Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/yrT9OXlcdY2nrgZveubTOFTmeo0.roa
File: yrT9OXlcdY2nrgZveubTOFTmeo0.roa (raw, json)
Hash identifier: Ce/R0rYVeLjhyKaOBw6QCGrLfdsoGI0xukVreVmt2Ik=
Subject key identifier: CA:B4:FD:39:79:5C:75:8D:A7:AE:06:6F:7A:E6:D3:38:54:E6:7A:8D
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 0185392C1E20EB2D8E2F259ACD26F26B5A81
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/yrT9OXlcdY2nrgZveubTOFTmeo0.roa
Signing time: Thu 22 Dec 2022 09:31:10 +0000
ROA not before: Thu 22 Dec 2022 09:31:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208498
IP address blocks: 46.253.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:2c:1e:20:eb:2d:8e:2f:25:9a:cd:26:f2:6b:5a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Dec 22 09:31:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cab4fd39795c758da7ae066f7ae6d33854e67a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:31:0a:24:3e:59:df:9f:bc:21:73:c3:05:
f4:16:20:13:23:74:84:84:82:8f:ee:dd:fc:9b:47:
cb:59:97:89:8a:b9:8d:8d:95:e6:b8:1a:2d:27:aa:
80:35:d1:11:44:cb:f3:eb:7d:2d:bc:32:64:85:68:
95:14:d8:74:6d:d9:85:9c:d3:0f:fd:b5:88:84:c4:
26:e4:b4:20:63:a3:05:52:f0:e1:65:6e:14:71:78:
91:03:ae:b1:d5:a7:2d:fb:42:eb:89:6a:a4:eb:b9:
35:f0:38:60:f8:1a:be:b4:54:83:ef:05:81:f9:22:
fd:c9:63:ea:6f:b7:19:1e:a1:65:c6:62:c4:fc:d7:
1e:cf:80:00:bc:95:38:10:06:94:3e:18:49:b8:0b:
ac:f3:be:bd:92:af:34:8c:78:f0:c6:a1:41:17:08:
29:50:28:32:67:bc:7d:03:82:59:e0:c7:cb:46:a3:
02:73:08:8f:77:d7:05:a7:4f:6a:1a:09:94:b0:5f:
20:7a:e7:d1:c8:30:e2:01:85:33:83:4f:54:81:a7:
1a:be:ae:4b:5e:eb:5c:47:7e:06:cf:b8:55:06:7d:
b5:b1:1b:6a:c0:fa:01:be:7b:90:d4:9a:84:c3:53:
a8:92:a8:a6:7f:f6:70:a5:48:22:4d:7a:ae:a2:8d:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B4:FD:39:79:5C:75:8D:A7:AE:06:6F:7A:E6:D3:38:54:E6:7A:8D
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/yrT9OXlcdY2nrgZveubTOFTmeo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.119.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e2:63:03:c8:ae:bf:12:4c:6a:39:9b:df:f4:7d:d9:31:23:
51:88:bb:d8:1d:3c:ed:fd:e2:56:fc:b7:1e:23:ab:6a:5f:85:
7c:b9:0b:4c:87:01:42:05:0d:8e:07:77:ba:58:d2:36:0d:31:
7f:f7:4e:2c:2f:ff:6c:4a:aa:71:3a:61:f4:12:c4:5e:2d:c4:
29:e3:ff:6e:fb:63:65:e4:fd:80:82:4b:14:fa:41:4b:43:aa:
4b:44:c2:aa:aa:6f:a2:33:19:33:da:33:05:db:80:b4:ab:d4:
4c:b3:4e:32:2b:99:8d:65:eb:b3:9d:69:d0:45:01:68:1f:bc:
f9:ca:b6:34:0e:4c:88:25:74:98:a8:fc:e3:3b:2d:44:67:88:
c9:af:67:45:9d:31:38:0b:5b:5a:74:d5:cd:6b:dc:83:32:0e:
f4:dc:34:b4:87:3c:0e:1a:3f:e2:de:d7:1c:f7:ff:58:1a:71:
7d:39:f6:8f:70:62:51:fa:55:ec:e7:d5:1c:5a:2c:f3:80:b0:
30:3c:f6:c5:3f:4c:70:de:8c:6b:c9:08:8d:a0:b5:5e:9b:bd:
96:72:89:bf:25:8b:21:aa:d5:6f:bb:04:c3:c3:dd:2f:d3:7e:
8e:49:02:e8:44:c7:1f:e7:a7:b1:8a:b2:e6:b0:60:46:4b:40:
32:0e:f4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:53 2023 by rpki-client on console-ams.rpki-client.org