Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TxUjuFSP34_GVQ9VpHkaV2QNwhQ.roa
File: TxUjuFSP34_GVQ9VpHkaV2QNwhQ.roa (raw, json)
Hash identifier: q26M4lFQdZfbDumk7lFpR4CnYIRXr6eNg4bAsb15cjA=
Subject key identifier: 4F:15:23:B8:54:8F:DF:8F:C6:55:0F:55:A4:79:1A:57:64:0D:C2:14
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0183B830AFF3F7F05A5B7524254D09F60297
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TxUjuFSP34_GVQ9VpHkaV2QNwhQ.roa
Signing time: Sat 08 Oct 2022 15:22:21 +0000
ROA not before: Sat 08 Oct 2022 15:22:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201746
IP address blocks: 46.8.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b8:30:af:f3:f7:f0:5a:5b:75:24:25:4d:09:f6:02:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Oct 8 15:22:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f1523b8548fdf8fc6550f55a4791a57640dc214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:b4:d2:7f:fc:cd:78:4e:bd:8d:f9:5e:7f:
21:83:1f:d3:23:82:e7:96:29:75:ca:de:89:a2:ab:
f2:a9:52:10:9e:77:f2:cf:de:02:73:f5:8b:bc:cb:
24:50:90:8b:d8:af:e7:98:2d:38:64:e2:67:02:14:
72:a0:52:28:45:f7:86:8a:cd:f5:7b:7e:05:a2:d5:
68:12:41:5a:6e:99:40:79:9e:95:a5:60:a1:4c:bd:
12:f5:f9:8d:5f:80:8e:00:e7:fc:74:08:1e:d1:e1:
aa:d2:ed:4b:d7:2d:7e:18:27:4b:6c:a9:f6:b7:81:
1e:27:cb:2b:22:70:36:8d:a6:c2:ad:90:bd:5d:ec:
5e:cb:c8:78:ee:c6:79:58:dd:a3:56:b8:af:c9:28:
69:41:73:56:c2:5f:27:18:79:5a:88:86:0d:96:a2:
64:96:97:92:96:50:4e:3c:cf:7b:8c:bf:fb:5e:b7:
a3:a2:bd:f1:21:45:10:6c:f4:cf:a5:ae:d4:22:d8:
b2:c7:b2:f3:c4:3d:74:11:4a:56:12:9a:b4:13:b7:
67:3b:14:4f:b0:7b:96:ac:62:7e:d8:9a:11:e4:ec:
26:85:a5:57:9e:ea:51:9c:da:4c:df:ed:af:49:c9:
b2:fa:ad:5f:10:60:7d:09:ee:cf:77:56:b7:50:5a:
dc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:15:23:B8:54:8F:DF:8F:C6:55:0F:55:A4:79:1A:57:64:0D:C2:14
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TxUjuFSP34_GVQ9VpHkaV2QNwhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.160.0/20
Signature Algorithm: sha256WithRSAEncryption
44:43:55:1d:b2:af:2d:8b:a2:c9:0c:48:11:ba:4b:5d:42:0b:
a5:74:c5:91:4b:df:6e:2c:51:05:42:7b:de:68:3a:53:b1:9d:
27:65:a2:fe:11:d2:cb:d8:a0:58:0d:c0:33:4e:75:bf:51:d8:
8c:18:c0:f4:e8:7e:65:3f:41:1f:e6:73:40:6f:93:26:52:53:
72:c6:ce:02:43:ff:44:c9:97:9a:90:d7:1c:a2:1f:8e:c6:b1:
64:57:b0:93:5d:af:4b:d5:14:90:8d:8d:22:be:2a:b9:13:00:
b3:3a:f3:84:d4:ee:9b:b3:f2:b6:c4:67:96:95:45:f6:5c:fa:
e8:89:6b:96:55:bb:06:6a:40:44:e7:45:99:90:d3:f7:15:d3:
96:03:4a:f5:41:a2:a4:ab:3d:fc:75:33:c2:23:7c:c4:d1:42:
9c:3f:39:25:ae:3c:37:ec:07:be:48:11:88:71:36:54:21:1c:
fa:ce:00:fa:fe:a6:93:b3:bc:89:48:56:58:b2:b3:90:95:24:
db:b5:de:22:bd:7a:44:b2:39:b8:0c:e0:65:ad:3d:15:c0:b6:
64:58:41:46:d6:5c:00:4b:b8:a4:08:48:66:b5:d5:a6:f5:d0:
df:84:1e:65:c6:e2:7f:f6:60:86:f5:83:0b:46:7c:04:9b:fd:
e1:9c:61:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org