Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/YNgZg5mJaULkKR1To2olLhU73_k.roa
File: YNgZg5mJaULkKR1To2olLhU73_k.roa (raw, json)
Hash identifier: cwC3NHB7RNIiAAAILhKGFZNZq9P6F20/aO5vwCn9xXw=
Subject key identifier: 60:D8:19:83:99:89:69:42:E4:29:1D:53:A3:6A:25:2E:15:3B:DF:F9
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 1058E96F
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/YNgZg5mJaULkKR1To2olLhU73_k.roa
Signing time: Sat 01 Jan 2022 08:03:42 +0000
ROA not before: Sat 01 Jan 2022 08:03:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6660
IP address blocks: 46.190.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274262383 (0x1058e96f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Jan 1 08:03:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60d8198399896942e4291d53a36a252e153bdff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:11:3a:1b:ae:e2:4b:41:29:9c:d9:ac:59:
f2:34:9f:67:c4:56:02:50:9e:31:ec:21:9a:a5:59:
bc:63:74:58:87:d5:ac:31:b4:80:5a:bb:6e:61:10:
14:a0:ee:b6:2f:69:ea:cc:21:bc:1b:a1:9d:7b:ec:
b6:8f:42:a5:c3:6d:c3:83:e1:bb:6c:92:b5:c8:4e:
6d:fb:6e:a2:49:4c:07:15:08:46:f3:05:4c:c0:3a:
ac:dd:d9:a3:aa:88:df:45:8c:14:73:ba:cb:0a:d1:
92:76:da:2e:ab:34:05:2c:23:1c:c4:ff:07:75:44:
90:ae:96:7f:a6:61:a5:f8:9e:fe:b1:f4:2b:1a:ed:
93:ea:65:07:db:c8:82:b9:f8:d7:3c:96:9e:0e:92:
00:30:d7:a2:2e:99:bd:d1:fb:56:ca:b0:c2:33:32:
05:44:a1:7a:b1:ee:63:3c:d1:6e:8e:91:ad:9e:5a:
ba:6d:df:fb:45:8d:ce:e4:06:af:4e:b6:1b:ab:cd:
44:91:d2:be:55:7d:1f:25:44:b2:e9:21:29:82:26:
33:c9:41:d7:7b:63:3c:d4:5a:43:16:dc:73:c0:38:
9f:a0:4b:db:99:21:b0:26:3b:d7:f2:f0:c8:14:c6:
9e:7b:c5:34:ca:d9:d6:20:23:d8:b8:12:3b:ad:08:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D8:19:83:99:89:69:42:E4:29:1D:53:A3:6A:25:2E:15:3B:DF:F9
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/YNgZg5mJaULkKR1To2olLhU73_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.190.145.0/24
Signature Algorithm: sha256WithRSAEncryption
21:2c:c7:af:86:e6:18:b7:37:80:bc:35:71:51:15:66:74:33:
22:49:55:78:a3:9e:cf:fa:78:06:c9:01:5d:be:1d:f1:09:be:
78:b7:a4:43:d6:3f:0b:b2:53:0a:ea:69:43:ed:fd:35:fd:87:
6f:d8:86:0c:a5:f5:71:cd:98:e0:78:05:98:ad:b2:66:9f:50:
b7:f8:54:49:38:24:34:35:61:6f:fb:cf:99:f2:4e:fd:6b:10:
9e:81:5d:a7:eb:a0:d5:70:c0:9b:ca:ef:53:b6:b6:d3:50:38:
69:91:f0:fa:17:7f:f8:d3:1d:84:26:1b:07:ea:b9:5d:f3:d9:
35:5f:ff:7f:f5:47:9a:16:b9:15:9b:6b:6d:d4:14:b4:31:59:
7b:22:bd:83:26:49:51:af:ae:13:d6:fa:23:a9:2c:f8:d0:2f:
b7:37:22:79:5e:ba:7c:a0:50:d2:81:23:89:3c:22:ed:b6:86:
b0:a9:27:65:18:7d:48:6d:ce:dd:67:d3:fc:13:d1:fd:75:6b:
39:88:e2:5d:12:90:82:88:79:71:58:bc:85:d9:84:0c:4b:fe:
3d:55:05:f9:34:c9:34:f2:bf:1e:42:cd:12:9d:a2:ec:ee:bd:
b1:7a:61:0a:61:a1:21:b3:6e:06:db:77:e9:87:11:9c:5b:44:
d5:ee:43:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:33 2023 by rpki-client on console-fra.rpki-client.org