Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/rsyOTucLBdbiIc_pN5XelPvj9_M.roa
File: rsyOTucLBdbiIc_pN5XelPvj9_M.roa (raw, json)
Hash identifier: C2XpKE/DIv+ndyTtBXvjs3vYx5uqhFZw5/VIO8yBpow=
Subject key identifier: AE:CC:8E:4E:E7:0B:05:D6:E2:21:CF:E9:37:95:DE:94:FB:E3:F7:F3
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 078A0DEB
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/rsyOTucLBdbiIc_pN5XelPvj9_M.roa
Signing time: Sat 01 Jan 2022 01:56:08 +0000
ROA not before: Sat 01 Jan 2022 01:56:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61418
IP address blocks: 46.221.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126488043 (0x78a0deb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Jan 1 01:56:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aecc8e4ee70b05d6e221cfe93795de94fbe3f7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5c:f3:f0:0c:d8:0e:c7:ae:f4:85:52:3d:72:
8a:8d:f4:a4:bf:9f:b0:35:76:1e:98:ea:3a:ef:0a:
2d:c6:09:90:74:6b:97:9b:46:fb:b7:f4:ee:ef:b9:
e9:51:45:1b:4a:7b:be:b5:51:f9:43:88:b7:2c:91:
f3:77:88:b9:98:61:6c:ca:17:bd:59:c7:a1:c9:0a:
c5:b3:c1:55:fa:02:f4:88:88:c7:30:dc:25:d7:13:
34:9c:1a:23:ee:94:2f:da:67:8e:be:48:19:cf:80:
0f:34:73:75:34:1f:37:5a:4b:c5:35:44:dd:41:92:
68:46:f3:4d:2d:0c:f9:1c:4c:4a:9f:51:33:6d:25:
4f:c7:f4:55:eb:15:13:57:48:99:2a:88:b7:8c:21:
ab:5a:ef:64:1c:25:80:31:fb:aa:7c:01:ce:f9:51:
b2:de:da:e3:b7:20:a9:28:a8:54:bc:72:23:d3:3f:
c7:c1:77:68:f0:e0:1a:4a:50:c0:bf:ac:58:16:99:
c8:0d:7b:c1:be:34:9a:ca:c4:69:9c:d3:4c:c8:6f:
6a:fd:d1:71:ea:79:0c:f2:59:e2:ed:d8:53:e2:00:
24:a3:8f:d0:bc:c0:06:39:d5:1c:86:9b:05:75:39:
3a:f9:32:1e:e5:7a:2b:ac:03:91:b3:8f:f8:1a:1d:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CC:8E:4E:E7:0B:05:D6:E2:21:CF:E9:37:95:DE:94:FB:E3:F7:F3
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/rsyOTucLBdbiIc_pN5XelPvj9_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.221.18.0/24
Signature Algorithm: sha256WithRSAEncryption
45:2b:c3:01:78:ec:01:34:ac:0f:12:75:7a:c3:cb:86:81:11:
b6:ae:bd:b9:c7:60:d9:30:78:62:5f:c2:4a:57:64:3d:82:8b:
49:66:86:97:23:6f:90:32:bd:56:1a:dc:f3:96:4e:5a:75:d7:
9a:b8:d3:bd:cd:b4:e2:af:c9:69:8e:b7:96:9c:2d:a7:72:f4:
cc:9e:73:6c:83:3e:1e:3f:57:77:f2:4e:bd:30:93:23:1b:a6:
b9:f7:6e:b9:fa:a6:39:2c:ff:16:92:cf:3f:dc:89:f6:c8:59:
45:f1:0c:18:10:c4:4d:a2:5a:71:ea:ba:04:33:14:9b:67:3b:
95:21:c0:f3:60:18:79:05:96:68:7c:eb:b3:f2:3c:3f:b0:0e:
a5:74:ff:99:4b:b8:55:18:ad:76:60:79:45:f7:47:00:30:a2:
6f:0a:18:a6:6d:4e:6d:45:89:f2:7e:4e:80:6f:de:0c:3c:85:
25:45:b5:61:7c:78:36:a7:6a:1f:5f:13:26:de:a3:3d:28:e8:
71:79:ff:c0:ab:94:a1:33:1d:ec:87:a2:dc:32:0d:be:d6:84:
77:03:f6:16:d1:a8:2c:f8:8f:bc:04:c1:bf:17:cc:a1:09:e0:
7d:f6:18:b3:9d:a3:f7:db:83:be:4a:dc:de:d7:c5:73:0b:d6:
1d:10:99:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:10 2023 by rpki-client on console-ams.rpki-client.org