Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/CQ9D9a8xF7HuEPNx6Jkr7BFXxn0.roa
File: CQ9D9a8xF7HuEPNx6Jkr7BFXxn0.roa (raw, json)
Hash identifier: A6k/Lph9ZiKUERDCTvp6PrJQacsPTUe3odlQf5kk8Xs=
Subject key identifier: 09:0F:43:F5:AF:31:17:B1:EE:10:F3:71:E8:99:2B:EC:11:57:C6:7D
Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial: 0183A246B4940B52C7822955579D5A608209
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/CQ9D9a8xF7HuEPNx6Jkr7BFXxn0.roa
Signing time: Tue 04 Oct 2022 09:14:46 +0000
ROA not before: Tue 04 Oct 2022 09:14:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 83.137.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:46:b4:94:0b:52:c7:82:29:55:57:9d:5a:60:82:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Validity
Not Before: Oct 4 09:14:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=090f43f5af3117b1ee10f371e8992bec1157c67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:ca:e4:43:4f:98:2b:2e:fc:6d:03:6b:1e:
c8:78:75:e3:82:de:3a:12:d8:87:f3:8b:0e:1e:a6:
e1:af:b9:ed:4a:ae:84:65:50:30:ea:15:d1:98:17:
6b:6a:e7:fa:7b:fe:eb:bb:80:d0:65:45:4e:3e:2e:
18:ce:00:fb:e8:b7:42:16:cf:c7:cf:d2:01:3a:f3:
c7:2a:72:15:31:f4:9f:1a:92:1d:66:0b:2d:8f:0f:
c6:8d:10:9b:81:e0:c1:2c:27:ae:1a:82:33:38:9d:
e2:d8:43:b5:33:2f:af:76:9a:61:3b:2b:07:40:cf:
c9:6f:48:4e:2f:56:af:d6:71:ff:8e:79:10:e9:96:
7d:7f:18:1c:9c:7a:cc:70:b0:ea:7c:c8:d7:12:31:
fb:aa:96:80:04:84:bf:e0:ba:aa:9f:93:8c:f6:3d:
04:17:ee:e9:80:ac:1c:27:66:f8:27:86:f3:20:be:
d5:83:07:b0:18:59:b0:89:63:c3:14:46:8d:aa:4f:
df:ba:27:00:1b:b7:79:75:4f:82:10:99:38:21:b3:
0c:2d:62:89:36:de:0e:ec:7a:c6:0f:da:d2:06:51:
24:6a:24:97:17:58:40:63:aa:69:51:92:57:64:b8:
ab:e1:6d:ed:c8:33:97:a0:59:21:4c:32:45:eb:0f:
fe:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0F:43:F5:AF:31:17:B1:EE:10:F3:71:E8:99:2B:EC:11:57:C6:7D
X509v3 Authority Key Identifier:
keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/CQ9D9a8xF7HuEPNx6Jkr7BFXxn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.245.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:2b:19:0b:fb:05:c7:34:a2:34:49:99:31:8d:2f:59:4c:4e:
6e:4f:5a:da:f6:a1:41:c4:c8:e2:b6:85:f8:bd:53:37:04:36:
e7:51:00:ef:12:1d:4e:b4:e1:e9:f7:16:ca:5e:66:83:18:f8:
80:05:fb:9c:ec:1e:56:b3:2d:55:5c:f2:4a:c4:37:10:30:7a:
46:76:23:fa:90:79:6b:c4:d5:65:7d:28:41:dc:8c:50:5f:2f:
ac:70:e4:8d:df:12:c4:b0:34:5a:cc:ad:15:09:71:e9:59:61:
9b:27:13:b8:4f:be:7f:66:6c:8a:a3:75:eb:7f:47:09:bd:7c:
41:ea:72:d3:7b:d2:5c:1f:d8:50:37:20:64:e4:01:e5:81:de:
3a:7c:25:a9:64:28:39:d9:f4:87:54:6b:73:8f:06:46:97:8d:
e0:07:83:e5:94:ac:ef:b4:f7:88:a2:80:fc:f9:03:1f:02:33:
09:f2:a5:e0:d3:ee:8e:06:b4:90:c8:a8:67:e4:f5:02:c3:48:
01:b9:7f:52:6c:39:53:08:8b:17:0f:64:ac:c9:ef:9d:d1:b6:
03:f9:b1:5c:99:a1:01:7f:74:4e:b1:25:fa:60:13:f8:9b:70:
29:a0:56:ef:80:49:a3:10:e1:d7:ff:2f:b8:97:7e:be:ae:28:
90:61:84:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:56 2024 by rpki-client on console-fra.rpki-client.org