Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/czg3hdh7jitJICQIQE-GN01bqrY.roa
File: czg3hdh7jitJICQIQE-GN01bqrY.roa (raw, json)
Hash identifier: fBTG6WCWoE/yNck7Lvo7GmF0SzgE+4XkTLkWnA64c3w=
Subject key identifier: 73:38:37:85:D8:7B:8E:2B:49:20:24:08:40:4F:86:37:4D:5B:AA:B6
Certificate issuer: /CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Certificate serial: 01703B
Authority key identifier: 3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/czg3hdh7jitJICQIQE-GN01bqrY.roa
Signing time: Mon 07 Mar 2022 16:54:54 +0000
ROA not before: Mon 07 Mar 2022 16:54:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35562
IP address blocks: 46.174.240.0/21 maxlen: 21
195.189.248.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94267 (0x1703b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Validity
Not Before: Mar 7 16:54:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73383785d87b8e2b49202408404f86374d5baab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:53:5b:09:0c:1e:de:8a:7f:9b:f3:69:87:
1c:c1:fd:d7:15:14:05:5e:64:b8:29:3d:45:c6:8b:
2a:f6:6a:d9:28:64:4e:ea:74:68:b9:72:2a:f6:2f:
a0:4c:af:19:cb:de:dd:4b:bf:64:23:ef:90:e9:66:
34:3d:59:6b:b9:65:d6:ea:66:67:66:3d:c8:15:d8:
85:d0:71:2e:61:ae:51:57:bb:e4:fe:4b:bc:43:e8:
47:2a:f5:fb:9c:95:eb:69:5f:9e:b4:c3:56:03:55:
d5:44:4f:e0:57:ad:40:b6:1d:45:40:cf:9c:44:50:
a6:96:36:df:23:a8:6d:e5:af:d9:d2:69:38:5e:c0:
09:e7:ab:1d:6c:94:8b:62:31:42:37:14:58:37:ed:
af:df:aa:b8:5a:ea:4f:ca:c9:d3:e3:12:51:fd:2f:
e0:bd:31:6d:37:4c:f4:30:a1:00:e4:cd:e7:53:32:
9d:fe:a1:1a:94:c1:0d:bd:94:6a:a1:3b:20:cb:c3:
49:40:5b:6c:4f:5b:0d:30:36:4b:4e:3e:db:8d:e4:
73:31:a7:81:f0:cd:0c:56:14:53:c5:7c:11:b5:9b:
61:91:2e:6b:6e:a0:ed:c5:5b:fb:34:cb:eb:8f:a2:
9f:61:68:e2:03:03:a6:3f:3a:c9:58:76:c0:bd:05:
94:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:38:37:85:D8:7B:8E:2B:49:20:24:08:40:4F:86:37:4D:5B:AA:B6
X509v3 Authority Key Identifier:
keyid:3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/czg3hdh7jitJICQIQE-GN01bqrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.240.0/21
195.189.248.0/23
Signature Algorithm: sha256WithRSAEncryption
00:a2:96:1a:ae:67:60:5d:6d:5f:25:4f:9f:1f:c4:12:a0:e4:
e0:2b:e2:3b:c4:84:e1:30:a9:e0:c5:7b:0b:bb:be:dd:81:05:
0b:f5:ca:52:7f:e7:fb:31:fa:5c:ec:4b:28:b0:8d:ab:fd:67:
06:ed:da:45:7d:1f:ed:f4:d2:b0:96:10:88:2a:08:e0:13:a8:
e7:32:04:55:a9:f4:b2:c3:aa:e3:fb:4f:b1:e2:db:4b:8d:b3:
53:48:c6:a6:cc:d5:70:2a:06:e6:4d:33:b3:76:7a:a4:23:c1:
2f:45:4e:a9:ad:ce:a6:a7:0e:29:dd:b4:d9:70:55:26:60:ac:
b8:0f:9b:10:86:2e:ae:84:c9:6b:ee:f6:ff:78:c8:57:e4:cf:
84:c8:90:14:ab:59:01:fa:ee:0b:37:fb:ee:69:6b:6a:3d:88:
f4:5a:f7:36:14:5f:c1:21:f8:59:24:42:90:e9:35:8e:10:f6:
c8:56:44:f9:d9:6a:ff:ad:0d:a5:54:44:17:d2:55:66:84:e1:
08:0e:bb:06:76:75:4a:a3:64:a0:37:3f:f5:cf:61:6e:f5:9d:
45:0e:d6:bc:1f:69:e3:1e:d4:38:ab:25:0f:a5:33:45:8e:b5:
44:30:97:ff:f1:b0:52:06:25:b5:34:55:16:d6:13:1b:31:6b:
0f:e1:66:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:34 2025 by rpki-client