:ec:2f:6a:f4:0f:0e:27:a9:19:57:d9:
6b:74:12:7b:9b:86:1f:ca:d7:57:9f:62:b7:75:cb:
a7:b3:48:e9:3e:10:d4:dd:31:0e:14:97:b7:7a:97:
00:9d:a8:69:c9:af:c9:a5:63:e5:35:ca:b1:77:dc:
9d:53:0d:c2:3e:72:10:74:c8:41:3f:cf:41:a0:04:
a5:4f:3f:8c:d7:2c:45:31:11:ca:f4:ed:71:e6:d2:
db:f8:ec:5f:4e:fa:ce:35:77:9d:38:20:a1:12:b8:
2e:39:4c:7c:ce:ca:40:aa:47:b6:b0:e6:06:7e:79:
bf:4e:1d:3e:2a:33:75:86:41:24:77:2c:f0:2f:9f:
67:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:88:66:84:9A:99:9B:52:A3:08:1D:AE:5C:48:12:E5:F9:1B:B7:BE
X509v3 Authority Key Identifier:
keyid:5B:0B:3E:4F:BF:23:6C:F1:65:1B:A7:34:DA:1B:47:F6:2F:4A:BA:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wws-T78jbPFlG6c02htH9i9KukQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/E4hmhJqZm1KjCB2uXEgS5fkbt74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/Wws-T78jbPFlG6c02htH9i9KukQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.125.0/24
Signature Algorithm: sha256WithRSAEncryption
64:eb:a0:fc:09:ae:08:5f:4f:e2:78:0b:23:d0:35:a3:ab:af:
ff:b3:52:64:8e:5a:c0:2b:77:b2:a4:a7:d9:62:22:be:b1:c7:
90:ff:5a:8b:23:0b:2e:f3:68:63:13:61:1e:90:66:4b:c6:03:
9f:91:0d:24:32:00:5a:6d:ea:4f:55:e2:03:85:ab:25:0d:e0:
63:15:58:92:b7:bc:af:f1:3e:1c:6b:68:59:51:be:ae:91:90:
02:32:01:b7:e7:c0:a5:c3:f2:6a:c9:d1:2c:80:ef:bd:6f:e7:
81:fe:e3:57:bd:b9:a5:49:72:63:82:b2:6a:48:33:38:4d:4d:
a6:de:9b:93:49:00:08:12:e1:b8:66:46:ca:b9:4f:ec:64:3d:
7a:7e:67:61:ef:bd:18:99:97:3f:a8:00:ef:6f:85:1e:11:f4:
5b:f7:9c:8d:41:16:20:e3:71:44:26:0a:20:f8:f7:c7:f8:97:
fb:e3:32:63:b5:b7:cb:f3:83:15:53:7b:4c:d7:16:34:21:37:
9c:5a:0f:5c:86:4a:ed:d0:bf:ab:6c:18:56:b0:91:44:51:27:
d6:9a:56:ab:89:1a:cf:4a:ec:b0:4a:09:66:ce:43:56:f3:99:
ea:2c:e0:bb:65:a7:0f:e8:c1:68:06:98:2b:02:75:b2:14:05:
18:92:f6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:48 2023 by rpki-client on console-fra.rpki-client.org