Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/61en6mY0i7Fta5JMXg9QSMTbLpE.roa
File: 61en6mY0i7Fta5JMXg9QSMTbLpE.roa (raw, json)
Hash identifier: NxjthD7cLjj3aqjZwzFy/x64q7sVLvfYqcc5Ni2NB1Q=
Subject key identifier: EB:57:A7:EA:66:34:8B:B1:6D:6B:92:4C:5E:0F:50:48:C4:DB:2E:91
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 0178D418
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/61en6mY0i7Fta5JMXg9QSMTbLpE.roa
Signing time: Sat 01 Jan 2022 01:54:40 +0000
ROA not before: Sat 01 Jan 2022 01:54:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51615
IP address blocks: 46.54.192.0/19 maxlen: 19
46.54.224.0/20 maxlen: 20
46.54.128.0/18 maxlen: 18
2a02:2590::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24695832 (0x178d418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Jan 1 01:54:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb57a7ea66348bb16d6b924c5e0f5048c4db2e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:27:b2:7a:22:04:ef:81:ab:27:fd:d7:e9:
9d:00:d7:1d:8c:51:64:c0:fd:34:54:06:13:8a:f1:
f9:8c:7d:e9:96:7a:e2:43:29:1b:2a:35:93:83:e6:
33:b1:53:34:0d:85:c9:39:68:15:03:6c:d9:db:f3:
cc:a8:ec:79:c5:f0:a5:9b:c9:8d:44:a9:6a:c5:65:
11:2c:fe:03:52:6e:26:37:aa:f6:05:1e:0e:02:0a:
4f:79:60:3c:d2:11:c5:74:06:c0:5f:64:31:67:17:
9b:f7:54:46:17:7e:73:91:c7:a3:d5:48:64:15:6e:
1e:41:87:a7:27:cb:a5:b6:b8:5a:5d:78:75:9d:ff:
f4:45:ca:42:69:aa:34:4e:ea:c5:c3:ee:50:67:f4:
ef:ca:14:89:af:a1:c2:54:e9:11:6d:de:13:2f:e6:
a5:b4:7b:8b:9a:7c:d5:60:4a:10:23:5e:90:92:f8:
78:b3:c1:b8:51:8b:b3:59:e4:0b:f0:af:d0:3c:95:
2d:d1:b4:cd:50:2d:0f:3f:81:4c:04:e1:95:ed:be:
f6:4b:f3:da:24:aa:b2:e3:a4:e5:3f:68:4a:c7:8d:
2d:67:34:ee:9f:33:d8:11:f0:13:e3:62:5d:c3:d4:
37:57:6d:de:c7:9c:75:62:8d:5b:df:34:cc:fa:ac:
a3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:57:A7:EA:66:34:8B:B1:6D:6B:92:4C:5E:0F:50:48:C4:DB:2E:91
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/61en6mY0i7Fta5JMXg9QSMTbLpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.54.128.0-46.54.239.255
IPv6:
2a02:2590::/32
Signature Algorithm: sha256WithRSAEncryption
1d:58:4c:2f:3a:fc:6d:ee:45:c7:6c:6e:06:3f:16:55:c2:8c:
01:27:ca:fd:93:97:e8:dd:c2:20:c8:d8:d3:5b:c9:9d:1e:37:
c3:ef:94:42:7e:2e:9d:a7:2e:1c:41:3d:e5:41:bc:16:52:0a:
53:b6:32:88:66:72:f6:1b:a4:4a:b6:77:9d:82:07:d2:8c:09:
f8:5a:4f:c0:c7:8c:45:98:a0:f4:3a:3a:4c:ff:65:3d:79:23:
d2:2a:0a:b3:4e:9e:f3:ee:b9:d6:69:6b:07:95:6b:66:0a:89:
0c:c7:f3:53:38:d5:57:a2:40:98:02:f7:49:c5:0b:14:a7:96:
3d:8c:0f:2d:f7:9c:92:75:39:7c:c6:da:f8:52:c4:4d:d2:0e:
85:bc:93:ee:45:b4:6f:8d:10:3b:6e:01:9b:52:86:e0:5d:8d:
c6:b0:ec:4c:a4:b3:c9:85:33:67:2e:c1:6f:94:20:17:c0:f6:
4f:2d:6e:eb:64:d6:bc:f6:bb:44:87:5d:b6:1f:0d:24:2b:3f:
f7:4d:8c:7c:1d:d3:b8:10:68:f5:10:5f:a2:92:6d:f2:76:0c:
3a:bb:4c:a4:dc:75:77:f4:04:67:de:0b:80:ca:92:bf:ff:81:
7b:79:8f:ae:83:ba:b1:d6:c2:f6:ce:4d:44:9e:2c:01:63:d5:
4c:10:a9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:55 2023 by rpki-client on console-ams.rpki-client.org