Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/n1leXQc5sCGm27QIBGeFlOXOTSo.roa
File: n1leXQc5sCGm27QIBGeFlOXOTSo.roa (raw, json)
Hash identifier: vHnjufM54W7o+dCxkTTCcthof44yjNvjS5Un/rBVe0g=
Subject key identifier: 9F:59:5E:5D:07:39:B0:21:A6:DB:B4:08:04:67:85:94:E5:CE:4D:2A
Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial: 1855DB3E
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/n1leXQc5sCGm27QIBGeFlOXOTSo.roa
Signing time: Sat 01 Jan 2022 15:59:30 +0000
ROA not before: Sat 01 Jan 2022 15:59:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206804
IP address blocks: 46.246.1.0/24 maxlen: 24
178.73.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408279870 (0x1855db3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
Validity
Not Before: Jan 1 15:59:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f595e5d0739b021a6dbb40804678594e5ce4d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:29:a9:e2:f6:e7:c5:a2:c6:3c:0e:2c:f3:b0:
4c:9f:ea:c1:b4:54:48:b8:b2:8f:4e:9a:b1:21:8a:
a2:09:d4:a8:9e:e4:fe:56:a7:12:04:3b:c5:d8:70:
1c:73:e5:7e:d1:84:8d:2d:bb:7e:04:52:30:be:a3:
fa:6f:73:d3:2d:23:05:6a:14:07:08:4d:6a:d4:7a:
93:e2:c5:ca:49:81:0b:70:00:4a:60:c7:ba:7f:10:
d8:38:47:76:f0:15:47:be:6b:2a:44:a9:21:ef:2c:
ed:11:f5:3f:cf:22:82:0a:0b:97:3e:75:e8:ea:dd:
be:be:ba:74:fa:87:11:05:3c:c1:a3:ad:d5:51:85:
50:a1:e7:c3:fa:37:bd:88:c5:02:11:66:8f:3c:b2:
7b:4a:21:fc:56:62:c2:c5:93:82:b4:4b:bf:06:25:
ff:df:7a:86:5d:4e:04:5e:e2:77:bf:ca:ac:e1:7c:
d0:85:91:b8:75:99:8f:05:1f:98:a2:b4:72:91:a8:
e8:cc:f5:3f:8e:5b:40:90:74:1d:88:3a:1f:09:91:
ca:71:e1:7a:28:4d:75:3e:3e:da:da:ba:ca:50:99:
37:97:65:1a:7d:0f:b2:88:cf:67:f5:2f:6f:c1:9e:
d7:1a:b9:f5:32:51:e4:bf:84:45:78:ff:31:94:81:
de:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:59:5E:5D:07:39:B0:21:A6:DB:B4:08:04:67:85:94:E5:CE:4D:2A
X509v3 Authority Key Identifier:
keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/n1leXQc5sCGm27QIBGeFlOXOTSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.246.1.0/24
178.73.220.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ca:cc:5b:0e:9d:51:e0:89:33:60:c7:86:a5:68:56:6f:5a:
12:e6:43:08:2d:e0:03:e1:c2:7d:f8:58:6a:6d:03:ad:22:e3:
24:93:6a:20:62:c2:7a:78:ae:af:b2:31:f7:f9:34:06:f0:61:
7b:c1:1d:a8:f8:ae:54:f2:e1:b0:18:47:b5:1c:b5:7e:19:58:
23:10:c1:94:ff:31:58:84:59:9e:23:c0:30:78:34:90:3b:9e:
37:34:98:ae:9f:e8:17:16:79:2a:b4:5f:51:c4:9b:f3:e4:3d:
bc:a4:9c:47:1b:a8:44:b0:b5:b9:4a:13:51:7b:61:87:b2:aa:
18:f7:c8:f4:51:f5:30:30:ca:e0:00:0e:cd:f6:5c:1a:04:b5:
e5:63:6d:ea:c9:82:c0:69:6a:e6:09:5b:38:fa:b8:43:0d:68:
6d:f6:25:26:46:d0:18:98:2f:90:c5:13:65:21:73:06:85:bb:
88:e1:f6:f9:be:d1:f9:30:8d:44:98:e6:97:f9:06:8e:9e:e3:
79:31:36:d4:b7:31:b5:d4:12:43:22:6c:96:bc:e8:98:98:32:
79:05:5f:42:a4:18:b4:cb:cf:e7:d3:ec:f1:99:2f:69:92:e4:
33:4d:88:67:ec:71:43:07:21:f1:3a:35:f2:83:5f:a2:a6:84:
94:a0:45:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:38 2023 by rpki-client on console-fra.rpki-client.org