Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/KvG2kOMasf-UYgKGsnYXOYUi4Wk.roa
File: KvG2kOMasf-UYgKGsnYXOYUi4Wk.roa (raw, json)
Hash identifier: kcQ9ueFJezPulLUuehfXX7plfz3iQtLIo8ZeUD2oag8=
Subject key identifier: 2A:F1:B6:90:E3:1A:B1:FF:94:62:02:86:B2:76:17:39:85:22:E1:69
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 03E17A7F
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/KvG2kOMasf-UYgKGsnYXOYUi4Wk.roa
Signing time: Sat 01 Jan 2022 15:58:10 +0000
ROA not before: Sat 01 Jan 2022 15:58:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51764
IP address blocks: 46.31.0.0/21 maxlen: 24
46.31.6.0/24 maxlen: 24
91.102.200.0/21 maxlen: 24
91.102.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65108607 (0x3e17a7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Jan 1 15:58:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2af1b690e31ab1ff94620286b27617398522e169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:a8:e1:d8:01:12:7a:22:f2:3d:ee:d2:85:
5e:8c:fb:38:de:05:0d:b5:ac:58:1b:ba:1d:3f:9f:
7f:78:3e:52:c1:06:e1:ce:50:49:aa:36:5b:6f:52:
c2:6c:c8:c9:3e:81:d0:97:84:1c:e1:60:81:5b:86:
77:4e:6a:4a:52:00:84:a2:42:b2:19:27:69:6e:8e:
8a:f4:4e:86:a7:e2:f8:03:f5:b2:db:b0:4c:77:4f:
55:ee:fa:9a:9c:6e:75:d2:bd:23:de:08:47:06:07:
9f:06:b0:18:ee:e5:65:97:6e:fa:d7:02:7a:fb:94:
d7:51:fc:f6:4d:e3:9e:40:ff:19:1c:22:da:35:0f:
2b:9b:d5:b1:f6:04:ec:2f:aa:1c:32:69:d3:de:aa:
e4:7b:bf:93:80:7f:e7:10:6b:b4:a0:26:7a:cb:80:
15:15:2b:3e:36:7e:e7:a7:cb:78:6a:8a:31:81:c9:
e4:7b:a4:8d:af:bc:f2:a4:dd:e0:12:c2:22:cc:c6:
c8:5a:b7:06:f2:72:4c:87:f4:e2:51:4f:94:1e:e7:
f9:34:d2:cb:73:79:c3:cb:3d:ee:d8:31:1b:59:f4:
bd:1a:8b:1a:9d:2e:15:e3:dd:f8:c0:b1:3d:ed:ae:
4c:0f:7c:a4:20:c2:bb:73:d0:50:2d:63:9e:a0:a3:
85:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F1:B6:90:E3:1A:B1:FF:94:62:02:86:B2:76:17:39:85:22:E1:69
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/KvG2kOMasf-UYgKGsnYXOYUi4Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.0.0/21
91.102.200.0/21
Signature Algorithm: sha256WithRSAEncryption
b7:97:d7:65:eb:36:01:07:34:45:f4:dc:4c:73:b7:b7:bc:54:
1d:ac:30:38:40:02:45:cb:6b:7b:9a:80:b0:56:5b:c8:ef:2e:
09:ab:87:57:d7:61:ad:de:5f:fb:1d:92:89:54:a9:1c:47:e1:
3e:06:0d:a8:4b:a4:7e:88:24:a3:64:a9:4a:e9:a8:11:b4:00:
09:66:76:96:c6:b4:03:8b:2b:d1:6f:90:ac:d7:70:0a:8a:3f:
67:06:a2:50:45:27:bb:5e:4f:0a:31:fc:06:91:96:57:58:4c:
96:d2:7e:f1:0b:5e:44:3d:e3:b7:e6:27:05:32:e0:5f:3b:86:
c6:73:36:57:2e:b6:46:9f:af:20:8b:bc:b6:79:91:4b:14:6c:
6b:96:4c:bc:ad:c5:5e:b2:c6:61:00:1c:78:f7:c5:35:15:1d:
fa:82:7a:b0:ce:51:d4:52:d2:18:86:2b:14:fc:9e:d2:40:3a:
03:cf:0b:56:b8:35:c5:8e:42:06:8e:1e:68:16:80:bd:1d:c8:
84:9d:15:d4:71:e8:27:ff:4e:0a:93:29:c7:e7:f7:13:b8:fe:
29:92:13:4a:24:06:b7:7f:7f:6f:28:3a:de:57:eb:fd:63:38:
f4:98:a9:82:0d:ce:80:ff:eb:86:97:f4:e2:16:ec:5a:6d:ab:
c5:6a:3d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:31 2023 by rpki-client on console-ams.rpki-client.org