Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/1-O4yUMmnqaTe2bFwOoR2GsQaelk.roa
File: 1-O4yUMmnqaTe2bFwOoR2GsQaelk.roa (raw, json)
Hash identifier: e/C/M0vQhjD+mJhQDw8Gbr+b76+LL6t4u451uV6an6o=
Subject key identifier: F8:EE:32:50:C9:A7:A9:A4:DE:D9:B1:70:3A:84:76:1A:C4:1A:7A:59
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0184E62004D8CA5560E42C30ED0B919B4D4B
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/1-O4yUMmnqaTe2bFwOoR2GsQaelk.roa
Signing time: Tue 06 Dec 2022 06:29:28 +0000
ROA not before: Tue 06 Dec 2022 06:29:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 46.20.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:20:04:d8:ca:55:60:e4:2c:30:ed:0b:91:9b:4d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Dec 6 06:29:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8ee3250c9a7a9a4ded9b1703a84761ac41a7a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:de:f9:db:a8:5c:0b:31:64:5b:f9:e7:98:e0:
74:dc:21:41:0b:64:79:78:62:5e:6b:e1:a3:44:ed:
2f:98:86:11:f9:59:e2:66:ea:69:ef:b4:98:44:3b:
45:02:f0:0e:c7:2a:22:be:78:0b:3a:6f:0c:2a:9e:
2c:6b:4d:73:d6:dc:a5:d9:82:0a:45:a1:27:a3:2e:
cb:a1:d0:be:42:5e:77:ca:d1:44:7c:71:b2:b6:a2:
21:b6:ab:10:bf:f6:b3:58:8e:32:7f:25:4c:6d:8b:
0a:38:86:d8:4a:f6:bb:17:73:3d:c3:76:dd:f6:ad:
8e:33:88:b7:2c:33:77:91:33:6e:be:49:2a:c2:da:
37:a6:05:57:30:b1:be:89:c3:5f:f7:24:73:b4:4c:
6e:93:1b:b0:80:4f:67:d3:e4:4f:b0:9d:5d:24:6f:
30:39:05:f3:25:b6:db:7b:ec:87:99:7b:04:46:34:
73:6e:71:a3:70:e2:5b:6c:25:6c:96:fe:b2:10:6e:
7a:7b:7f:b8:0f:44:e7:61:0f:ee:99:4f:e2:f7:16:
6c:cc:47:f3:89:e1:75:db:0f:3b:52:00:53:43:51:
62:af:74:7b:ee:b2:ea:2f:cc:25:41:34:35:2e:82:
e5:50:47:f7:97:06:7a:7a:c0:75:98:ec:fb:d2:17:
e4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EE:32:50:C9:A7:A9:A4:DE:D9:B1:70:3A:84:76:1A:C4:1A:7A:59
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/1-O4yUMmnqaTe2bFwOoR2GsQaelk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.212.0/22
Signature Algorithm: sha256WithRSAEncryption
40:ea:85:42:12:2a:48:90:a3:bc:12:73:7e:d6:e0:58:c5:61:
77:49:30:db:0a:b1:87:b9:38:28:a9:3b:87:a5:60:d5:66:b3:
f7:2c:f2:e6:3e:8e:29:46:ce:25:be:da:26:0b:60:2a:2a:a5:
5d:77:29:f2:6d:cf:79:ba:e9:2b:d4:ce:b7:f6:79:4b:26:ff:
37:cf:31:96:95:bb:7e:69:84:61:41:be:df:b9:05:57:fa:11:
68:5c:a7:f2:fb:7d:70:09:47:1b:9f:3e:c6:e4:6c:89:69:96:
db:5c:3b:04:37:5c:c2:46:b0:36:fb:b7:f3:dc:68:6d:02:06:
98:69:aa:7f:53:86:38:d8:4f:37:85:7d:4a:c6:fa:81:7f:0f:
ed:d6:2f:d4:9a:d6:5a:96:2c:99:20:d8:ea:5e:02:64:60:20:
a0:4a:0f:a8:98:4e:03:51:63:2b:3e:98:01:6f:ee:e6:ef:77:
4f:16:4c:2d:dc:55:1e:ae:09:82:c0:7b:3b:50:be:02:59:bf:
eb:b5:93:2b:1a:3f:39:e7:f2:e7:c0:d8:1a:86:e0:e1:c7:ad:
34:5d:fd:75:6c:e4:53:96:ae:da:d8:3c:e7:70:a0:7b:47:a4:
97:c9:cf:47:f7:af:a4:c1:e9:fc:cb:3c:ad:f3:5f:94:5b:64:
f4:26:79:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:46 2024 by rpki-client on console-ams.rpki-client.org