Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/n-itYSwA9LA8qtFb_9f4piG_xvo.roa
File: n-itYSwA9LA8qtFb_9f4piG_xvo.roa (raw, json)
Hash identifier: AzWW9ZOujg2jFEg68QCoi1N/Zsywx9TTKy1QaKFYn2c=
Subject key identifier: 9F:E8:AD:61:2C:00:F4:B0:3C:AA:D1:5B:FF:D7:F8:A6:21:BF:C6:FA
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 349023E7
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/n-itYSwA9LA8qtFb_9f4piG_xvo.roa
Signing time: Sat 01 Jan 2022 02:55:10 +0000
ROA not before: Sat 01 Jan 2022 02:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210650
IP address blocks: 46.36.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 881861607 (0x349023e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Jan 1 02:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fe8ad612c00f4b03caad15bffd7f8a621bfc6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:6c:d8:64:e2:97:24:fc:bf:d7:f8:74:fd:
58:3c:98:b8:1a:cb:87:ba:39:d7:9c:9a:65:2a:14:
a3:6d:21:f4:58:80:8b:b8:de:a8:3c:bb:2d:37:f6:
41:47:ca:05:75:90:75:f5:46:cc:bf:7e:8f:85:07:
ac:9b:49:c1:aa:1c:ec:de:e2:1f:f3:aa:0e:1b:2a:
cc:75:9b:6a:ac:fa:72:3d:d4:eb:86:91:13:0e:a2:
1a:03:45:04:86:3e:8e:86:a5:5d:0c:0f:2e:7c:3c:
b7:cb:56:b8:8d:0f:11:37:0e:a4:6f:83:19:09:5d:
33:04:7e:38:e5:ca:1b:94:6b:6d:93:03:aa:3f:61:
bd:31:a6:0f:02:42:70:50:fb:ab:7e:3c:a2:9e:50:
bb:e3:c3:55:8a:29:8e:e7:a5:ff:b4:a7:f1:78:d3:
ad:46:98:fe:1d:a3:3b:9d:6d:fe:93:eb:13:bf:6a:
29:59:77:ba:ad:7a:ec:62:12:17:6d:3f:ec:f3:a8:
f8:66:91:9a:77:6b:ea:a8:fa:59:4f:4d:ff:59:18:
fb:ef:55:d7:ad:1e:1c:3e:c2:bb:82:4a:2f:0e:2d:
5d:32:7b:2f:a5:30:f5:7e:e8:4f:ef:7f:33:20:27:
37:9b:b1:ea:57:01:b0:d7:70:c8:c2:78:f0:0d:9d:
c0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E8:AD:61:2C:00:F4:B0:3C:AA:D1:5B:FF:D7:F8:A6:21:BF:C6:FA
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/n-itYSwA9LA8qtFb_9f4piG_xvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.111.0/24
Signature Algorithm: sha256WithRSAEncryption
47:6e:cf:00:7c:b3:a0:de:86:c1:1c:75:ae:ea:48:81:0d:97:
8a:ea:b1:35:23:6d:1b:1c:4a:61:91:88:5d:8a:10:ad:dc:59:
cf:82:c9:68:e3:3a:e4:2c:de:eb:fb:1d:f3:b5:f7:d7:57:d8:
39:0a:71:e8:bb:17:47:c2:c8:60:96:54:07:9b:5b:bc:41:f3:
ec:1b:32:80:3d:bc:6e:c7:2b:d4:8b:db:5c:86:9f:84:19:86:
76:d0:3f:bf:9c:6e:ac:25:9f:11:b0:46:9f:40:5b:d3:7c:2d:
ef:4f:99:97:87:00:6c:6c:b1:fd:79:af:4a:23:ee:5f:32:ca:
9b:43:06:1d:fd:64:fa:64:9f:35:9f:36:23:23:4a:e6:89:d7:
7f:6a:f2:82:b0:e0:a6:51:a1:ae:71:49:4d:0f:a8:aa:31:19:
71:b7:b0:1e:4d:0a:9f:e8:b3:43:f6:de:1b:1c:1e:47:6b:ba:
2f:39:4d:04:69:f4:96:b6:65:10:70:67:54:6c:96:7d:3e:d1:
92:b7:d9:f4:23:2b:f2:17:be:49:53:68:06:76:45:47:ab:9b:
21:d3:3b:79:c7:14:07:91:17:03:78:8e:6f:9b:16:1d:fc:f7:
c4:78:2f:de:17:2e:0a:1b:c2:56:21:86:8c:bb:ed:a5:0f:91:
92:1e:15:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:17 2024 by rpki-client on console-fra.rpki-client.org