Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/yO7riObcFHybt64H-C6NoY5S7l4.roa
File: yO7riObcFHybt64H-C6NoY5S7l4.roa (raw, json)
Hash identifier: CAZ1FdT2RS8P41bmmy8RFoxjkZ6H114CB2+XxEVWudA=
Subject key identifier: C8:EE:EB:88:E6:DC:14:7C:9B:B7:AE:07:F8:2E:8D:A1:8E:52:EE:5E
Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial: 0945A5AD
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/yO7riObcFHybt64H-C6NoY5S7l4.roa
Signing time: Sat 01 Jan 2022 12:56:12 +0000
ROA not before: Sat 01 Jan 2022 12:56:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49101
IP address blocks: 46.36.32.0/19 maxlen: 24
2a02:25b0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155559341 (0x945a5ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Validity
Not Before: Jan 1 12:56:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8eeeb88e6dc147c9bb7ae07f82e8da18e52ee5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:64:11:f0:fe:5c:19:d5:b3:d4:07:3b:b9:
55:e2:59:d2:6a:d4:da:5b:65:8e:10:28:47:36:8a:
81:e5:c7:23:77:8e:f7:8a:9a:b6:01:61:4c:9b:47:
1e:07:76:44:e4:47:ab:c8:45:63:64:18:c6:65:7c:
02:38:83:6b:63:a5:95:21:7c:aa:a8:fe:26:13:d1:
13:c8:1d:ff:ac:3e:60:e4:b8:23:f1:84:fc:71:e4:
14:03:ed:e8:7b:10:98:26:b7:51:7a:3d:dc:29:7e:
d0:3c:4b:2e:71:92:20:c2:49:86:03:52:24:f1:9b:
6d:2d:89:bc:ba:18:6b:a2:b9:66:21:66:03:85:65:
f0:81:b8:8f:7d:e5:46:c8:b0:5a:4f:e4:79:86:ac:
dd:7b:27:7b:d0:2b:a3:e5:45:ec:9e:fb:ed:bc:1e:
ff:9c:39:ea:71:f2:ac:88:6e:27:36:0e:e7:07:03:
77:4a:65:ef:64:37:af:db:3b:d4:67:79:2e:ce:a8:
5e:62:3a:05:72:27:0a:f0:85:fa:3e:77:5e:8e:91:
b7:c4:24:f2:d5:c0:af:9a:4a:83:cb:67:98:c2:ef:
b5:85:e7:20:29:98:03:df:f8:80:a7:e8:ca:26:4b:
86:50:23:56:6a:46:59:68:9e:0e:13:c0:36:1f:d3:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EE:EB:88:E6:DC:14:7C:9B:B7:AE:07:F8:2E:8D:A1:8E:52:EE:5E
X509v3 Authority Key Identifier:
keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/yO7riObcFHybt64H-C6NoY5S7l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.32.0/19
IPv6:
2a02:25b0::/32
Signature Algorithm: sha256WithRSAEncryption
cc:e8:44:dd:e2:80:a3:29:15:57:8b:13:5a:43:4e:de:1a:ce:
34:92:04:43:da:ff:82:83:f2:5a:d0:98:c0:79:b9:cf:22:f3:
60:4c:03:77:52:5a:a6:42:f4:1e:a8:11:3a:07:0a:99:94:35:
6a:a1:82:d3:09:45:86:8b:79:06:c0:c5:ce:9f:df:2c:bf:45:
9f:33:77:54:06:61:0f:30:68:33:c8:5a:9a:ba:19:8b:ee:c2:
bb:7c:f2:40:4c:77:d5:0e:fa:10:ac:94:9d:bc:c9:0a:d5:f0:
9e:fc:26:3c:be:1d:7f:0f:25:2d:5e:21:e3:fe:c6:ec:e3:38:
cb:c9:f0:58:ff:c1:61:70:e7:27:b3:99:4e:d8:fa:6b:36:21:
64:1b:f0:88:9a:19:4f:39:69:d3:69:b5:48:9a:13:10:9f:f5:
47:ef:a8:33:6f:be:b6:46:c3:1e:ac:33:cc:69:f6:2a:59:38:
e1:09:88:6d:cd:29:cf:3a:22:51:48:a7:ac:06:40:5c:f5:72:
c5:89:49:a4:12:e9:b4:fb:10:5f:41:c2:4c:73:08:4f:f6:b5:
6b:28:12:b4:e3:08:3a:f3:7d:33:1a:17:52:ce:35:44:bd:a4:
45:14:98:7a:2c:26:aa:71:d3:10:e8:c8:e6:9a:2b:d8:2f:90:
60:42:8c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:25 2024 by rpki-client on console-ams.rpki-client.org