Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Jtk5bLtANx9soYRkSBrzPdyED38.roa
File: Jtk5bLtANx9soYRkSBrzPdyED38.roa (raw, json)
Hash identifier: 0Piz9F22k1e1xriYXvQtV1Q3MGJgmqOCGaksuLl3XUA=
Subject key identifier: 26:D9:39:6C:BB:40:37:1F:6C:A1:84:64:48:1A:F3:3D:DC:84:0F:7F
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 48F32A3F
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Jtk5bLtANx9soYRkSBrzPdyED38.roa
Signing time: Wed 16 Feb 2022 13:14:53 +0000
ROA not before: Wed 16 Feb 2022 13:14:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 46.161.56.0/21 maxlen: 24
146.185.206.0/24 maxlen: 24
146.185.204.0/23 maxlen: 24
146.185.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1223895615 (0x48f32a3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Feb 16 13:14:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26d9396cbb40371f6ca18464481af33ddc840f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cb:4f:65:ed:2c:77:20:ed:63:e1:c9:35:f5:
04:4a:93:c3:fd:33:84:49:6f:63:a8:eb:d2:0d:11:
b0:fb:40:10:ed:e2:6e:bb:54:8d:ca:c5:4c:88:7e:
47:b0:52:6a:47:40:df:b9:1d:4e:2b:ff:e5:ff:ae:
cd:d3:ba:5c:3f:4e:d2:00:8a:b8:37:06:ba:e0:e5:
82:8a:37:59:ef:5f:a3:5e:7c:63:20:3c:72:e1:52:
8f:81:8a:99:c1:d1:fe:a4:34:f9:e3:48:58:19:6f:
8b:ca:b3:b7:ef:6f:49:1e:d4:3b:91:4d:ff:85:15:
ff:14:69:6c:6b:72:b6:23:7d:0c:d7:39:3d:4c:02:
9e:1d:82:6d:e8:07:04:1b:63:4e:10:46:a0:d7:21:
af:eb:ea:3f:99:dd:a4:75:b1:cd:23:6a:92:ff:85:
84:a4:d0:fc:da:ce:c5:f4:ce:36:d6:de:1a:90:1d:
3d:4f:2f:70:17:27:08:a7:af:81:96:fa:39:b7:e7:
03:93:3b:10:1c:ea:75:78:90:c3:a2:35:7b:d8:87:
3c:0c:2e:f6:6c:93:c3:98:81:0f:9e:8d:63:27:c6:
ca:84:50:0c:8b:15:1c:aa:bb:ca:aa:a3:fb:46:12:
be:cd:3a:15:e3:fb:3c:43:ba:be:17:d4:d3:b3:71:
44:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D9:39:6C:BB:40:37:1F:6C:A1:84:64:48:1A:F3:3D:DC:84:0F:7F
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Jtk5bLtANx9soYRkSBrzPdyED38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.56.0/21
146.185.200.0-146.185.206.255
Signature Algorithm: sha256WithRSAEncryption
75:cc:55:48:6d:b1:ac:2b:b1:d6:bf:37:a2:f3:a5:04:0c:33:
2b:5a:7e:f6:12:42:72:d1:51:05:1c:3d:3a:5f:54:88:2b:4c:
3c:a8:ee:04:4a:9d:df:c2:f2:c6:f4:02:bb:33:ca:c9:c6:c9:
88:44:c2:ca:7d:b8:be:8e:b7:cd:14:bc:7f:d6:20:b5:14:7d:
59:bd:ec:4c:b4:1d:9f:9a:d2:63:c6:ba:5d:d4:e6:97:7f:d1:
26:f4:76:4b:7a:95:03:d5:87:07:78:67:4c:79:7d:01:07:4d:
f9:84:7f:56:7a:6d:d5:42:1a:4d:10:21:0a:f3:61:c2:b5:13:
76:c2:77:7b:32:a5:0a:19:cb:d4:49:62:23:1e:e0:4e:23:ba:
47:8d:df:ee:69:9a:af:36:aa:ca:78:d4:b7:47:d9:68:62:af:
b6:3c:72:07:1a:ca:01:cf:49:a5:c5:85:35:4f:19:d7:7e:7f:
91:1e:36:22:29:48:ff:dd:77:8f:e5:7d:8f:1c:8d:5a:57:17:
a2:30:e1:e2:26:8b:49:bd:28:ed:ca:40:ad:75:fa:7e:26:15:
5f:20:7a:ce:37:17:69:00:00:94:ff:ed:05:4b:7b:f9:4e:fb:
ac:7b:c0:5b:9a:fe:ed:93:65:0b:86:38:13:d4:c5:81:fb:6d:
b0:47:70:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org