Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/DTCVaeH0ZwH_3jmn02IAke-7xGs.roa
File: DTCVaeH0ZwH_3jmn02IAke-7xGs.roa (raw, json)
Hash identifier: BIVjSbyGY7PRp0q9ozjyORQllrO5xi7M/lLPmUdLJXA=
Subject key identifier: 0D:30:95:69:E1:F4:67:01:FF:DE:39:A7:D3:62:00:91:EF:BB:C4:6B
Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial: 020337B9
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/DTCVaeH0ZwH_3jmn02IAke-7xGs.roa
Signing time: Sat 01 Jan 2022 03:59:43 +0000
ROA not before: Sat 01 Jan 2022 03:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208531
IP address blocks: 46.172.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33765305 (0x20337b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
Validity
Not Before: Jan 1 03:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d309569e1f46701ffde39a7d3620091efbbc46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1f:7d:c6:43:58:fe:95:81:6d:ee:36:b6:42:
5d:79:09:8c:e4:c3:cd:7c:e6:61:60:ce:c1:ba:29:
37:ac:db:f5:d1:9d:d9:31:79:dc:d9:ff:23:0c:8f:
49:74:77:7c:92:58:98:00:26:16:71:b7:0a:1a:58:
3d:76:d6:b4:24:dc:45:88:61:a4:70:d4:1b:3b:5f:
76:c9:76:2a:7d:9a:3b:ed:8c:96:5f:54:52:f5:f4:
a6:de:0f:69:e7:4d:29:9f:ef:95:b7:63:69:49:6d:
53:c4:db:3a:07:ea:53:bd:e4:e8:e1:3b:d0:57:74:
d1:45:6e:34:da:8b:48:1b:40:3e:63:4e:86:09:5b:
ab:07:b4:91:05:40:a4:26:eb:80:cf:77:3d:ff:9f:
e1:71:90:e4:19:19:74:b8:30:7e:84:b3:f3:0e:21:
17:cf:7e:15:c5:0e:6f:b1:a2:27:c9:81:f1:83:a2:
03:02:1b:a1:29:38:aa:e5:a8:45:e4:ef:e7:d1:ba:
f1:4e:a0:e5:51:f6:96:d3:e5:5b:57:3f:49:d1:d2:
c7:7a:a8:9b:66:57:83:71:76:a5:13:ad:c9:50:64:
13:26:70:6a:e7:8a:c3:bf:99:ee:47:0c:56:bd:51:
1b:a3:88:f0:0a:79:74:e1:f2:a1:66:b2:e5:c5:7b:
4e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:30:95:69:E1:F4:67:01:FF:DE:39:A7:D3:62:00:91:EF:BB:C4:6B
X509v3 Authority Key Identifier:
keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/DTCVaeH0ZwH_3jmn02IAke-7xGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.74.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:13:62:6f:f8:e2:b7:e7:dc:e6:b1:96:1b:44:fd:75:6d:d1:
71:22:4e:7d:63:86:77:7c:48:84:56:f7:52:c0:47:1a:c5:3f:
c3:f2:a5:2e:d6:d8:e3:9f:3a:85:ae:2a:f1:18:7e:bd:e4:67:
a9:f3:5a:0b:c9:ec:57:a5:60:fa:c1:0b:14:13:e3:66:84:bd:
10:ed:25:e0:d6:97:00:39:44:29:2e:9c:90:f6:00:66:58:72:
8c:7e:b0:43:27:2e:e6:39:0d:e4:a3:10:3a:5a:b2:67:72:f7:
f4:8f:dc:26:9b:ab:ec:9c:33:85:62:88:cf:80:36:77:cc:98:
56:65:94:5a:7e:35:64:1c:ce:7f:1e:41:fb:04:20:97:c4:55:
6f:69:2a:10:d7:1e:f1:40:47:10:ab:82:99:2d:1e:b7:8b:73:
36:2e:d4:d7:59:0e:fc:a9:01:3e:a0:8b:6b:51:74:4f:b3:81:
28:01:40:03:b3:6b:ee:d4:2c:cf:8c:8e:9a:80:aa:45:65:ab:
7b:c3:40:43:2c:ae:2e:c2:95:61:59:27:23:8c:ad:74:06:73:
0e:6f:fe:75:fe:af:73:a4:af:d0:20:c9:8b:9d:4f:5a:c6:d9:
21:03:81:f4:a1:e0:12:85:66:62:56:5c:40:74:40:ae:15:7d:
de:ce:a9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:48 2023 by rpki-client on console-fra.rpki-client.org