Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/79f78b-8229-4f2d-a158-a525136fe644/1/ILIaWJGsXUvH35zN03w843o71o8.roa
File: ILIaWJGsXUvH35zN03w843o71o8.roa (raw, json)
Hash identifier: Hbz5L1ttfPO27+OroelSiA5vnjNlHCGeC+0RM7lbxT0=
Subject key identifier: 20:B2:1A:58:91:AC:5D:4B:C7:DF:9C:CD:D3:7C:3C:E3:7A:3B:D6:8F
Certificate issuer: /CN=5c38a31c79a7db71726dae38ec9d6d2d1a21fd91
Certificate serial: 03E1DB4C
Authority key identifier: 5C:38:A3:1C:79:A7:DB:71:72:6D:AE:38:EC:9D:6D:2D:1A:21:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDijHHmn23Fyba447J1tLRoh_ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/79f78b-8229-4f2d-a158-a525136fe644/1/ILIaWJGsXUvH35zN03w843o71o8.roa
Signing time: Sat 01 Jan 2022 04:53:40 +0000
ROA not before: Sat 01 Jan 2022 04:53:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35699
IP address blocks: 46.149.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65133388 (0x3e1db4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c38a31c79a7db71726dae38ec9d6d2d1a21fd91
Validity
Not Before: Jan 1 04:53:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20b21a5891ac5d4bc7df9ccdd37c3ce37a3bd68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:a8:a8:6d:fb:b2:c6:d2:e5:2d:d5:ff:70:
e2:ef:06:56:15:b2:b9:41:fd:41:be:ac:ce:b5:44:
e8:5a:64:72:5d:92:64:03:f3:71:3c:1a:d9:89:ef:
69:26:13:97:0a:52:18:1b:e1:50:3b:3e:2a:8e:e1:
7d:42:ef:3d:f3:1f:ca:e6:f8:3b:38:50:fc:10:cc:
ad:18:94:f6:8f:32:b7:86:75:3c:0c:40:fe:a5:4c:
cb:90:74:f4:fb:c9:1f:d7:cb:df:f3:8a:ed:d6:39:
19:5f:55:94:97:83:2c:93:17:61:28:d8:5a:66:d7:
b8:04:36:50:eb:cf:ff:80:ab:bd:2c:1b:8f:3b:2f:
6d:bd:1d:39:ba:16:87:40:4d:90:f3:0e:70:02:ac:
57:fe:fc:d9:d4:75:7b:5f:11:42:8d:56:6b:8a:95:
6c:76:a0:53:d6:26:2c:b7:58:58:ba:37:b6:50:e9:
6e:46:6f:cb:70:27:1d:ec:64:b5:37:1c:a9:7e:82:
d4:6d:c8:04:a4:08:a8:ea:58:3f:cc:41:70:73:67:
71:e5:66:4e:d3:71:89:15:55:3c:19:7a:f0:65:23:
3b:5f:89:6b:91:40:65:90:c7:d2:8d:66:4f:69:bc:
23:10:4f:23:5d:42:34:b3:18:3b:f9:f7:18:25:85:
f1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B2:1A:58:91:AC:5D:4B:C7:DF:9C:CD:D3:7C:3C:E3:7A:3B:D6:8F
X509v3 Authority Key Identifier:
keyid:5C:38:A3:1C:79:A7:DB:71:72:6D:AE:38:EC:9D:6D:2D:1A:21:FD:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDijHHmn23Fyba447J1tLRoh_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/79f78b-8229-4f2d-a158-a525136fe644/1/ILIaWJGsXUvH35zN03w843o71o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/79f78b-8229-4f2d-a158-a525136fe644/1/XDijHHmn23Fyba447J1tLRoh_ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.106.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:15:78:1f:9d:04:eb:a6:0d:50:db:84:ea:03:a0:df:17:15:
55:3a:35:97:c3:b3:88:11:d0:0e:1c:09:58:75:2d:bf:fa:c1:
bc:20:d5:19:fa:ec:4d:c9:eb:76:c5:7e:03:3f:9c:c7:06:93:
bf:a9:b7:f9:51:85:c5:d0:2c:ab:2c:cc:81:e7:be:80:9e:5f:
40:9c:ab:fe:55:ee:54:48:6a:b0:86:d8:ae:59:ef:b9:e1:22:
27:f5:19:b7:a3:f9:02:bd:47:d3:7b:15:de:97:04:cc:d1:24:
88:c9:48:72:51:d2:1c:b8:b7:45:7a:4b:b8:e4:6f:30:40:c9:
c7:7c:fa:1e:dc:33:cd:82:04:eb:c9:63:80:5b:5b:61:d9:cf:
a5:2a:db:9a:b1:31:6c:53:c2:47:36:de:c2:21:9a:a0:36:c3:
52:36:50:7e:d4:d2:7c:d4:62:5a:e6:e9:aa:cb:6f:f8:79:0b:
f4:9f:4d:73:cf:60:d4:08:f4:61:71:0c:bf:a4:d0:f4:ea:81:
4d:3f:89:ed:94:e2:e7:8a:76:ff:f5:b4:d5:b5:ef:8d:06:43:
e9:2a:a1:48:05:11:49:13:4d:f5:a4:70:67:42:9c:89:0f:0c:
f3:dc:b8:61:9e:a9:f9:ca:87:75:c9:4a:cc:7f:90:ea:f1:5b:
a0:39:14:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:31 2023 by rpki-client on console-ams.rpki-client.org