Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/AukM73rqAEvI4d5FINX2WGz1gAg.roa
File: AukM73rqAEvI4d5FINX2WGz1gAg.roa (raw, json)
Hash identifier: G9NCuEadmWLYBF1Y4A2CJ9nZR8SCifwq6/EBVLQ+CWo=
Subject key identifier: 02:E9:0C:EF:7A:EA:00:4B:C8:E1:DE:45:20:D5:F6:58:6C:F5:80:08
Certificate issuer: /CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Certificate serial: 0625E6A4
Authority key identifier: 0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/AukM73rqAEvI4d5FINX2WGz1gAg.roa
Signing time: Sat 01 Jan 2022 12:59:59 +0000
ROA not before: Sat 01 Jan 2022 12:59:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56588
IP address blocks: 46.226.136.0/21 maxlen: 21
2a00:6a00::/29 maxlen: 29
2a00:6a00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103147172 (0x625e6a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Validity
Not Before: Jan 1 12:59:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02e90cef7aea004bc8e1de4520d5f6586cf58008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:92:8f:83:9e:44:2b:28:e8:19:a3:18:65:
0f:f9:6b:4a:78:43:ad:aa:fa:1b:56:5a:2a:77:79:
eb:8b:a7:22:67:44:66:20:fd:a7:9d:85:ba:ee:4e:
81:e8:e8:b6:14:f3:79:58:ba:f0:54:37:f6:10:32:
a1:2b:6c:e4:39:71:9e:89:99:df:f7:ad:98:fa:7a:
25:f1:c2:0a:7f:5d:69:e8:89:14:8b:d8:94:43:81:
c3:67:09:66:ba:a3:27:7f:24:f0:78:de:a0:5e:67:
28:c0:41:d0:c3:84:71:ce:26:6a:ff:11:c1:ce:31:
7d:ea:d2:d9:89:a2:2e:4a:9a:f2:3a:f9:f9:d5:98:
99:e6:24:00:c3:46:49:4f:ac:89:06:d1:b6:35:69:
90:7f:1d:16:84:cc:df:06:12:2d:ef:76:d9:bb:32:
a6:98:c5:4b:d9:f5:0c:71:89:37:fc:70:18:ea:c5:
aa:a6:5f:16:89:64:64:44:20:90:ff:4a:f1:9e:b9:
45:13:08:c3:85:06:6a:e2:b1:04:25:d0:f3:06:d5:
c0:ee:30:1a:f8:d2:ef:3f:d5:1c:7b:ae:28:9e:83:
a9:0f:6c:12:1f:cc:9e:42:4f:97:77:c8:d9:9a:5a:
9d:05:55:6a:fe:0c:6b:54:7c:54:f5:25:8c:65:8a:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E9:0C:EF:7A:EA:00:4B:C8:E1:DE:45:20:D5:F6:58:6C:F5:80:08
X509v3 Authority Key Identifier:
keyid:0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/AukM73rqAEvI4d5FINX2WGz1gAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.136.0/21
IPv6:
2a00:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
7e:32:31:87:88:af:b6:8a:98:2c:30:e0:57:a2:b8:d9:cf:03:
24:b8:a1:aa:3e:d2:0f:3b:59:1f:10:8a:cf:f0:23:5e:20:b4:
0e:8c:de:8f:6f:25:a2:c5:b3:19:e8:29:7a:73:70:db:25:2b:
74:3a:d2:56:27:3a:37:05:9e:30:63:ca:37:36:84:db:cc:20:
7b:c4:5d:ee:c9:31:9b:08:97:2c:cd:72:43:9a:0d:40:84:2e:
a4:f0:2b:77:4b:7f:1d:9b:9e:41:0f:66:2a:d0:7c:e9:b7:7a:
2d:57:24:d5:99:34:18:67:d6:cf:fc:8a:e7:4b:ea:37:47:8a:
bf:d7:ae:c9:9d:e4:77:5d:c8:8d:3a:87:61:cf:3c:1e:57:e4:
b3:20:b7:ba:7a:b9:a7:58:ea:16:70:4f:14:9d:d9:8e:c6:98:
c0:06:4f:15:77:d9:47:b1:a7:69:28:30:21:a3:a2:75:6b:fd:
77:df:85:00:a2:99:bd:ee:be:4e:32:0f:26:d9:b3:d5:73:e6:
9a:4f:98:88:f3:7e:97:fb:b6:a2:8f:b3:73:87:69:d1:87:3f:
92:36:b8:0b:7b:84:cb:99:e6:21:54:1e:ea:51:20:6f:41:8d:
d8:a2:96:d2:9e:ce:d6:d8:36:9a:71:3d:5f:75:3d:72:83:c9:
19:04:04:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:37 2024 by rpki-client on console-ams.rpki-client.org