Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/pF9jin5DGLOgPWtKmPyDOUPoa_k.roa
File: pF9jin5DGLOgPWtKmPyDOUPoa_k.roa (raw, json)
Hash identifier: 34zgly68DQ3Lre+6I7qPuxyJEp89b0G22SFxy62ivDs=
Subject key identifier: A4:5F:63:8A:7E:43:18:B3:A0:3D:6B:4A:98:FC:83:39:43:E8:6B:F9
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 370978B7
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/pF9jin5DGLOgPWtKmPyDOUPoa_k.roa
Signing time: Sat 01 Jan 2022 11:00:23 +0000
ROA not before: Sat 01 Jan 2022 11:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211399
IP address blocks: 46.8.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923367607 (0x370978b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 1 11:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a45f638a7e4318b3a03d6b4a98fc833943e86bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:b2:a1:9c:bc:ea:5e:06:66:3d:12:ac:5f:
47:7e:68:d1:79:18:72:95:da:99:03:0d:91:1a:10:
ab:b6:1b:96:31:eb:0d:60:97:50:c6:fe:da:77:0d:
ed:43:ef:3a:df:7b:05:b4:a0:72:ce:fd:1e:f6:f6:
60:cc:47:eb:7a:57:c3:16:ec:f5:7c:8f:0d:44:80:
eb:cf:f4:a0:5e:42:88:8f:ab:cf:48:68:78:34:eb:
03:72:e8:9b:78:29:46:2f:7d:3c:b5:39:19:47:d9:
47:a0:1d:25:5d:2f:45:41:57:f9:da:66:70:64:d1:
82:c5:ac:99:47:05:8d:da:bb:3a:80:5d:ea:7f:19:
21:25:fd:3e:13:4e:02:ef:36:9b:b8:66:6f:9f:25:
18:30:ac:19:da:e8:ee:8b:a5:63:07:59:e7:a6:58:
ae:f9:94:3c:69:4e:de:16:56:69:cd:17:b4:b3:b1:
bf:29:dc:b5:1d:a2:ab:7d:e1:07:f8:4d:34:2b:34:
81:53:70:3c:7f:e8:68:d3:bf:33:ec:d3:a0:12:8e:
d5:4e:57:88:fc:19:22:37:1c:97:25:d6:03:7d:37:
1f:2e:90:79:6e:b2:30:a9:5f:e9:6a:fb:4f:1c:9a:
50:0e:bb:2a:20:10:cc:e0:93:53:08:60:b7:fb:aa:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5F:63:8A:7E:43:18:B3:A0:3D:6B:4A:98:FC:83:39:43:E8:6B:F9
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/pF9jin5DGLOgPWtKmPyDOUPoa_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.140.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:c0:fe:c3:ec:21:e6:b0:8a:e1:8b:02:e1:7f:4b:00:ca:7f:
b7:4a:7e:88:30:47:fe:da:a7:74:5b:e9:41:41:72:af:4a:7d:
27:4a:0a:73:d3:4e:17:76:6f:58:d5:6f:b5:ba:9e:a2:0d:0b:
12:e9:21:6e:e3:3f:3f:68:a1:0e:7f:e4:42:f6:90:9e:24:65:
97:7e:99:90:f6:a3:5e:f4:79:bd:c2:7b:98:3c:68:c3:96:04:
dd:72:4f:72:95:d7:b0:8e:e1:3f:69:ef:cc:0d:36:bb:91:6c:
63:51:ec:ff:ea:20:23:20:4b:13:fa:85:28:a1:1a:16:29:57:
01:76:2c:ec:38:43:df:5d:0f:04:b1:c8:f3:29:74:a3:f6:09:
7e:c6:85:ec:7f:c7:3a:fe:ac:4e:35:32:2f:b3:02:a9:21:f6:
5b:b3:4e:d2:be:d9:be:d2:30:33:44:1f:28:22:b7:2c:8c:41:
12:19:25:53:74:09:fe:0f:8e:d0:da:42:98:76:1d:b1:ec:4f:
bf:5d:09:56:01:40:cc:62:32:f4:a5:48:8d:64:79:1f:1f:3c:
0b:37:26:3a:16:0a:2b:89:5c:47:ca:82:88:cd:7c:ae:d5:58:
10:74:f9:32:05:e9:ae:0d:31:ca:9b:78:fa:ea:a5:c8:86:10:
49:77:bb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org