Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_cgbMvFdhRmyiXjHQGgL4Ny1a3s.roa
File: _cgbMvFdhRmyiXjHQGgL4Ny1a3s.roa (raw, json)
Hash identifier: ZTCkpx+3XQm7yEj8QuCxFZaqjetUTEuOdClQSc6mUOY=
Subject key identifier: FD:C8:1B:32:F1:5D:85:19:B2:89:78:C7:40:68:0B:E0:DC:B5:6B:7B
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 485F9229
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_cgbMvFdhRmyiXjHQGgL4Ny1a3s.roa
Signing time: Sat 01 Jan 2022 03:00:24 +0000
ROA not before: Sat 01 Jan 2022 03:00:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40824
IP address blocks: 46.161.12.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1214222889 (0x485f9229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdc81b32f15d8519b28978c740680be0dcb56b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:26:20:2e:3d:ca:55:d9:7d:0c:91:bc:25:
15:aa:6a:07:5a:21:38:c8:d3:8e:51:72:8a:9b:5b:
de:ef:f0:1a:56:f5:77:c8:50:b6:33:0d:23:c0:5b:
29:51:23:c3:58:07:79:1d:9f:2f:53:12:c3:6c:2a:
d7:50:44:0a:a3:3c:08:25:94:6c:bf:76:a3:51:f1:
17:75:de:08:19:fd:90:bf:c5:00:73:8f:ac:f3:78:
cc:f5:35:dd:0d:22:fe:5f:bb:44:fb:2b:41:bc:c4:
c6:87:37:3e:aa:d6:93:4b:13:bc:61:24:96:d1:e1:
9e:87:7f:ad:09:21:b7:63:28:2a:8c:80:28:26:36:
44:f2:e6:08:e8:e4:fc:6b:be:b8:b6:7f:f5:38:12:
bd:06:48:de:da:4d:5b:66:57:c1:97:55:7b:b2:9a:
de:78:4d:4a:01:32:92:80:42:8c:d0:4c:fe:a1:f2:
a7:13:ad:4c:88:27:cb:79:76:e4:44:15:ff:0d:7a:
5d:12:8f:71:68:d8:c7:f9:f6:27:9d:81:db:a5:c8:
40:a7:e5:90:5f:32:f3:a2:65:49:26:cd:db:fd:7c:
06:af:95:dd:b3:92:84:93:95:88:43:9f:58:7d:60:
14:a2:52:0b:23:36:0f:d6:d8:f5:a6:42:1b:97:10:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C8:1B:32:F1:5D:85:19:B2:89:78:C7:40:68:0B:E0:DC:B5:6B:7B
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_cgbMvFdhRmyiXjHQGgL4Ny1a3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.12.0/23
Signature Algorithm: sha256WithRSAEncryption
55:2f:14:2c:93:24:f3:36:de:0d:86:18:a6:16:98:83:03:1a:
87:e8:a3:35:32:d9:8f:b4:bf:72:ac:72:da:c4:a6:d0:6a:74:
84:0e:c0:02:53:80:a8:81:c8:15:df:64:e4:79:dc:32:4d:03:
4f:b0:60:8f:1f:69:6c:0f:87:ed:12:00:eb:c6:93:bc:23:9f:
66:2e:ff:15:56:a0:b2:70:69:08:90:8e:8c:15:12:8f:a3:b6:
e4:20:bc:5c:c3:01:10:3f:f2:6c:46:e7:7c:f7:5b:52:ee:a7:
7a:d4:24:91:7c:7c:82:55:54:4e:18:ce:83:a0:b2:b4:b5:bc:
1d:12:4f:fd:49:93:73:8c:b9:89:ed:7f:bb:48:3c:7c:c6:9f:
80:99:05:b4:02:8f:72:f0:18:50:89:ec:ac:5b:d1:a6:a1:66:
bb:47:66:60:0f:af:87:a3:5a:74:4a:c5:d6:38:d8:3e:6f:41:
f4:9d:5d:53:73:f3:89:d0:64:c3:d2:d4:62:60:ad:04:78:8b:
a4:76:66:a9:82:11:00:0d:09:21:da:5a:a2:dc:27:1e:4c:0d:
30:bb:87:29:37:f5:0b:df:5d:a7:6e:29:ab:54:15:0d:80:87:
9f:fa:42:5c:d9:e4:04:d7:a2:fb:fa:6f:f2:6f:b2:13:0a:13:
04:1c:83:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org