Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/ILQl1R7-xQ1tCb0PPsGQxH5gHL0.roa
File: ILQl1R7-xQ1tCb0PPsGQxH5gHL0.roa (raw, json)
Hash identifier: gOINwJy0z3CECKmN/YOhp5RbLTqQd6Ndu7pEk+6m2pw=
Subject key identifier: 20:B4:25:D5:1E:FE:C5:0D:6D:09:BD:0F:3E:C1:90:C4:7E:60:1C:BD
Certificate issuer: /CN=733bda0008dfb5a2eb4e2a56902448fed940d59f
Certificate serial: 01843D4C21137493CCCC905F2D6017A0F710
Authority key identifier: 73:3B:DA:00:08:DF:B5:A2:EB:4E:2A:56:90:24:48:FE:D9:40:D5:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czvaAAjftaLrTipWkCRI_tlA1Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/ILQl1R7-xQ1tCb0PPsGQxH5gHL0.roa
Signing time: Thu 03 Nov 2022 11:41:50 +0000
ROA not before: Thu 03 Nov 2022 11:41:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 212.46.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3d:4c:21:13:74:93:cc:cc:90:5f:2d:60:17:a0:f7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733bda0008dfb5a2eb4e2a56902448fed940d59f
Validity
Not Before: Nov 3 11:41:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20b425d51efec50d6d09bd0f3ec190c47e601cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:1b:b6:69:e0:25:e5:52:68:53:9e:45:2e:
d5:b8:ad:b4:74:e5:fc:7c:4e:84:01:e0:93:00:c1:
78:47:8d:a3:c1:35:9b:b5:c2:1b:d1:ec:0a:fa:16:
11:c7:5a:a6:a6:96:05:5b:fd:8c:21:27:32:81:4a:
3c:6e:49:8e:f0:fa:fc:bc:b1:60:49:0c:96:9a:2a:
66:74:25:d2:9c:35:76:4e:2f:e2:32:f8:fb:d9:da:
68:7c:47:87:26:e4:da:8f:93:cf:e4:47:17:ed:01:
a1:8e:4d:4a:cf:46:39:c2:1d:de:60:30:b7:70:02:
6b:80:be:b2:bf:16:d6:aa:9b:31:ed:7d:3c:8a:d6:
ea:13:6e:b2:e9:4d:22:ff:74:51:34:2d:4d:b0:46:
be:d0:06:59:ba:3c:b6:f0:ad:56:7c:84:f9:3f:f0:
7b:96:b0:27:f5:dd:78:6e:ea:13:44:f4:7b:90:a4:
1c:76:93:7b:6c:57:2b:a6:66:a4:77:77:8c:1d:54:
ca:5c:9d:a6:21:2b:e0:90:f3:89:2e:06:e5:1a:50:
9b:29:ad:96:d0:4a:a6:ad:27:a2:b0:c1:4e:58:2c:
ff:32:ec:90:a9:41:b0:18:49:c2:f4:2f:42:11:54:
d5:e1:ff:85:36:5f:7f:f7:82:29:e3:36:5e:27:a1:
73:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B4:25:D5:1E:FE:C5:0D:6D:09:BD:0F:3E:C1:90:C4:7E:60:1C:BD
X509v3 Authority Key Identifier:
keyid:73:3B:DA:00:08:DF:B5:A2:EB:4E:2A:56:90:24:48:FE:D9:40:D5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czvaAAjftaLrTipWkCRI_tlA1Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/ILQl1R7-xQ1tCb0PPsGQxH5gHL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/czvaAAjftaLrTipWkCRI_tlA1Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.33.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:cb:68:d6:52:c3:9a:28:60:f8:e9:3e:a0:27:07:c0:ea:d8:
4c:6b:c6:6c:fd:92:fc:9c:db:2a:60:b4:7e:7b:47:e5:68:13:
91:32:6e:9c:f7:44:7f:4f:74:3c:05:34:6d:2f:a4:8e:94:73:
8d:fb:70:6b:48:3c:02:f8:ec:ba:c1:e7:52:5c:65:1c:07:ec:
26:df:af:37:f5:97:5a:12:60:2a:db:0f:5f:d1:62:ed:f3:3d:
04:d0:c4:0a:6c:1d:d0:37:07:00:fd:16:a6:57:5c:46:55:eb:
3b:9d:4f:3b:31:e7:47:71:af:34:02:ba:6e:f3:d4:3e:c9:ac:
2a:32:6f:ad:6b:3b:78:a6:f6:32:ef:82:4c:76:d7:a7:a0:f8:
8c:6d:64:b0:b9:98:04:c2:ef:c5:90:e2:c2:d6:0c:26:9b:9f:
89:43:f0:be:f6:53:64:6f:39:13:e8:44:ff:1c:4e:1a:70:20:
9a:27:ad:47:8b:85:e7:15:27:52:ef:a4:0c:0f:82:76:1a:6a:
60:5c:dc:3d:b5:28:85:99:fe:41:8d:e4:bf:ae:f7:d6:be:a2:
4c:91:c9:21:c4:20:9e:69:d3:72:cd:00:24:bd:cd:1e:9d:fe:
57:03:07:48:3d:b0:b7:a1:37:0d:7e:19:4b:ac:01:7b:0e:96:
d1:1d:95:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:10 2023 by rpki-client on console-fra.rpki-client.org