Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/IJ5cE9x1ZbxPRhBV11lDTc2kJBE.roa
File: IJ5cE9x1ZbxPRhBV11lDTc2kJBE.roa (raw, json)
Hash identifier: AGER4RHq9vM1ZESWuEOqipDP0QM3K78DxDkPf+3J7wo=
Subject key identifier: 20:9E:5C:13:DC:75:65:BC:4F:46:10:55:D7:59:43:4D:CD:A4:24:11
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A4EEA81
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/IJ5cE9x1ZbxPRhBV11lDTc2kJBE.roa
Signing time: Sat 01 Jan 2022 14:56:24 +0000
ROA not before: Sat 01 Jan 2022 14:56:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57241
IP address blocks: 46.209.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978250369 (0x3a4eea81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=209e5c13dc7565bc4f461055d759434dcda42411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:da:14:9e:31:93:b9:71:38:81:d5:89:f9:
81:3f:d4:2f:de:30:64:f9:79:23:91:17:38:3a:b7:
94:47:d2:d4:6f:6a:0e:aa:29:02:62:eb:bb:46:e9:
fb:5a:f8:c7:05:61:97:34:43:51:8c:07:9a:33:cc:
c5:21:52:fc:c3:e5:d0:d5:48:90:43:58:91:6b:13:
22:a5:78:95:3d:83:3a:23:8e:d4:f9:51:c4:60:98:
86:be:16:47:4d:d3:96:cd:ea:c8:3c:17:56:6a:83:
50:f6:1b:4d:6b:c4:db:78:9e:e0:f0:dd:73:7e:4a:
15:6f:12:02:42:d5:38:a2:84:76:3c:91:25:eb:85:
36:32:46:f8:b6:d6:84:e5:71:02:e5:50:13:88:4f:
2e:f4:e0:1a:8e:5b:9e:54:97:a0:ff:0f:2f:44:73:
3c:4f:4c:4e:c1:17:b5:d2:41:e8:14:e7:f8:c0:19:
1e:94:e4:4e:2d:0f:bf:31:da:2f:63:49:bb:04:b2:
2d:84:96:85:e0:fd:55:5e:30:83:ac:64:db:88:b4:
ea:c7:2b:8c:53:1e:a5:a0:a3:0f:85:22:82:fb:cd:
7b:fe:6b:ff:fb:5e:60:46:fd:63:0e:b2:9a:78:79:
fe:2e:25:2d:ac:a5:b3:a1:1a:27:50:01:4d:95:e9:
1d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9E:5C:13:DC:75:65:BC:4F:46:10:55:D7:59:43:4D:CD:A4:24:11
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/IJ5cE9x1ZbxPRhBV11lDTc2kJBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.209.197.0/24
Signature Algorithm: sha256WithRSAEncryption
32:15:1d:12:30:72:46:12:12:c2:d2:15:e5:d4:2c:3d:33:8d:
e3:4a:0c:fc:ef:88:ad:04:08:a3:11:54:5c:ab:68:22:79:86:
9e:4a:ea:b1:72:b7:ca:6d:1d:66:31:49:37:a6:9b:e3:c8:0b:
99:a9:b8:fa:0c:8d:4b:3c:57:33:5f:1e:82:61:31:a6:b4:54:
1c:d7:7c:50:df:6c:a6:1c:11:8c:dd:0a:c0:5a:69:2a:1f:64:
dd:8b:6b:f0:5a:87:6a:70:ae:c3:9f:af:1b:18:12:e2:4f:2f:
58:03:df:e8:44:32:4f:d2:d6:c0:27:29:d3:81:54:99:6b:9f:
c0:a8:48:7c:38:db:50:18:85:01:3c:19:53:ac:81:a9:93:5c:
ac:7e:3f:17:08:cb:6d:b8:77:73:0d:d0:dc:6a:d5:71:14:df:
bb:cc:a5:f9:3a:fb:14:8c:cb:86:46:df:31:01:06:11:2a:92:
2f:02:a5:3e:05:7b:3c:46:83:2a:3b:c3:33:02:87:02:bc:09:
93:04:0c:82:fd:77:18:2b:36:33:ee:03:49:72:09:eb:85:15:
d4:58:6e:34:82:a1:3f:d8:7e:c3:2a:7a:98:ee:ca:b6:2b:b2:
6a:b4:0e:63:fc:6f:84:d4:f3:53:2b:c3:15:a6:5e:55:aa:50:
28:90:34:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:31 2024 by rpki-client on console-fra.rpki-client.org