Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/o6FIjfEm4pmVYTVOrrXiBOl9MdU.roa
File: o6FIjfEm4pmVYTVOrrXiBOl9MdU.roa (raw, json)
Hash identifier: ioJH14yzReUWI/mCk2RLXP7OKgqVtRfr+uvA5lihntk=
Subject key identifier: A3:A1:48:8D:F1:26:E2:99:95:61:35:4E:AE:B5:E2:04:E9:7D:31:D5
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0B73403C
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/o6FIjfEm4pmVYTVOrrXiBOl9MdU.roa
Signing time: Thu 03 Mar 2022 07:08:44 +0000
ROA not before: Thu 03 Mar 2022 07:08:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 46.29.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192102460 (0xb73403c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Mar 3 07:08:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3a1488df126e2999561354eaeb5e204e97d31d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:69:06:21:e9:57:ea:79:3e:21:54:51:64:
9c:b1:2e:70:73:31:6c:4c:9b:bf:65:2e:9d:f5:2c:
b9:64:c7:10:05:0a:d7:25:aa:04:f5:3a:10:97:22:
25:0e:98:ec:98:69:ec:94:05:ee:df:a2:20:96:b8:
b8:f3:f0:a6:3a:0f:25:08:fb:af:06:f1:f0:10:aa:
ae:56:30:c5:1d:98:f7:d8:46:3e:5d:60:5a:9a:14:
44:f2:cc:7c:0e:e6:08:84:1b:b3:e9:07:f2:59:e1:
dd:a2:59:1a:4c:e7:dd:79:dc:61:3c:40:b5:7a:2c:
cd:49:8f:6a:3c:8c:d3:34:65:6d:f5:55:7c:47:f4:
f1:9b:15:ec:f1:c3:5b:1a:86:72:ce:90:d8:24:ff:
6f:32:14:64:bd:e4:09:a4:c2:9c:a2:6c:42:b4:8a:
af:01:59:1e:e1:bc:82:eb:df:45:48:c9:43:6b:71:
a3:af:1b:08:29:a0:7f:78:1f:d3:c3:c3:fa:e7:52:
d2:57:06:67:92:68:54:a8:39:41:8e:78:a1:f2:7c:
6f:1f:9c:41:a0:b3:ce:d6:46:6b:5a:f3:fa:5b:14:
3f:e0:22:72:e7:db:1c:a8:e6:c1:d7:1d:86:c9:67:
80:fe:9f:b9:81:d7:ec:af:90:b2:ea:49:68:0f:05:
7a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A1:48:8D:F1:26:E2:99:95:61:35:4E:AE:B5:E2:04:E9:7D:31:D5
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/o6FIjfEm4pmVYTVOrrXiBOl9MdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.24.0/22
Signature Algorithm: sha256WithRSAEncryption
68:07:8c:9a:cd:bf:40:a4:c3:0b:94:f3:df:e0:05:d0:0a:1a:
8f:b0:7b:66:ea:6d:a5:cb:95:84:b8:cf:d1:b5:43:53:67:e9:
f5:4a:1c:f7:59:c9:b3:b6:00:42:4f:cf:36:da:5c:25:b6:f8:
25:81:7f:d3:ed:a9:07:0b:4d:29:36:25:47:f6:07:de:81:94:
44:ef:ee:d7:1d:c2:da:d4:7e:89:d1:e4:82:7f:09:d4:0f:a0:
26:70:fc:fb:fc:c8:db:95:50:41:ca:c1:78:71:d5:bf:33:1e:
c9:6f:30:15:4e:58:93:b5:3c:c3:f7:3c:23:c4:4b:53:f2:d1:
9c:d0:b4:b9:24:93:09:33:31:c7:3e:d4:fb:99:d8:c2:32:5c:
ba:6b:31:7e:51:e2:9c:3f:01:3a:16:3d:e0:62:38:8b:3b:a7:
6d:c1:bf:bc:ff:4f:82:9c:30:2b:1b:87:06:49:f8:34:f4:c7:
48:e3:09:f9:6f:9a:8c:dd:15:01:d4:f0:54:97:52:c6:59:ca:
0f:10:c3:0c:1e:d1:1b:af:51:f0:53:84:17:8a:7d:af:e6:d1:
5b:1c:e9:6e:99:ef:75:80:97:34:eb:00:07:9f:81:40:39:fe:
7f:3c:9d:45:71:f4:dc:88:b0:33:4d:12:11:d3:ab:41:2d:9b:
a2:b3:3d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org