Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6PgZM38N6HqF_GMZhsh6v0k9kqE.roa
File: 6PgZM38N6HqF_GMZhsh6v0k9kqE.roa (raw, json)
Hash identifier: +lsDgGS0SiIFQ2a5/cJd1iyux0oeraIlgXPkqwW8aTQ=
Subject key identifier: E8:F8:19:33:7F:0D:E8:7A:85:FC:63:19:86:C8:7A:BF:49:3D:92:A1
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 48DB0E1A
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6PgZM38N6HqF_GMZhsh6v0k9kqE.roa
Signing time: Mon 07 Feb 2022 08:20:16 +0000
ROA not before: Mon 07 Feb 2022 08:20:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35112
IP address blocks: 46.161.41.0/24 maxlen: 24
5.188.84.0/24 maxlen: 24
46.161.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1222315546 (0x48db0e1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Feb 7 08:20:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8f819337f0de87a85fc631986c87abf493d92a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:ad:81:6f:57:24:60:7e:61:70:6c:08:f4:
3f:19:6f:4d:92:2f:37:07:00:c3:a8:f4:88:73:05:
37:ef:06:9d:03:9c:bb:63:89:8f:71:42:26:2e:f8:
b0:27:e1:9b:5a:51:70:f3:e7:be:1a:0e:10:4b:e2:
60:01:b9:cd:df:b1:5a:ec:e7:36:1a:9c:72:cb:9e:
42:49:b2:df:c9:df:26:77:12:aa:21:f6:42:c6:7c:
14:51:8f:ba:d8:1d:42:30:2d:05:ca:99:c4:30:ca:
58:9c:aa:6c:05:5a:c3:fc:20:5c:98:da:dc:ef:c1:
95:5b:46:f2:a2:53:3c:9d:96:14:1e:ca:7c:b8:2f:
90:99:20:bc:fc:d2:53:e0:b4:8c:0a:7e:da:ed:57:
00:73:94:3d:77:63:d8:f4:ba:11:74:19:27:c2:a1:
97:d1:1f:0c:6e:eb:bc:98:7e:7c:c2:fb:06:87:16:
f0:45:2d:15:5b:c5:dc:0c:39:dd:6c:cc:4b:b6:1f:
3e:54:05:ec:44:c3:d7:a8:a0:11:8e:9b:1b:25:02:
87:84:51:d6:17:4f:d1:6d:96:88:c1:56:ef:2b:0d:
ce:4d:37:e0:ff:6b:7d:06:ef:4c:24:5c:48:70:69:
c2:55:9f:29:44:38:74:a1:70:73:65:f3:ae:ff:73:
ea:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F8:19:33:7F:0D:E8:7A:85:FC:63:19:86:C8:7A:BF:49:3D:92:A1
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6PgZM38N6HqF_GMZhsh6v0k9kqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.84.0/24
46.161.1.0/24
46.161.41.0/24
Signature Algorithm: sha256WithRSAEncryption
69:aa:4e:31:0b:2c:81:45:00:68:de:ef:ad:64:d0:44:29:43:
28:68:a2:c5:61:8c:eb:a0:0e:ae:78:46:3e:a6:e3:10:0b:f9:
a2:ac:d7:97:67:0f:4f:d0:20:59:70:e5:31:9a:0a:bb:a5:49:
7f:a6:a3:c0:4d:e4:1d:c5:13:98:13:8c:bf:b4:91:c4:ed:b0:
5d:bb:8f:36:53:b5:40:79:33:23:9e:b2:16:b2:07:18:82:a8:
62:8e:56:03:49:d7:1a:81:1e:01:0c:13:1a:82:c5:e5:a2:a5:
72:9e:9e:a3:6b:13:ec:a2:94:ad:71:19:9e:4b:40:67:ca:18:
49:9c:01:52:41:c4:27:21:d5:d2:63:81:68:8e:dd:55:ec:35:
70:d3:5a:f9:78:66:63:12:2e:b4:ee:e3:b4:81:18:17:cd:0e:
63:58:56:a6:ac:87:17:a0:ce:1b:cb:23:ec:a0:28:af:49:f9:
01:3b:db:00:86:9f:43:de:7d:15:7b:d7:d2:d1:f8:66:af:50:
4a:87:eb:89:4f:81:9d:14:71:cb:ba:2c:68:4c:17:38:0d:53:
eb:fe:b0:3e:88:34:77:dd:5f:38:2c:d5:99:37:07:82:55:41:
62:c9:c5:61:04:49:9c:11:b0:81:a3:f7:cf:bd:8c:e7:ed:51:
9d:de:c9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org