Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/swaVZIWWOoHiy9Sfec9FleROhWc.roa
File: swaVZIWWOoHiy9Sfec9FleROhWc.roa (raw, json)
Hash identifier: zWp5rDu77F283vEUw56bXrP7zOBWKUlqAhezMP8GLjo=
Subject key identifier: B3:06:95:64:85:96:3A:81:E2:CB:D4:9F:79:CF:45:95:E4:4E:85:67
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 01837CA939B08A65C75BE99788F5E99F2F2C
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/swaVZIWWOoHiy9Sfec9FleROhWc.roa
Signing time: Tue 27 Sep 2022 01:56:48 +0000
ROA not before: Tue 27 Sep 2022 01:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 158.46.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7c:a9:39:b0:8a:65:c7:5b:e9:97:88:f5:e9:9f:2f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Sep 27 01:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b306956485963a81e2cbd49f79cf4595e44e8567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:7f:fd:04:17:3f:51:07:14:2d:85:cb:a5:
91:1e:5d:c0:3b:3c:8e:55:63:fb:a7:66:98:3c:5a:
64:d0:51:1f:46:17:69:8d:bf:91:82:20:a4:b3:3b:
03:a3:8e:55:1b:02:bb:8a:93:08:41:38:e8:b8:58:
66:2f:bc:9d:06:6b:99:a3:cb:68:f9:b7:10:2f:9a:
0d:c7:64:59:9b:3c:bc:10:26:ce:e5:3a:72:65:e4:
05:70:32:62:5c:f3:62:27:32:67:7c:ed:8f:7c:a5:
63:81:bd:9f:c9:10:35:74:d8:53:7c:3a:c2:36:42:
b2:fe:5c:90:4a:cf:85:2e:2e:63:04:71:1e:3c:6a:
66:99:ae:e9:d5:a9:f2:9d:c1:dd:02:11:97:c4:53:
2a:13:2a:a7:98:35:54:a7:2b:82:93:aa:77:8f:f8:
f2:c9:6c:15:4c:7b:d9:09:84:db:f2:bc:1c:a0:7a:
b8:6d:70:bf:df:7b:92:0c:fd:de:34:d9:10:d2:40:
36:b8:08:6e:50:f9:b9:79:e7:82:e1:c8:95:14:f5:
2b:ac:4f:eb:b3:37:14:a3:92:11:07:1a:69:81:bd:
cf:7f:1b:9d:f8:0d:bb:ef:00:6e:b5:07:5c:73:de:
03:44:4e:7c:77:be:cc:c2:c4:ba:10:03:eb:84:a5:
a1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:06:95:64:85:96:3A:81:E2:CB:D4:9F:79:CF:45:95:E4:4E:85:67
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/swaVZIWWOoHiy9Sfec9FleROhWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.179.0/24
Signature Algorithm: sha256WithRSAEncryption
66:3b:6e:14:6a:e7:05:a7:1f:4b:bb:74:f7:1f:a7:7d:af:3f:
96:f2:4c:a3:d1:ef:18:8d:35:a2:d4:f5:21:31:2f:71:25:7e:
e9:77:fc:cd:6e:cb:f6:df:68:0a:85:6e:e4:18:93:e4:e4:81:
20:6e:90:23:1f:14:b2:53:1d:8b:10:63:a4:22:76:37:ea:98:
be:b7:80:aa:24:09:28:65:44:44:97:aa:47:1b:d7:8d:90:f3:
a4:01:1d:84:73:57:ef:20:e4:82:21:ba:f5:5f:3b:df:03:d7:
11:6d:1c:27:bd:20:81:55:d1:7b:cb:87:c6:6a:56:b6:e2:21:
51:2c:a5:0e:5d:e2:d5:21:da:c9:d7:49:9f:11:40:1f:15:ba:
d0:f1:b9:63:72:ae:db:1b:18:73:1b:3c:7a:62:1e:ef:29:67:
cd:6b:44:cc:99:0f:33:6d:da:50:96:e3:37:93:96:dd:34:7f:
44:ea:a4:f2:57:a8:53:ef:4e:15:f2:ca:61:91:5f:cb:f5:fe:
fb:42:36:d9:f0:a7:e9:42:21:93:ca:66:a5:c8:17:0b:37:55:
ee:9d:df:d7:cc:9b:fc:35:f1:e1:16:28:c7:ca:f7:73:e7:68:
49:0c:eb:21:64:21:e0:ac:42:a4:27:26:09:5a:fc:4e:32:d1:
40:0f:9c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:09 2024 by rpki-client on console-ams.rpki-client.org