Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/OPSOxFOYT1DSXl44kVmJm2IGAAE.roa
File: OPSOxFOYT1DSXl44kVmJm2IGAAE.roa (raw, json)
Hash identifier: c7t5zgvtVDAD++zxIk6CgJa9Lqz/zvM8ojArFkoSfUw=
Subject key identifier: 38:F4:8E:C4:53:98:4F:50:D2:5E:5E:38:91:59:89:9B:62:06:00:01
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 37DF28B8
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/OPSOxFOYT1DSXl44kVmJm2IGAAE.roa
Signing time: Sat 01 Jan 2022 14:56:02 +0000
ROA not before: Sat 01 Jan 2022 14:56:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197254
IP address blocks: 46.229.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937371832 (0x37df28b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 1 14:56:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38f48ec453984f50d25e5e389159899b62060001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:f2:88:f1:ee:cc:b1:d2:ba:a7:7f:5c:9c:
7d:36:e9:e3:b6:c0:30:d5:cc:a2:5f:0e:08:f3:96:
c5:7e:b8:48:1c:6b:93:57:89:8c:05:a8:8b:ec:40:
06:75:2b:79:aa:b9:d7:8f:bb:1d:7f:4c:3b:37:d9:
3a:e3:be:37:18:ef:e8:5a:4f:f0:c6:b5:2e:ef:3f:
83:59:f1:8c:3b:24:49:2e:ec:df:5b:7d:2a:f2:83:
d4:42:f3:ae:ac:eb:8f:54:80:cc:6f:ed:7d:b3:02:
2d:16:50:d8:eb:20:88:b1:d3:0e:0f:a5:dd:a8:39:
f1:6b:68:ec:95:7c:d1:fe:9d:35:e6:24:0e:7c:00:
c2:3e:bb:84:d0:df:2a:7e:aa:6a:79:90:84:09:b7:
e2:13:97:29:44:ed:b6:f8:96:12:81:0c:94:94:a2:
d1:2f:46:88:4e:45:3e:12:a6:45:07:39:0d:b7:67:
68:d4:7e:14:3b:66:47:46:17:f6:d3:ac:50:ab:45:
18:b0:d4:74:a3:7f:da:51:4f:55:26:5d:18:41:c2:
b8:a1:3e:7b:d8:41:b8:23:41:a7:fc:0e:75:a3:5e:
50:17:5e:82:1a:46:5f:22:8f:d5:69:7b:17:ab:d7:
29:5d:7d:b4:10:cb:48:6f:e0:93:ff:57:03:2a:e6:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F4:8E:C4:53:98:4F:50:D2:5E:5E:38:91:59:89:9B:62:06:00:01
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/OPSOxFOYT1DSXl44kVmJm2IGAAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.61.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a2:8b:7d:5b:6e:52:4e:34:1e:22:c5:73:25:ae:15:12:b0:
fb:b8:61:18:43:5e:ff:a1:4e:e8:64:12:2a:c8:39:16:53:bc:
92:f0:ea:f2:c6:9b:b5:f7:e8:6e:da:9c:35:7e:90:5c:3c:a9:
f5:23:5b:91:df:99:de:b3:2f:d3:ca:73:44:8b:0c:36:64:ed:
e2:68:b2:36:d7:fd:a7:2b:1b:38:6e:cb:b9:16:b9:c7:23:d2:
4a:6f:f6:8d:6d:58:d9:b0:60:13:5a:a4:ae:96:2f:06:45:e0:
0b:1f:d8:38:1d:5d:90:f5:ab:1b:05:2a:cf:01:2b:25:bf:ca:
39:1f:e3:71:cb:2d:d4:53:af:72:66:52:22:ee:1f:52:53:79:
a2:b7:4e:ab:be:33:b3:26:05:14:ec:4d:09:03:95:b9:27:cc:
f7:8d:5b:6e:00:63:e1:35:d7:04:97:93:31:13:50:ee:22:2d:
38:13:ab:50:1c:9f:40:84:55:0a:28:92:d5:b6:ae:ed:c7:52:
62:6e:1c:92:a6:bd:83:30:bb:0a:11:59:db:86:a1:ac:aa:a1:
55:00:32:bb:cf:b8:9f:84:a8:f6:ef:7a:e6:28:0a:64:70:48:
bf:87:e0:ef:bf:b9:40:15:e0:53:5e:ea:be:18:ad:fe:65:df:
78:03:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:42 2024 by rpki-client on console-ams.rpki-client.org