Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/R6zaobTz7RgzmEYU4McevQi26qQ.roa
File: R6zaobTz7RgzmEYU4McevQi26qQ.roa (raw, json)
Hash identifier: Qg3enItnLmmhmUI6CSB2vuM+MEUpqWKmNBGJ3eISYoU=
Subject key identifier: 47:AC:DA:A1:B4:F3:ED:18:33:98:46:14:E0:C7:1E:BD:08:B6:EA:A4
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 01831C556B4406A10BF94D7AF40EAD293FFF
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/R6zaobTz7RgzmEYU4McevQi26qQ.roa
Signing time: Thu 08 Sep 2022 09:01:43 +0000
ROA not before: Thu 08 Sep 2022 09:01:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41911
IP address blocks: 176.110.32.0/19 maxlen: 19
46.250.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:55:6b:44:06:a1:0b:f9:4d:7a:f4:0e:ad:29:3f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Sep 8 09:01:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47acdaa1b4f3ed1833984614e0c71ebd08b6eaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:12:20:f1:ec:2c:f1:37:01:9d:0f:10:32:e7:
cb:2b:fa:00:53:3a:bb:38:5c:c0:aa:e4:34:d7:46:
1a:a3:00:de:84:49:fe:de:b5:f1:f8:3f:71:8f:9f:
fb:04:38:47:51:30:90:06:ff:a3:35:f1:6d:8f:62:
52:c7:63:dc:b0:92:8f:e1:c5:38:e7:76:cb:3e:38:
e7:1f:09:8b:37:fb:a7:67:94:d0:ee:d7:76:20:f4:
e0:fb:8a:5d:bc:b0:16:0b:b6:89:75:29:22:f0:69:
f6:a1:43:45:07:af:ed:3b:79:af:18:bb:58:76:a0:
9e:63:49:b2:16:ec:eb:00:f3:fa:dd:9c:0b:e4:81:
c7:a0:6e:10:cf:a1:77:a9:5a:12:46:18:0a:e0:57:
2a:26:1a:ed:28:c2:19:14:dd:d9:fc:de:f5:99:82:
63:0a:15:ca:65:db:99:4d:8f:65:38:2b:e5:65:9f:
57:41:a1:49:92:e9:4f:96:d3:09:6c:6e:b6:0b:9e:
6d:2f:ea:51:fa:b7:4a:b9:2e:41:4b:ab:68:62:1f:
42:4f:31:5d:bb:ae:0b:36:33:13:c3:96:4c:b6:f0:
2d:46:95:f6:05:94:84:43:e8:34:b1:7e:8b:f8:05:
3a:9b:89:8c:d9:9e:01:d4:ff:58:33:42:82:b4:5f:
cc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AC:DA:A1:B4:F3:ED:18:33:98:46:14:E0:C7:1E:BD:08:B6:EA:A4
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/R6zaobTz7RgzmEYU4McevQi26qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.250.96.0/19
176.110.32.0/19
Signature Algorithm: sha256WithRSAEncryption
52:c2:e9:52:e7:d1:ad:2a:d2:d2:88:eb:52:c9:74:e3:90:dc:
d1:0d:e4:82:f3:ff:b5:1d:c5:e0:93:d9:69:2c:00:c3:47:8a:
38:4f:23:92:a3:e9:ff:a0:de:e6:7b:2e:74:b1:cf:42:04:ad:
aa:71:26:34:5e:6e:93:3a:49:a8:74:fb:26:6b:cd:9b:ea:a9:
6a:37:0d:ab:7a:c3:55:ae:ba:92:65:46:bc:a5:81:a5:7d:73:
cf:8c:50:af:98:7f:14:95:f2:f8:e6:85:b5:f8:5c:2e:cd:bf:
00:2b:f2:5b:d0:bb:e7:59:c5:2d:9c:b5:68:77:23:6d:13:9c:
03:c9:bd:ed:31:c1:5c:4f:a5:8d:d4:63:78:fa:84:ed:95:81:
c8:7c:f1:6e:a9:f6:d0:2f:13:63:4e:6a:54:48:33:86:0a:a7:
2c:bc:f8:26:b0:27:e2:2a:58:4b:bd:8a:7c:11:e2:47:92:1b:
85:fb:29:4e:0e:ea:92:cf:71:27:45:1d:66:94:98:5d:ed:89:
f1:06:a7:2c:d5:67:47:17:65:d2:12:8c:23:ab:2f:ec:be:ba:
cd:3e:a2:db:70:af:55:f5:04:1d:0c:c7:0d:f7:af:c5:f4:47:
18:1b:77:90:f8:44:78:af:45:1c:41:3f:cf:aa:c1:1d:9d:e6:
9f:2a:41:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:44 2023 by rpki-client on console-ams.rpki-client.org