Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/lZeiQwBQSmK7ECb4zPKi8vMWFLw.roa
File: lZeiQwBQSmK7ECb4zPKi8vMWFLw.roa (raw, json)
Hash identifier: wugZFNaDN1f6cHoMWbAFXTt8VF8KSQoGo2t+CKSnfms=
Subject key identifier: 95:97:A2:43:00:50:4A:62:BB:10:26:F8:CC:F2:A2:F2:F3:16:14:BC
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A585531
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/lZeiQwBQSmK7ECb4zPKi8vMWFLw.roa
Signing time: Sat 01 Jan 2022 14:56:31 +0000
ROA not before: Sat 01 Jan 2022 14:56:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61209
IP address blocks: 46.209.185.0/24 maxlen: 24
46.209.184.0/23 maxlen: 23
46.209.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978867505 (0x3a585531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9597a24300504a62bb1026f8ccf2a2f2f31614bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:2b:d7:e0:55:41:b7:3f:04:ed:32:d8:f0:
81:37:b2:a8:69:bb:78:1a:12:94:58:84:01:1e:ab:
19:6c:06:4b:f1:02:e5:3b:96:8f:96:7e:33:81:19:
d9:aa:24:86:4e:f8:eb:4f:13:13:76:90:47:5d:7d:
46:2e:30:a7:f4:18:59:61:9e:9c:3d:7d:d5:00:d9:
fa:75:8a:79:23:0c:1c:89:f0:e8:df:53:5a:7d:7f:
d9:90:e1:fb:27:1d:ff:f5:31:6a:96:34:2d:2a:21:
24:59:6e:34:64:6f:7a:9d:c8:25:d3:0f:90:d4:98:
25:08:80:c7:4c:29:56:8d:d9:db:3b:72:3f:8b:d5:
b4:1e:19:ce:c1:97:e1:39:80:f0:0b:31:46:51:bc:
e9:62:73:c4:c2:de:4c:54:74:82:51:d1:21:87:2a:
24:11:84:b4:79:1d:67:e5:00:9d:fa:28:f7:10:3c:
11:74:96:e3:a0:06:2a:2b:fb:25:11:25:4f:25:fb:
2c:71:90:ba:d6:b5:66:5f:2a:38:9f:81:30:16:26:
fc:4f:34:bf:86:a6:d4:02:d3:88:7c:6d:dc:ba:6a:
dd:e1:20:32:81:50:71:99:77:fd:47:b1:3b:d9:17:
c2:d1:10:14:92:18:b7:ed:a9:36:a9:3e:1e:a5:d4:
1e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:97:A2:43:00:50:4A:62:BB:10:26:F8:CC:F2:A2:F2:F3:16:14:BC
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/lZeiQwBQSmK7ECb4zPKi8vMWFLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.209.184.0/23
Signature Algorithm: sha256WithRSAEncryption
84:9b:ef:52:87:52:86:e5:1e:5c:aa:84:c3:93:65:31:a4:03:
3b:71:59:58:61:c1:4c:24:3e:fc:3e:e1:49:0c:37:9e:2e:c1:
cd:de:9e:ab:3b:a2:ac:0c:e9:23:5e:ad:10:67:8d:32:48:2b:
66:38:eb:5b:b7:e3:a5:66:17:19:29:30:c4:f2:33:32:86:a4:
2e:ff:e8:59:05:96:d3:9b:04:8a:a8:a8:4f:6b:0e:90:b3:75:
52:a8:06:0e:87:06:72:11:1f:6b:35:da:44:2f:0f:42:98:3e:
a8:e7:98:f2:bc:35:30:8f:46:0a:c0:8c:01:c2:eb:1e:36:68:
90:12:05:1a:a4:2a:41:98:45:6b:2e:6f:b6:c0:df:c0:95:2e:
6f:83:48:20:8c:db:06:e3:a0:9e:51:16:3d:c3:0a:bf:88:f9:
db:25:67:ad:11:41:7e:01:39:49:cd:4d:20:51:7b:84:84:dd:
2d:ae:11:53:fb:5d:a1:1c:ed:ef:78:f5:b0:90:17:cb:5b:03:
ad:29:7a:a4:33:fa:98:62:41:4e:f1:3f:23:a6:2a:0c:13:d3:
a7:42:2e:24:26:8c:7b:66:be:f8:18:c8:28:81:e2:f6:41:ea:
c0:c6:c6:e7:5c:e6:5a:b4:d6:44:0e:f0:73:8a:ca:0b:04:a4:
d2:0a:55:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:07 2023 by rpki-client on console-ams.rpki-client.org