Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/K005eQEc55RZ048CrjFggFFPWMU.roa
File: K005eQEc55RZ048CrjFggFFPWMU.roa (raw, json)
Hash identifier: HqhIjHnUdtj51yb0k+81IAPf6piA3HWEPiTqNVk61XY=
Subject key identifier: 2B:4D:39:79:01:1C:E7:94:59:D3:8F:02:AE:31:60:80:51:4F:58:C5
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01852E54DA0A582F1B489E93B2AA4302E38F
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/K005eQEc55RZ048CrjFggFFPWMU.roa
Signing time: Tue 20 Dec 2022 06:59:50 +0000
ROA not before: Tue 20 Dec 2022 06:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35112
IP address blocks: 46.161.41.0/24 maxlen: 24
46.161.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:54:da:0a:58:2f:1b:48:9e:93:b2:aa:43:02:e3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Dec 20 06:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b4d3979011ce79459d38f02ae316080514f58c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:79:7d:2b:b8:63:dc:06:4e:1c:96:46:7e:ca:
90:21:3e:85:3c:e1:60:45:6c:e5:ba:c7:f5:7f:13:
b8:f1:a3:30:30:90:4c:d3:6e:e5:14:02:03:01:ee:
aa:c2:40:b2:dc:e9:56:da:b6:12:93:99:29:c4:93:
88:45:f0:0c:81:26:fc:6f:58:6f:63:33:fd:a8:5e:
c2:2a:ba:94:82:ee:e7:52:61:47:61:14:02:0d:5c:
72:e2:6d:2e:fa:fe:b2:0a:0b:ef:0b:6c:e7:6e:44:
8f:15:6a:f4:cf:a8:41:32:88:60:17:1a:8e:3b:c7:
34:1e:c1:43:6d:76:53:7f:89:be:82:23:1f:be:47:
2a:7f:56:3a:0a:37:75:04:0d:86:da:5d:bc:87:ce:
3c:00:7e:58:fb:fb:fd:eb:c6:dd:d8:e0:63:9d:ce:
52:dd:03:88:94:25:1e:38:b3:d5:a9:27:88:e4:c4:
ab:92:14:e3:df:4d:93:7e:4b:38:53:57:be:ae:4b:
c8:8b:da:00:0a:78:cf:00:e7:cf:86:d4:3a:a0:19:
15:0e:cd:f3:c7:15:07:6e:a2:d1:4e:68:89:bc:c4:
f1:20:da:9a:4f:57:b4:00:86:8c:cc:c6:67:ba:4b:
95:31:80:21:d3:e4:e1:89:6f:cf:30:60:a0:ab:74:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4D:39:79:01:1C:E7:94:59:D3:8F:02:AE:31:60:80:51:4F:58:C5
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/K005eQEc55RZ048CrjFggFFPWMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.1.0/24
46.161.41.0/24
Signature Algorithm: sha256WithRSAEncryption
27:23:af:82:1f:46:39:32:5f:45:5e:01:aa:7c:de:32:f1:9a:
8b:c1:18:14:00:02:7e:ab:22:2c:b9:02:00:75:a4:e0:90:cd:
b7:ec:a3:10:9b:70:27:66:e7:7e:e7:de:a1:25:e3:ec:c5:35:
52:8d:7d:68:87:a5:bb:82:22:26:77:fe:b4:87:06:b9:9d:94:
10:ec:ad:a1:1d:da:d7:a4:0c:9b:ff:f6:4c:4f:6d:05:a9:2d:
df:7a:af:1e:2d:17:91:59:ca:12:e9:74:40:79:89:5c:c5:0e:
2e:1a:27:c0:b5:de:16:09:a6:b7:14:76:ae:3e:68:57:a3:08:
88:d1:41:e0:b5:3d:b3:df:32:60:d6:17:e6:db:86:47:2d:18:
81:31:a3:12:6f:6c:b7:5e:01:d0:77:3a:e8:c9:74:37:77:7a:
62:32:8c:59:cc:43:59:ff:c6:d2:7d:eb:39:b4:61:8f:62:bb:
bb:ef:53:3e:f8:50:32:8e:51:3c:79:62:b8:37:63:66:51:1d:
95:8b:57:04:e7:77:af:8b:ee:f6:8c:a3:e3:19:be:80:03:df:
e4:1d:02:9c:79:1c:cf:ce:9b:35:37:6e:96:26:d6:95:4c:f8:
31:1f:b5:ef:bc:80:55:b0:b2:e5:89:4f:72:50:31:49:ae:3d:
fa:a7:30:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org