Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/CzbJd2qShdFiqnZE6aUoE4hr3SA.roa
File: CzbJd2qShdFiqnZE6aUoE4hr3SA.roa (raw, json)
Hash identifier: hNf7em4Bci6pYlwO8rTuWz/WgASGig+gGcK8H1ZfoDM=
Subject key identifier: 0B:36:C9:77:6A:92:85:D1:62:AA:76:44:E9:A5:28:13:88:6B:DD:20
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 14909CE3
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/CzbJd2qShdFiqnZE6aUoE4hr3SA.roa
Signing time: Fri 15 Apr 2022 09:08:12 +0000
ROA not before: Fri 15 Apr 2022 09:08:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19437
IP address blocks: 46.249.104.0/21 maxlen: 21
46.249.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345021667 (0x14909ce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 15 09:08:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b36c9776a9285d162aa7644e9a52813886bdd20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:09:54:8e:de:c0:50:5b:6d:95:dd:9b:2e:
8a:13:2e:ed:f3:98:8b:cd:c7:72:e4:6c:a2:af:b0:
fd:0b:14:51:f5:5e:f4:3f:35:18:3a:db:2a:8f:24:
b5:21:61:21:6c:dd:ee:02:b5:c8:11:0c:cf:bb:b5:
d3:53:52:f3:6a:c8:58:1d:e0:f6:ab:5a:38:12:98:
70:2e:61:84:00:60:58:9b:83:5b:93:64:f7:74:6b:
d2:30:a7:3e:7b:c4:d0:ff:f5:d7:aa:cb:2e:24:40:
8e:5f:8e:4a:af:25:bb:f1:ef:9c:4d:3e:89:69:7d:
48:3e:8a:39:54:83:f6:2b:c3:05:be:b3:c6:6f:57:
1c:a3:33:5c:17:6d:ca:0b:3d:b1:9c:9c:52:c3:f2:
1e:4b:ef:19:7a:60:18:63:e7:5f:1c:09:84:41:70:
38:6d:19:31:cb:ba:d8:5e:fb:32:ea:fc:2a:f6:0a:
4e:41:f4:5f:7d:06:83:ea:53:72:2b:8c:c9:24:6d:
ee:a0:3c:74:3b:05:11:c8:a1:b3:d6:39:72:35:46:
f2:26:db:f2:2e:49:9a:24:41:83:f1:31:28:25:7b:
a6:aa:f9:04:1a:f2:72:77:81:68:ad:8f:4d:b9:9f:
90:8e:23:75:71:8d:9a:c8:3e:45:4a:41:9f:1b:c9:
c2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:36:C9:77:6A:92:85:D1:62:AA:76:44:E9:A5:28:13:88:6B:DD:20
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/CzbJd2qShdFiqnZE6aUoE4hr3SA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.104.0-46.249.119.255
Signature Algorithm: sha256WithRSAEncryption
12:ed:ed:28:51:f2:29:ea:01:97:36:9f:a6:4c:99:30:54:38:
2f:1e:68:43:ac:5b:d0:52:f6:c7:d9:a9:98:a6:80:dc:fe:8e:
ca:e1:38:ac:b3:5b:44:90:c0:98:a9:9a:13:8c:70:4d:37:d9:
45:dd:8b:77:c4:ac:54:88:46:0c:0b:49:72:b3:86:93:bd:91:
71:12:16:68:2a:b6:0f:67:10:82:a2:12:b6:74:4f:1b:df:1c:
a5:ce:43:fa:27:62:b2:7e:fc:6c:a3:92:9a:b7:da:71:17:52:
d2:2d:72:f4:7c:44:14:fa:35:a5:9e:73:59:f1:56:aa:ca:80:
de:df:a2:96:ca:8d:1b:cd:05:74:19:8b:bc:b7:7b:b9:f5:dc:
87:71:25:31:ec:bf:a3:f5:95:54:bc:da:93:20:de:f9:46:e4:
c4:a2:36:d3:05:b7:31:22:c2:2b:08:5a:43:3d:1b:b2:91:d8:
35:9a:67:39:19:98:3b:44:6b:8d:ed:7e:e4:bd:ce:14:39:50:
8e:ad:fa:39:2c:7d:99:f4:66:97:78:52:11:8a:86:c1:ac:14:
08:96:aa:70:ee:ed:a9:4f:8c:3c:76:62:34:71:c0:63:15:23:
92:ef:36:f9:b0:dc:a2:84:37:b6:3d:a4:cc:70:f4:2a:c6:bb:
3e:d0:40:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org