Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/nv1nnUbEC7uEeurTrgQVJ4kizU4.roa
File: nv1nnUbEC7uEeurTrgQVJ4kizU4.roa (raw, json)
Hash identifier: w8myR13wWFgRxysaxZMrB7C5emstoW25f7E/Aq36PqY=
Subject key identifier: 9E:FD:67:9D:46:C4:0B:BB:84:7A:EA:D3:AE:04:15:27:89:22:CD:4E
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3AF630C7
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/nv1nnUbEC7uEeurTrgQVJ4kizU4.roa
Signing time: Wed 23 Feb 2022 15:11:35 +0000
ROA not before: Wed 23 Feb 2022 15:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204393
IP address blocks: 46.209.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 989212871 (0x3af630c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Feb 23 15:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9efd679d46c40bbb847aead3ae0415278922cd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:a2:d0:5b:0a:5e:3f:51:9f:9c:cb:fc:b9:
69:1e:c9:29:ea:e0:be:1b:8e:9e:ac:60:08:b1:fd:
80:af:63:bf:2e:4b:61:0b:4a:9d:51:80:93:a8:fa:
63:3c:20:8e:a1:7f:d6:1e:b3:66:b9:c5:8b:8d:d5:
38:67:eb:0b:d4:40:a8:dc:96:04:65:b6:75:45:74:
35:dc:b1:9f:b8:7d:06:68:be:3f:7c:00:72:7e:31:
7d:86:32:99:c7:59:a4:27:63:d3:b3:8a:df:78:46:
4c:33:9e:e4:e4:2a:ae:d8:0b:de:28:8b:af:9f:a4:
43:12:46:fc:85:4e:f3:78:3c:de:80:0d:97:ed:65:
56:68:66:c2:24:db:4f:6e:4c:f3:1b:1b:69:1f:bf:
62:0a:91:98:0f:10:07:89:27:83:6a:e1:a2:5f:a1:
1e:a4:52:90:55:a1:6c:28:df:10:da:7b:ba:c8:03:
ab:49:d4:74:c1:ff:78:01:d1:ea:c3:b3:b4:e2:d1:
e9:b2:57:e3:2c:ee:fd:20:83:ea:3a:6d:56:02:a0:
99:27:79:84:b1:3d:24:27:0b:ef:46:2e:20:0f:c9:
a4:a9:a5:bf:b7:87:90:ec:a4:3b:da:dd:14:80:7d:
b0:23:98:52:f6:dc:05:bb:d1:69:2f:ac:5d:60:3e:
8a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FD:67:9D:46:C4:0B:BB:84:7A:EA:D3:AE:04:15:27:89:22:CD:4E
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/nv1nnUbEC7uEeurTrgQVJ4kizU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.209.242.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f4:9c:05:26:9b:e7:ce:ff:83:84:75:d0:64:99:9b:2f:fc:
04:5a:3c:ba:dc:92:3f:fe:8c:89:f8:1a:a3:82:7f:ed:8d:df:
69:91:6b:15:78:13:00:2f:9b:46:a7:56:2a:31:ec:ed:47:da:
a8:9a:6d:7d:a2:c6:a2:20:d8:13:fd:f3:b4:c3:f1:a9:04:4e:
8e:c3:0c:4a:af:f5:04:da:91:10:f4:ee:5b:0d:d4:a6:86:eb:
87:c8:d6:55:96:7a:96:2a:26:60:d0:9e:8d:04:5f:3b:eb:1f:
cf:ce:66:9b:3b:75:95:85:45:36:34:1f:bb:9e:7b:3b:29:be:
7c:4b:ec:c9:82:13:39:62:db:e3:1a:9e:4e:83:76:4f:ef:38:
45:2f:98:71:60:87:15:a8:75:ef:8c:f7:6a:9f:41:16:1a:a4:
69:4d:46:b8:24:87:f2:71:0f:b9:06:b9:fd:fe:48:2c:04:f9:
da:ef:37:20:fb:37:cd:a2:f1:ea:63:68:eb:15:5c:0c:8a:25:
78:af:47:44:a4:3f:97:4e:f1:8f:ea:69:63:a9:75:80:64:b7:
eb:42:99:0c:1c:f1:a5:c9:49:ec:ad:25:1b:1b:60:84:c6:5b:
3b:90:3c:92:9e:f3:5d:bb:b1:63:37:0e:69:8b:3d:a2:31:b6:
36:ee:0d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:31 2024 by rpki-client on console-fra.rpki-client.org