Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/Jgb6OiTMR0Kbi7ep9qvLoH49DU4.roa
File: Jgb6OiTMR0Kbi7ep9qvLoH49DU4.roa (raw, json)
Hash identifier: fpMwQcWOYfAOe/Q14B88QrMXqgrT+QTFuXA6Mhh8yCg=
Subject key identifier: 26:06:FA:3A:24:CC:47:42:9B:8B:B7:A9:F6:AB:CB:A0:7E:3D:0D:4E
Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial: 0183AD05F98E0A57C1C6F742BE77F271222A
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/Jgb6OiTMR0Kbi7ep9qvLoH49DU4.roa
Signing time: Thu 06 Oct 2022 11:19:53 +0000
ROA not before: Thu 06 Oct 2022 11:19:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60131
IP address blocks: 185.52.176.0/22 maxlen: 22
46.23.80.0/20 maxlen: 20
2a03:6000::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ad:05:f9:8e:0a:57:c1:c6:f7:42:be:77:f2:71:22:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Validity
Not Before: Oct 6 11:19:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2606fa3a24cc47429b8bb7a9f6abcba07e3d0d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:f3:5e:6b:ea:b6:38:cf:ba:df:3d:13:87:
a7:5c:0b:f1:9f:f6:3b:20:20:bf:82:41:30:73:7e:
b7:45:0d:e3:2a:47:fd:45:5e:a7:ae:96:4f:d7:f6:
23:25:38:75:6d:fb:c9:6a:48:15:7d:4a:95:f4:4e:
64:84:61:60:76:2b:d0:ac:ad:b5:a9:81:50:bf:ee:
be:81:c7:53:07:c3:b8:57:eb:e1:b5:93:2c:15:3d:
6a:64:71:2d:17:69:a7:be:b8:99:c2:b6:01:e5:24:
8e:8a:41:d8:06:65:75:6b:ff:16:f7:8f:b3:0c:d6:
a6:66:2f:6d:de:be:a3:36:b5:bd:6d:2c:f7:ae:f0:
e7:11:76:d8:a2:11:03:3c:2b:d3:61:57:da:8e:b8:
8e:a5:b8:15:a5:fa:4e:81:31:14:95:2c:60:c1:75:
86:2f:2f:3f:2a:76:17:20:c9:ed:ad:dc:3e:e8:c8:
28:bc:4a:a2:b9:96:7e:26:1f:2d:0e:d1:ad:11:ee:
fb:89:61:5a:6d:3c:52:74:30:70:de:a6:f7:12:08:
46:19:38:6f:c8:23:e6:6c:8a:ab:e2:78:6f:2c:e9:
3e:06:30:30:ae:1c:91:b2:42:88:7d:3d:3a:98:22:
46:ea:e4:57:35:90:41:e4:c8:1d:aa:fe:53:be:79:
2f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:06:FA:3A:24:CC:47:42:9B:8B:B7:A9:F6:AB:CB:A0:7E:3D:0D:4E
X509v3 Authority Key Identifier:
keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/Jgb6OiTMR0Kbi7ep9qvLoH49DU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.80.0/20
185.52.176.0/22
IPv6:
2a03:6000::/29
Signature Algorithm: sha256WithRSAEncryption
61:06:5e:ad:00:e2:1a:d7:c7:78:ab:2f:5b:55:40:72:2b:1a:
57:80:d5:e8:22:b1:8a:14:6c:6e:0b:37:97:82:7c:1c:f9:a8:
41:f7:2e:56:21:74:ea:f1:fb:c6:59:c5:e7:ea:56:b4:08:75:
26:f4:44:04:1b:0b:ca:e2:82:bf:c2:cf:33:b4:3e:33:c8:94:
52:cf:50:5b:67:83:17:1b:3c:98:b3:b7:69:52:e3:7c:e9:79:
99:18:63:a1:f6:d8:1b:00:44:9a:40:cf:63:3e:03:fb:b8:c8:
4a:f9:f2:47:cf:f6:15:62:f5:05:0c:21:76:37:6b:4f:8c:2d:
d9:a8:10:ee:fc:9d:15:6d:8a:f8:2f:b3:d5:35:e5:1d:51:c4:
65:e1:80:35:b5:f3:50:8b:15:f6:71:69:b1:5d:ad:68:4e:c8:
b5:46:5e:6a:ae:59:9c:92:02:68:cc:12:95:15:14:a4:dd:ef:
e8:3c:33:c8:95:b5:2e:d6:16:cc:13:d5:5f:2c:36:0b:c4:30:
6d:b0:9e:20:59:fa:ba:2c:e2:8d:73:03:31:6c:13:ca:45:fe:
1c:29:1c:d6:f0:64:72:ba:c9:78:df:9b:61:94:6e:ab:76:7e:
49:cb:4a:95:4f:4a:79:98:16:66:50:b3:79:b2:37:3f:09:c7:
90:12:32:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:39 2023 by rpki-client on console-ams.rpki-client.org