Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/F47LMd7qb5v95z4YRulTSRAK5vo.roa
File: F47LMd7qb5v95z4YRulTSRAK5vo.roa (raw, json)
Hash identifier: SHroIgrPiut0soOTY84v7ohpvbM6Jvin0gtGrOrWkvM=
Subject key identifier: 17:8E:CB:31:DE:EA:6F:9B:FD:E7:3E:18:46:E9:53:49:10:0A:E6:FA
Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial: 0202484A
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/F47LMd7qb5v95z4YRulTSRAK5vo.roa
Signing time: Sat 01 Jan 2022 03:59:43 +0000
ROA not before: Sat 01 Jan 2022 03:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205753
IP address blocks: 46.172.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33704010 (0x202484a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
Validity
Not Before: Jan 1 03:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=178ecb31deea6f9bfde73e1846e95349100ae6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:90:7b:9b:d7:d0:01:b9:9e:d9:db:ba:e6:
6a:ce:9f:ca:f9:1b:b0:80:49:62:5c:78:90:5c:da:
94:7a:73:47:79:1e:d6:fc:70:54:6f:06:62:a3:78:
12:0e:f7:88:5f:02:ee:8e:c6:95:67:6f:c4:2a:f2:
86:94:41:bc:22:69:01:85:89:8f:72:90:21:9b:4e:
dc:e7:ba:df:67:b0:a2:05:20:d0:6f:d9:fd:5a:d6:
4f:08:9b:25:80:e3:b3:68:8e:a8:81:42:3d:ac:a3:
8f:f5:1f:e7:61:a9:e0:fe:44:27:45:98:ca:c8:07:
83:0a:21:26:28:c0:76:95:6b:4e:52:9f:73:2e:7d:
56:24:e0:2c:2d:34:79:8b:03:a0:d7:be:53:1f:62:
6d:c1:b6:d8:c0:67:5d:2e:3d:22:05:50:89:8e:28:
b2:36:54:14:e0:3d:c5:3a:68:9e:e1:ec:d2:3d:33:
f7:fb:b1:fe:75:4a:47:82:0f:0c:a4:b4:be:3f:29:
b4:02:85:f7:55:3f:bc:c2:6f:d1:e6:ca:2d:65:fb:
05:db:05:8f:1d:87:c1:fb:11:fe:2d:0a:ec:82:c5:
19:30:fc:20:93:81:74:fa:3a:14:10:0f:cb:6b:56:
eb:06:25:cd:a9:a6:02:8e:cf:6d:b0:45:5a:39:20:
5e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8E:CB:31:DE:EA:6F:9B:FD:E7:3E:18:46:E9:53:49:10:0A:E6:FA
X509v3 Authority Key Identifier:
keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/F47LMd7qb5v95z4YRulTSRAK5vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.76.0/24
Signature Algorithm: sha256WithRSAEncryption
44:37:dc:e2:51:38:58:53:bf:c0:84:7b:cb:79:2e:19:d8:e1:
2f:2b:e7:12:70:12:b1:cd:29:13:e1:01:0a:f4:46:af:81:6e:
bb:27:77:67:d7:fc:98:9a:ec:1a:e6:64:37:79:9d:af:de:21:
1e:3e:f2:76:4a:79:3a:84:e4:0c:7c:d0:64:58:ec:64:8b:ae:
2c:70:c6:4c:ca:ac:16:aa:a1:06:29:ce:89:65:38:df:5a:bd:
9a:c9:ae:a3:e1:be:36:85:30:bc:23:c2:a4:8d:1e:e8:f3:6f:
13:1e:c0:3e:5c:db:b6:48:aa:3b:7e:91:c8:d6:18:d0:55:75:
25:77:e2:72:f1:2b:d8:79:52:0b:79:32:c7:5b:3f:f8:0d:03:
9b:4a:71:bc:ba:0b:94:e8:03:c4:a5:a4:c6:7e:3d:d2:42:b7:
d9:09:85:6a:81:2a:b0:0c:c6:4e:27:e6:5c:c7:c8:c2:f5:c9:
0d:37:78:be:19:3e:21:3a:28:95:8f:13:37:1e:ee:52:85:bb:
15:3f:b7:b9:35:76:42:0c:69:06:1b:18:d7:7d:cf:08:58:5e:
cc:ff:45:88:d7:27:e0:4e:0c:4a:e5:47:24:07:38:b3:76:1e:
95:f9:38:ac:45:4d:db:bf:84:5e:9b:10:77:ac:a7:8a:f4:10:
b9:f1:30:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:32 2023 by rpki-client on console-ams.rpki-client.org