Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/y0FNP2wE-ULS0aqWfLADVkdOJzI.roa
File: y0FNP2wE-ULS0aqWfLADVkdOJzI.roa (raw, json)
Hash identifier: dynnOA77vsWVHf9bN2LepApUbdelQ1NiN9UY3gIazzo=
Subject key identifier: CB:41:4D:3F:6C:04:F9:42:D2:D1:AA:96:7C:B0:03:56:47:4E:27:32
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018542EA7C5C99C520154B0BE0AE2A234C30
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/y0FNP2wE-ULS0aqWfLADVkdOJzI.roa
Signing time: Sat 24 Dec 2022 06:55:41 +0000
ROA not before: Sat 24 Dec 2022 06:55:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51737
IP address blocks: 46.20.208.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:42:ea:7c:5c:99:c5:20:15:4b:0b:e0:ae:2a:23:4c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Dec 24 06:55:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb414d3f6c04f942d2d1aa967cb00356474e2732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:09:f0:df:23:cb:33:f0:da:ec:9c:ba:0e:
5f:f1:00:95:a6:18:74:c0:b2:c3:85:17:65:4c:e9:
a3:70:31:4f:28:df:d0:c2:9f:d6:9f:43:88:15:ce:
2a:cb:27:33:a1:dd:63:67:56:0b:97:9e:53:a8:c1:
36:df:1a:54:8e:60:e2:b6:d8:40:fd:69:97:fc:03:
61:44:c3:f9:b8:dd:57:4c:1c:21:90:84:14:bd:92:
6b:74:f0:db:23:73:8d:07:14:34:1a:31:81:93:56:
97:5d:b7:c5:4a:f3:c0:0a:4c:16:1a:fb:58:7f:c0:
14:60:a5:bd:50:57:83:cb:bb:74:74:7d:7c:ff:da:
d7:dd:31:c8:d8:ab:d4:ac:31:28:89:7c:52:19:fe:
a3:e0:3c:a7:77:5d:dd:17:96:72:48:eb:cf:2f:bb:
f9:02:54:86:e4:8e:40:51:c7:3d:36:72:b6:9b:ce:
33:bb:6a:8c:0b:4c:b2:84:3d:13:91:20:7f:3f:74:
1c:08:ed:c9:c8:fb:98:c5:75:eb:32:e0:f5:d1:14:
db:8e:a4:b3:b7:f1:f5:0e:9c:8e:e1:6c:f7:d8:73:
1e:4b:69:ad:8f:ef:fe:4e:85:e7:fe:9c:3a:18:76:
8d:1e:3e:4f:11:21:c2:96:8e:fb:56:52:9a:50:28:
ec:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:41:4D:3F:6C:04:F9:42:D2:D1:AA:96:7C:B0:03:56:47:4E:27:32
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/y0FNP2wE-ULS0aqWfLADVkdOJzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.208.0/23
Signature Algorithm: sha256WithRSAEncryption
01:2c:08:7c:5b:47:7b:eb:0f:3f:a2:e1:28:29:0e:55:8d:58:
ce:81:e9:05:03:9a:96:26:67:33:d4:b0:bd:7d:97:57:1c:08:
8b:3b:6e:75:33:f1:81:76:1d:02:63:90:78:e6:62:c6:aa:bd:
46:70:b1:3f:ba:17:ce:bb:88:1d:4e:73:c8:d3:00:91:aa:9e:
d1:80:1a:53:a8:17:a6:6b:ad:5b:05:03:4a:a7:e7:01:c9:b4:
4c:3b:77:bf:18:80:68:2a:2c:51:c5:f7:75:f2:b8:a9:b4:b5:
bb:ee:aa:a1:2b:a4:96:01:0f:ac:d2:02:a0:eb:9c:2d:68:bc:
24:25:6b:25:9a:d5:61:3e:e4:c4:30:e4:ef:4f:43:9a:05:63:
aa:dc:b1:97:b9:a3:22:72:9b:a9:97:b5:6d:a4:90:aa:e7:69:
28:43:40:63:c2:c0:91:f0:dd:87:c1:3b:a2:eb:14:60:04:15:
07:f8:f1:f6:1b:89:1b:7f:30:e6:9e:65:9b:72:4e:ea:69:9d:
f3:51:cc:42:0c:49:84:1d:2f:f9:3c:b5:0c:40:d2:96:1c:41:
a3:24:c2:7a:c6:29:e9:7f:47:ce:42:bb:29:9d:8d:2d:de:4d:
52:98:12:02:36:ed:91:8d:ea:92:3d:2c:1e:f2:9e:b2:40:15:
0b:90:c9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org