Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/L7B7ZbWoZNS9S7jtcfUDpbniADw.roa
File: L7B7ZbWoZNS9S7jtcfUDpbniADw.roa (raw, json)
Hash identifier: wR+QGDx8oUGqZdgrqvFak23NObXY5TYDBYLlsm3R7Ww=
Subject key identifier: 2F:B0:7B:65:B5:A8:64:D4:BD:4B:B8:ED:71:F5:03:A5:B9:E2:00:3C
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 05961AAE
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/L7B7ZbWoZNS9S7jtcfUDpbniADw.roa
Signing time: Sat 01 Jan 2022 12:06:19 +0000
ROA not before: Sat 01 Jan 2022 12:06:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213296
IP address blocks: 158.46.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93723310 (0x5961aae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jan 1 12:06:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fb07b65b5a864d4bd4bb8ed71f503a5b9e2003c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:11:e0:2e:c4:8c:ab:fb:90:5c:c1:78:ba:d6:
b5:0a:a1:d0:7a:5f:a3:e2:db:50:62:97:83:1e:4f:
87:9f:ed:8d:d6:b1:69:de:ec:63:04:f1:38:4b:07:
9d:0b:cc:85:56:7d:e6:34:d6:44:2f:02:fb:4d:0e:
fa:18:71:40:0c:05:e1:6b:fb:5d:59:a9:99:40:ca:
5e:a8:a3:a1:9f:01:f5:87:8c:64:07:14:ee:07:c2:
11:80:3e:c8:a3:29:e9:18:c5:09:f8:02:dd:95:5a:
1f:b3:53:8a:7d:0a:40:df:5b:45:a5:82:b2:dd:4c:
b1:2f:7f:8b:26:bf:8b:da:c3:eb:58:a4:bb:96:7f:
e0:ad:b2:fc:05:c1:48:87:30:49:b9:d2:db:38:37:
3f:e3:12:e0:9b:f0:c7:67:90:b4:b1:f4:11:c5:33:
fa:e0:be:d1:dc:f4:1d:23:3a:cb:89:ce:e5:7c:00:
0a:92:98:95:cd:b7:4d:06:34:3a:0b:46:bb:60:0d:
66:43:ae:d9:64:9a:8d:b5:8e:fc:3f:c1:71:6b:8d:
2d:99:02:61:f6:f1:fa:cf:8c:fa:5b:62:a4:03:d3:
4b:07:21:e6:7e:88:31:78:82:88:cb:a5:8b:04:4a:
94:27:9a:39:51:a6:11:43:b6:53:7e:ac:f3:41:9f:
f6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B0:7B:65:B5:A8:64:D4:BD:4B:B8:ED:71:F5:03:A5:B9:E2:00:3C
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/L7B7ZbWoZNS9S7jtcfUDpbniADw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.192.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:ca:8d:9e:dc:b5:21:60:bb:97:4b:24:56:81:ae:70:2a:ff:
fc:03:f5:59:bc:c2:a5:a1:13:b9:ae:4d:c7:b9:22:da:35:05:
7c:75:ba:eb:94:92:fe:4e:9d:30:bf:de:1e:4e:da:c9:49:46:
cb:0a:60:2f:d8:db:e2:c8:35:a6:5c:2c:28:4a:a8:b2:cd:c0:
a0:7b:fe:cc:e8:79:bc:36:2d:44:88:7a:d5:70:b3:57:c4:24:
51:5f:2d:e3:43:bd:5a:ee:72:43:c7:57:b6:f2:bc:25:08:1c:
1e:2a:37:ef:31:f4:80:26:c2:62:4d:e8:61:5c:65:5c:7a:57:
d3:3f:df:c3:54:92:54:fa:2e:69:c8:f7:6f:a1:f9:0b:54:ab:
a5:56:82:6c:41:38:d3:84:36:32:ed:db:c2:fe:71:c6:dd:ef:
c8:ab:0d:5c:b4:45:7a:48:b2:80:91:e1:18:fa:26:af:cd:eb:
00:f9:c5:0a:e1:13:65:bf:c0:81:2a:59:d4:71:c1:ac:7e:8d:
3d:97:74:a1:cb:19:a0:f3:14:25:9a:27:6e:50:8a:89:3f:3a:
6d:02:7c:71:9f:81:8b:02:36:b1:f4:5c:f8:11:cd:ea:6c:01:
06:49:96:0b:17:d0:15:a4:df:a0:bb:0a:83:9c:5d:26:e2:f2:
15:f3:34:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:22 2023 by rpki-client on console-fra.rpki-client.org