Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/ERQjjbY8nTR0s2Bxw1e9wNrU054.roa
File: ERQjjbY8nTR0s2Bxw1e9wNrU054.roa (raw, json)
Hash identifier: qYPs6J2SXkJCAPXXMramdlUx5NnnCzFYxO6O+y/hq+w=
Subject key identifier: 11:14:23:8D:B6:3C:9D:34:74:B3:60:71:C3:57:BD:C0:DA:D4:D3:9E
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 37E10DDD
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/ERQjjbY8nTR0s2Bxw1e9wNrU054.roa
Signing time: Sat 01 Jan 2022 14:56:03 +0000
ROA not before: Sat 01 Jan 2022 14:56:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204294
IP address blocks: 46.229.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937496029 (0x37e10ddd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 1 14:56:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1114238db63c9d3474b36071c357bdc0dad4d39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:2b:1a:27:56:31:d9:39:b9:e5:02:77:55:
db:7d:69:15:a1:1e:80:c4:76:72:d9:4c:4d:e4:50:
e6:05:c6:8e:f1:69:96:fa:0d:c1:72:53:23:14:a5:
3e:83:e3:ed:07:91:b0:24:dd:51:11:f9:7f:b5:95:
d2:80:af:ad:e4:0f:08:05:b4:43:fa:94:47:e8:a9:
1a:11:48:a8:35:e2:82:c9:d0:4a:69:98:85:dd:38:
9a:01:27:69:5b:36:53:2d:03:ab:e6:b7:cb:a3:ae:
09:02:92:56:47:8c:18:bb:bf:20:ed:9a:25:5f:83:
af:8c:a1:60:cc:a2:5a:55:e8:1f:3b:05:16:8e:58:
f2:22:1b:4a:10:aa:53:18:b0:f9:e4:35:6e:b1:5b:
f6:aa:82:ba:d8:29:cf:17:0f:1e:d0:71:93:05:d3:
72:11:c9:25:23:fb:ba:c7:b6:1e:ad:76:10:ce:3a:
cf:c2:df:d9:a5:0f:27:cc:75:e8:b5:a7:a0:7c:6a:
46:c6:d7:6a:e1:46:d8:31:e0:76:62:b9:cb:8f:f2:
53:20:3f:9a:4f:62:f7:bd:1a:a9:4b:57:6a:d1:ba:
60:35:0f:65:a0:5c:55:e8:f0:fd:af:44:9f:8f:c8:
2e:e3:fa:88:7e:7d:a9:36:ff:2a:af:21:c4:84:cd:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:14:23:8D:B6:3C:9D:34:74:B3:60:71:C3:57:BD:C0:DA:D4:D3:9E
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/ERQjjbY8nTR0s2Bxw1e9wNrU054.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.57.0/24
Signature Algorithm: sha256WithRSAEncryption
50:8f:96:70:c9:7b:94:f6:3c:4d:5c:ae:60:97:bc:81:1e:b8:
db:18:42:0b:67:6d:bb:7e:6a:4d:75:56:22:6f:0a:6e:ee:6e:
9e:fe:be:f5:35:52:06:fa:00:70:6a:61:45:6d:8d:5a:72:fe:
34:ba:1b:bb:47:37:0c:9e:a9:a7:2e:8b:b8:e7:b3:63:3b:36:
94:20:0e:29:91:68:37:56:e4:57:86:0a:8b:8a:62:02:86:30:
c6:5e:e5:ba:d3:2e:0c:51:dc:51:4b:f8:5f:3d:88:2e:34:e8:
10:ef:7d:96:a0:2d:ac:d9:6a:74:a0:47:56:82:72:12:52:6e:
68:33:cb:96:01:0e:aa:ae:19:db:a9:09:e9:c3:a3:95:77:69:
75:42:09:c6:ed:bc:e8:ba:49:9c:18:0f:34:05:03:b3:fe:f5:
73:76:ac:15:4d:57:fd:4d:ce:c3:8e:a0:fc:5c:77:b3:4c:f7:
75:b2:da:7c:95:52:43:67:78:4c:a2:e8:10:b8:09:f6:83:56:
f3:92:db:a3:e4:6d:29:a0:f1:f9:88:81:1f:8d:88:86:e1:d9:
d6:05:a3:f2:5d:af:be:65:82:74:42:08:48:c5:13:79:6e:94:
be:f9:e8:30:86:a3:0c:76:bc:52:7b:01:e4:14:fb:48:d4:45:
20:68:fd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:07 2024 by rpki-client on console-fra.rpki-client.org