Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/GupdBF6wLnxKlMjekQLlyhP8qF4.roa
File: GupdBF6wLnxKlMjekQLlyhP8qF4.roa (raw, json)
Hash identifier: l7hHPanWna+8tBHLxKUfHyI4Hq1O4T2jjVS9/ACcc9M=
Subject key identifier: 1A:EA:5D:04:5E:B0:2E:7C:4A:94:C8:DE:91:02:E5:CA:13:FC:A8:5E
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 37012D6C
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/GupdBF6wLnxKlMjekQLlyhP8qF4.roa
Signing time: Sat 01 Jan 2022 11:00:18 +0000
ROA not before: Sat 01 Jan 2022 11:00:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16262
IP address blocks: 46.8.52.0/23 maxlen: 32
46.8.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922824044 (0x37012d6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 1 11:00:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1aea5d045eb02e7c4a94c8de9102e5ca13fca85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:83:b0:e4:40:e8:9a:8e:d4:79:0d:7a:33:
ac:17:38:72:db:b2:22:6a:5f:1e:16:5c:9a:15:b9:
36:9d:35:12:c5:e7:3b:7f:9d:5c:f0:31:33:97:ff:
7a:99:6b:d5:72:c1:33:2c:3a:fa:35:36:22:3a:9c:
0c:04:91:64:f6:07:35:e8:7b:e7:27:17:2d:3b:2c:
be:15:3b:5a:47:cb:f0:ec:95:92:3c:45:63:3e:bd:
c6:b3:f1:8a:13:04:3d:6f:1d:a4:4e:bd:d4:16:b7:
d9:06:4c:91:4d:d9:6b:44:4c:15:0e:84:db:94:cc:
62:67:24:df:6c:8c:fd:b5:4d:32:b8:8f:95:87:40:
35:c1:26:7a:41:34:54:fb:ee:0b:87:c4:12:0b:aa:
6b:f3:96:ba:85:d4:09:0d:59:9b:08:bf:f8:13:91:
fd:37:24:68:ae:2e:64:28:2f:4d:fb:00:35:a8:a6:
af:84:06:73:ad:d7:2c:09:e2:3b:39:c0:c1:6a:f7:
03:3b:6f:d5:49:ad:66:12:84:17:2f:26:ac:52:12:
49:fb:2c:b8:ad:40:90:5a:95:41:80:d4:e1:dc:d8:
60:b1:2f:48:11:d1:02:21:57:fb:7e:fe:ac:1a:2f:
24:45:56:57:90:2f:39:0f:d3:bd:dc:28:8b:11:e9:
9e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EA:5D:04:5E:B0:2E:7C:4A:94:C8:DE:91:02:E5:CA:13:FC:A8:5E
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/GupdBF6wLnxKlMjekQLlyhP8qF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.52.0/23
46.8.153.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:8d:76:ef:72:c3:c5:ce:31:8e:53:f7:69:8c:28:c9:10:ae:
9d:78:a9:5d:28:32:72:08:8e:5c:a5:34:36:2e:b0:05:17:b6:
01:da:27:1c:d9:29:4d:64:c9:c3:25:b5:cd:71:79:c2:9f:08:
10:34:92:2c:86:c8:77:ff:94:10:a8:91:d1:b4:b4:eb:71:8e:
9c:03:b2:09:34:c6:f1:3c:29:94:0e:e9:90:27:07:5b:8a:df:
fc:f8:6f:e4:9e:d8:80:97:26:ff:c0:bf:20:6d:be:16:c7:01:
e8:9b:05:03:a3:c7:29:5f:1d:3d:15:d6:5b:73:65:f9:74:a4:
18:0c:ba:de:89:46:bd:c9:e3:4c:05:0a:ff:b3:93:61:62:1d:
47:d6:56:6f:20:4d:50:61:9c:63:32:6e:e9:3b:a8:0e:13:b5:
77:3e:a6:e9:95:48:32:1a:e8:41:b5:97:8e:33:60:d1:ad:4e:
ab:1c:e7:a1:7d:36:af:41:76:1e:19:7c:91:7a:54:36:f9:3f:
ea:62:42:5f:bb:cb:cc:05:e5:ed:f2:93:ef:b8:55:a3:aa:cc:
e2:45:f2:73:97:35:ef:6d:d8:2a:d4:18:34:1e:e7:e7:f6:a1:
3b:43:94:fd:b9:19:bf:f5:1d:11:a7:94:1a:b6:2f:a5:e4:dc:
4c:10:be:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org