Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/uXe8fAFf-eZVsC1UBW1DzcvIn58.roa
File: uXe8fAFf-eZVsC1UBW1DzcvIn58.roa (raw, json)
Hash identifier: YvgmV2oxNSHuTVJ4u62dWBI3MRxJuCbkugf7YJXjLEo=
Subject key identifier: B9:77:BC:7C:01:5F:F9:E6:55:B0:2D:54:05:6D:43:CD:CB:C8:9F:9F
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 38EBB0E3
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/uXe8fAFf-eZVsC1UBW1DzcvIn58.roa
Signing time: Sat 01 Jan 2022 12:56:53 +0000
ROA not before: Sat 01 Jan 2022 12:56:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31175
IP address blocks: 46.38.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 954970339 (0x38ebb0e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 12:56:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b977bc7c015ff9e655b02d54056d43cdcbc89f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b4:80:ec:f5:ed:24:68:34:04:35:3f:98:45:
21:44:28:86:3d:aa:ed:08:ef:93:ad:c3:36:ab:24:
ff:ca:82:50:cf:15:99:07:3d:41:f4:44:39:71:7a:
7c:41:40:14:f4:e4:cf:b5:ab:fc:a5:c3:7b:b3:67:
31:6b:c2:af:79:c3:95:bc:ef:fc:5d:db:10:d9:32:
d3:f8:ea:bb:0a:c0:e3:cf:bf:bd:66:e5:7e:b2:c4:
17:cb:d3:00:06:4d:42:72:28:6f:ac:e7:83:c1:65:
d2:44:65:78:cb:2c:dc:29:34:2d:54:fe:23:38:68:
e0:ab:82:0c:ff:d1:49:2e:1d:52:92:f3:b9:85:e4:
bc:50:55:ff:cb:86:21:37:73:7e:b5:f0:fe:eb:c1:
ca:6b:c7:2d:89:31:30:1d:05:f9:e9:74:d2:5c:75:
49:be:78:f5:5b:50:01:4c:85:3b:31:d4:37:9d:58:
9d:ed:e0:77:e6:82:d3:7b:12:91:ba:76:51:e2:15:
36:b6:40:08:c0:06:54:37:1b:37:a1:ac:52:69:03:
78:c3:41:38:22:e5:44:71:8f:26:7d:48:53:62:52:
de:01:7e:8a:11:4d:28:ca:d2:b3:e5:cb:eb:54:84:
15:0e:8b:87:3e:62:17:7b:39:7f:65:35:c1:40:51:
75:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:77:BC:7C:01:5F:F9:E6:55:B0:2D:54:05:6D:43:CD:CB:C8:9F:9F
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/uXe8fAFf-eZVsC1UBW1DzcvIn58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.157.0/24
Signature Algorithm: sha256WithRSAEncryption
14:8f:af:d0:05:ec:01:3c:1b:ff:ae:d1:f9:ad:d2:67:33:39:
ea:77:64:e9:ef:17:08:bd:1f:e0:df:42:98:fe:71:9e:fe:d8:
c3:f3:34:bd:a5:88:ad:0a:e1:54:c2:a7:a3:7c:24:dc:58:48:
48:84:7a:54:6c:73:a3:4d:22:dc:10:f9:da:d1:d2:f0:2d:e9:
0d:d4:48:0a:18:1d:0a:48:b1:29:ba:8b:6f:ae:1d:e3:72:65:
72:a0:e7:b3:43:36:60:50:46:1b:39:82:aa:7b:84:fc:27:7a:
43:7e:76:78:19:aa:96:85:4d:bb:0c:a3:9f:d7:01:a1:75:fe:
16:d8:ee:fe:5e:b1:db:b4:82:79:a6:e1:f7:92:f0:3f:9d:e0:
3c:9c:d2:c4:fb:49:be:8f:02:06:53:ed:50:c4:5d:ad:e4:a5:
fc:a0:7a:26:82:96:d9:ab:97:49:81:cc:95:51:47:cd:79:e0:
df:2b:92:47:01:1f:57:fd:ee:c4:14:83:db:04:f0:1f:45:97:
22:f7:98:13:cc:8e:58:44:b8:ea:f0:fd:39:66:6b:bf:90:7e:
a7:49:e7:7c:72:d5:d8:9f:d9:46:7e:8e:61:c7:6b:6a:20:86:
5e:3e:75:c2:48:a5:b1:f4:31:d2:d4:a6:66:bb:0d:25:00:a9:
02:d5:47:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org