Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/g8U3rmjiedj7GoWQ9MmuzvRZI1U.roa
File: g8U3rmjiedj7GoWQ9MmuzvRZI1U.roa (raw, json)
Hash identifier: cD/rHN/hIkOfudNFjWC3TU+vFUF1DtMfgLsHkiW/dyg=
Subject key identifier: 83:C5:37:AE:68:E2:79:D8:FB:1A:85:90:F4:C9:AE:CE:F4:59:23:55
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0183594B6EA497586B2C2E648A12BC5C55C3
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/g8U3rmjiedj7GoWQ9MmuzvRZI1U.roa
Signing time: Tue 20 Sep 2022 05:07:39 +0000
ROA not before: Tue 20 Sep 2022 05:07:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 46.249.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:59:4b:6e:a4:97:58:6b:2c:2e:64:8a:12:bc:5c:55:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 20 05:07:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83c537ae68e279d8fb1a8590f4c9aecef4592355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:25:2e:ed:e2:3b:25:3c:6b:49:3d:94:d9:ae:
24:e9:d1:c6:28:44:9e:94:ec:26:f2:15:84:68:6d:
42:88:18:bf:77:cd:41:23:13:50:01:a2:7d:59:f8:
f0:7e:26:c4:ed:fe:ed:03:39:e7:a1:b8:2c:ae:5d:
c1:b1:6a:f3:f7:a1:b5:db:e8:1e:ab:05:1d:cd:55:
24:0d:f5:ce:1c:6d:25:d9:44:19:95:f2:88:4e:90:
7e:a2:1f:30:a1:ee:35:b7:c0:f0:c9:b4:6d:a8:e8:
5c:6e:42:1a:c6:57:e2:d0:84:04:bd:7f:d4:59:88:
0a:2a:e8:c7:43:e1:36:77:9a:cc:55:d3:e4:17:6a:
5f:ab:37:db:bd:21:73:a5:8e:df:d0:80:d7:a2:8e:
d7:ac:79:ad:b2:df:77:6c:a9:80:22:87:b0:8f:40:
ef:89:4e:b2:3e:4e:a1:f6:de:30:c2:92:c3:75:72:
78:f0:19:d1:3a:14:75:14:2f:10:7f:16:8e:25:b6:
20:ad:0d:72:7c:2b:ba:56:f7:5b:89:42:55:42:e1:
a5:f8:58:77:be:d1:c4:29:18:0b:47:76:53:b6:56:
0b:71:d2:00:c7:01:2f:1c:0e:66:5e:b1:ab:7e:bc:
a4:72:9e:9c:5f:7f:89:65:02:ae:8c:e1:2c:0e:a7:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C5:37:AE:68:E2:79:D8:FB:1A:85:90:F4:C9:AE:CE:F4:59:23:55
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/g8U3rmjiedj7GoWQ9MmuzvRZI1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.100.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:df:62:80:dc:15:f3:18:fc:12:12:c9:7c:fd:81:a8:de:0f:
3b:32:17:75:6b:96:8c:1a:0f:b2:b7:c0:a6:0f:80:d0:e3:38:
06:57:7c:1b:c9:17:49:11:43:09:9c:50:51:de:d5:2a:6b:7a:
fe:2f:42:0f:79:c7:34:f5:c3:71:50:f3:f9:db:a3:13:db:bf:
b8:bf:3e:8f:c6:98:be:86:3b:f7:18:84:91:e3:b5:d2:9c:09:
1a:88:63:73:e0:7b:f1:93:9c:c0:46:1b:6f:cf:46:21:ba:63:
73:15:c3:bf:25:38:15:80:df:2c:bb:03:41:68:32:63:b1:1d:
27:be:f7:63:e5:3b:82:5c:45:26:87:96:65:f3:1f:cc:ed:bb:
9b:54:81:2a:2a:44:df:62:59:d3:47:cb:91:b5:39:49:ad:30:
fc:c0:87:cb:8e:92:78:90:ba:79:cf:a0:ef:36:c2:66:8b:90:
45:58:78:11:f0:27:e7:18:df:f3:f2:6c:84:8d:df:63:2e:90:
f5:33:a4:52:13:ee:97:5f:a6:7f:a2:0f:72:4c:ca:bb:7a:6c:
1f:93:4b:5d:86:dd:c1:d3:7d:73:04:b2:45:08:ed:92:82:cc:
cc:20:fa:a8:3f:a4:64:ad:d1:8d:4b:35:64:17:d1:57:2e:e7:
fc:23:66:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org