Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/OQDfqT3s7BUWR-dhnqsKbc5x_X8.roa
File: OQDfqT3s7BUWR-dhnqsKbc5x_X8.roa (raw, json)
Hash identifier: F1CuKByN/QzDCHW/ZVxD/QiOEhoFxBNrp9IJ3j5XcbA=
Subject key identifier: 39:00:DF:A9:3D:EC:EC:15:16:47:E7:61:9E:AB:0A:6D:CE:71:FD:7F
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 01600491
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/OQDfqT3s7BUWR-dhnqsKbc5x_X8.roa
Signing time: Mon 03 Jan 2022 11:51:27 +0000
ROA not before: Mon 03 Jan 2022 11:51:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212567
IP address blocks: 46.226.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23069841 (0x1600491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Jan 3 11:51:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3900dfa93decec151647e7619eab0a6dce71fd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:65:86:2b:0d:9f:0f:69:2d:1e:d2:a4:54:
65:f8:25:b5:bd:eb:5e:c1:01:fa:5e:b4:e0:7e:ca:
07:a3:42:e4:61:93:2e:b3:a2:1c:e8:38:67:83:57:
fb:4f:c7:86:15:46:b6:fa:0e:04:a6:53:3f:77:e7:
ed:42:f2:1a:ff:20:93:73:d8:31:6c:23:92:89:44:
9e:98:ea:6c:74:90:c1:d2:ec:31:37:40:e7:2a:37:
94:fe:4c:1d:75:a8:36:9a:6b:5d:7c:67:5b:99:bf:
84:74:4e:1f:b0:3a:90:9f:95:ff:7a:d2:04:f9:42:
08:30:0b:a6:a7:9a:cb:a2:98:2d:86:69:f3:d8:2e:
f9:47:3e:5c:11:c4:a4:3f:98:69:7c:7a:90:af:95:
03:13:ba:fd:9a:7e:02:9b:9a:5b:8a:2b:e0:12:14:
d8:d9:01:f4:ab:e4:d9:2c:94:4b:83:ae:ef:ce:e5:
b8:ef:56:04:8d:7a:2b:6f:cb:08:73:f8:60:6a:bb:
fd:eb:71:98:e8:d2:d4:2c:98:66:b8:bf:11:ca:5e:
42:92:8f:34:fc:52:cb:ee:e4:eb:e3:b8:a4:90:ba:
cc:26:50:95:da:4a:d2:b1:01:8d:0c:0e:c7:a8:cf:
11:4a:da:b1:64:5d:51:16:16:10:73:9a:d5:41:e8:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:00:DF:A9:3D:EC:EC:15:16:47:E7:61:9E:AB:0A:6D:CE:71:FD:7F
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/OQDfqT3s7BUWR-dhnqsKbc5x_X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.127.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b9:61:ba:d1:50:b8:33:33:8d:ef:ae:8d:ca:e9:e0:9b:7d:
7b:17:e3:7a:ba:41:c6:1a:9f:9a:3f:97:88:2b:cd:03:b0:08:
aa:b0:74:f8:a0:7c:af:c2:36:6c:11:93:79:26:3b:5e:9d:d8:
01:12:33:aa:ad:d1:21:f4:98:2d:01:ff:c9:35:c5:51:d4:82:
a6:39:8c:1e:d0:bb:24:9d:0e:53:bc:e9:14:ec:6a:74:2d:34:
27:41:7a:20:5c:20:e3:8c:74:e4:94:ef:44:1b:17:26:12:e2:
63:bf:15:fa:c0:d9:e2:67:0e:84:2a:e1:00:99:0e:97:fc:96:
56:19:d8:a5:60:15:00:47:ae:b2:73:da:fb:19:3e:3a:5b:20:
c5:a7:70:66:90:cb:a7:90:1e:be:fe:94:8e:c3:83:e1:af:6f:
3d:aa:29:c7:22:b6:6a:60:99:76:bb:05:b2:0c:aa:7b:78:1a:
2a:21:07:ef:c6:25:1a:f8:26:5f:3e:b7:4f:1a:66:02:80:d2:
50:b0:49:f1:02:cd:66:72:7b:ce:f5:56:12:00:bc:39:e0:37:
54:3a:b9:e7:9f:55:33:68:10:7c:34:67:58:03:1a:4a:cd:79:
09:35:98:95:c9:9f:2a:4e:af:87:c7:e0:76:ec:1c:ac:b0:d3:
e1:27:66:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:28 2024 by rpki-client on console-ams.rpki-client.org