Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/659064-157b-46ed-abe0-1c805d603343/1/dJ3hf2egbvx3bL5QnYf6w-g6Qhg.roa
File: dJ3hf2egbvx3bL5QnYf6w-g6Qhg.roa (raw, json)
Hash identifier: toF+79/jPoGZ/eu1TadegbRro+ABBY7DVtBNUSVIGUU=
Subject key identifier: 74:9D:E1:7F:67:A0:6E:FC:77:6C:BE:50:9D:87:FA:C3:E8:3A:42:18
Certificate issuer: /CN=fe0b3e321ff93f31632eb9928f55c80de242efc5
Certificate serial: 013F8EC5
Authority key identifier: FE:0B:3E:32:1F:F9:3F:31:63:2E:B9:92:8F:55:C8:0D:E2:42:EF:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gs-Mh_5PzFjLrmSj1XIDeJC78U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/659064-157b-46ed-abe0-1c805d603343/1/dJ3hf2egbvx3bL5QnYf6w-g6Qhg.roa
Signing time: Sat 01 Jan 2022 13:03:37 +0000
ROA not before: Sat 01 Jan 2022 13:03:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210835
IP address blocks: 46.226.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20942533 (0x13f8ec5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0b3e321ff93f31632eb9928f55c80de242efc5
Validity
Not Before: Jan 1 13:03:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=749de17f67a06efc776cbe509d87fac3e83a4218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:f7:63:f6:ed:85:87:0b:b5:05:c8:36:eb:
27:16:dc:4f:6b:78:02:e2:fe:9a:73:e5:3a:c5:2d:
3c:43:8f:86:2a:56:eb:fc:36:98:71:36:a8:c9:7c:
01:18:c5:1a:03:e3:d8:8a:10:1f:50:85:2e:35:84:
b4:f5:84:25:ed:2b:25:b7:64:8c:0b:87:7d:07:06:
74:f1:b7:6d:f3:db:28:bc:29:b1:06:37:93:18:e8:
a6:82:c4:e6:63:8e:94:ef:b3:b3:23:be:16:95:8e:
64:5b:5d:c0:c7:f9:8f:2a:e8:c7:ae:d8:6a:23:b7:
68:0e:61:c7:65:9d:48:73:3d:c2:2f:2f:3e:25:68:
15:88:dd:85:fe:51:23:5f:44:c7:14:57:e4:5a:cd:
23:ba:4f:f2:e6:10:7e:e7:93:20:e5:b2:b2:fb:82:
a3:8b:57:03:e0:49:bf:f2:d0:f9:ce:40:f1:4b:52:
59:5c:7d:39:8c:85:5d:43:26:f1:ed:a3:8f:ce:cc:
ee:9f:47:ce:6a:f2:08:ca:5c:1e:7c:17:d1:b1:58:
9e:c2:bf:d8:1d:7d:31:84:80:04:18:aa:cb:67:97:
8e:0b:8f:50:31:30:83:9d:c5:ab:c7:0f:ea:f1:d4:
67:c8:c5:33:4d:7e:ad:db:d3:5e:c6:16:6a:a5:14:
5d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9D:E1:7F:67:A0:6E:FC:77:6C:BE:50:9D:87:FA:C3:E8:3A:42:18
X509v3 Authority Key Identifier:
keyid:FE:0B:3E:32:1F:F9:3F:31:63:2E:B9:92:8F:55:C8:0D:E2:42:EF:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gs-Mh_5PzFjLrmSj1XIDeJC78U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/659064-157b-46ed-abe0-1c805d603343/1/dJ3hf2egbvx3bL5QnYf6w-g6Qhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/659064-157b-46ed-abe0-1c805d603343/1/_gs-Mh_5PzFjLrmSj1XIDeJC78U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.121.0/24
Signature Algorithm: sha256WithRSAEncryption
42:6b:38:30:f1:0c:65:73:26:b2:77:9f:75:9f:70:1c:18:28:
cf:fc:7e:1c:06:dd:a2:68:62:8c:f5:fd:6a:c5:92:05:19:f0:
38:ec:06:93:01:e8:2a:f0:a9:7b:24:10:af:e3:2e:2c:cc:e2:
ac:09:e9:c4:2e:0c:c3:8d:73:82:b3:83:d6:da:65:41:cb:d6:
b5:67:6b:1e:74:03:13:1f:2d:01:f9:77:7b:5d:43:3b:dc:96:
d0:9f:fa:76:30:35:15:0e:17:c4:e8:3a:83:da:7f:fd:26:4e:
ae:0e:e3:4e:cd:af:d9:1c:b2:bf:a7:28:fa:bd:a4:f6:9d:d1:
12:2d:4d:59:ad:b8:74:77:ea:49:3c:25:f0:53:7d:72:52:5e:
cb:f3:19:f5:0b:75:8f:1f:eb:24:0e:90:7e:ab:fe:80:db:6a:
5a:fc:54:f6:3d:ff:71:ac:dd:67:22:cc:39:94:85:2b:a5:34:
b0:c2:fc:8a:4d:e1:01:8a:c2:30:1b:c9:18:ae:4d:33:af:63:
e4:cd:0f:06:18:ef:c2:ee:be:1f:d4:af:f9:7a:e0:3b:c5:39:
24:f3:1c:c3:6d:b4:99:1f:58:fa:78:1b:8c:f1:c2:bd:15:89:
cc:84:59:39:be:53:68:17:46:17:a9:9c:9f:fb:af:b2:3c:06:
d1:d2:97:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:49 2023 by rpki-client on console-fra.rpki-client.org