Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/zcf3zo5Y8bOA-Ut8wEYIzm2AKc8.roa
File: zcf3zo5Y8bOA-Ut8wEYIzm2AKc8.roa (raw, json)
Hash identifier: UbPajVMhiKUIX9cVjrRBFnZueHaBmpVz/YYOa/gOUfA=
Subject key identifier: CD:C7:F7:CE:8E:58:F1:B3:80:F9:4B:7C:C0:46:08:CE:6D:80:29:CF
Certificate issuer: /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial: 02A5AD24
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/zcf3zo5Y8bOA-Ut8wEYIzm2AKc8.roa
Signing time: Thu 19 May 2022 20:01:30 +0000
ROA not before: Thu 19 May 2022 20:01:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 46.254.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44412196 (0x2a5ad24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Validity
Not Before: May 19 20:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdc7f7ce8e58f1b380f94b7cc04608ce6d8029cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:39:b3:e3:63:3d:bf:12:cd:04:b6:c5:fe:d0:
8a:5a:cd:5f:0e:97:3c:eb:d4:b8:ea:44:e0:f9:55:
1d:cb:a4:79:7c:bf:fc:21:a3:30:05:10:87:c6:eb:
98:84:42:7f:05:65:65:cc:04:07:38:c6:fa:56:52:
51:ec:bd:6a:f3:f8:d2:71:3d:4e:60:0e:d4:dd:7c:
c3:86:4a:a5:e4:e7:10:e2:d2:3b:6c:bb:d9:1a:db:
b7:2a:65:98:dc:c0:44:10:94:06:82:4b:bd:d6:b8:
10:ed:94:a3:8a:8c:e2:c7:17:c9:3a:43:34:e4:16:
b3:39:56:79:f9:94:9b:1b:57:6d:70:7d:75:27:c6:
1b:2c:c5:70:4f:11:dd:f3:87:b4:83:da:ba:55:52:
25:9c:5a:ec:e3:e6:86:fb:ad:8d:fc:7d:35:eb:97:
31:3f:11:90:8b:2f:96:7a:8b:b2:e1:1a:1d:46:2d:
4b:87:62:4b:9e:7b:4d:42:62:33:4d:c8:49:a2:17:
1e:55:7d:a9:85:77:18:43:11:94:2c:7a:f4:d3:ba:
9b:52:a3:f7:ea:b3:f3:46:c8:b1:12:15:39:52:58:
9e:ff:ac:01:55:90:1f:e1:b9:ce:bb:81:a5:09:c9:
34:f4:26:97:dc:25:40:51:78:21:11:3c:85:df:61:
77:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C7:F7:CE:8E:58:F1:B3:80:F9:4B:7C:C0:46:08:CE:6D:80:29:CF
X509v3 Authority Key Identifier:
keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/zcf3zo5Y8bOA-Ut8wEYIzm2AKc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.106.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:34:26:7f:57:14:a5:5f:55:31:48:94:26:81:20:21:fa:d1:
53:2f:db:a1:90:65:ce:53:20:bb:b7:6b:67:e8:95:6d:d8:3e:
4c:e3:48:50:91:fa:03:01:bf:1d:07:ca:da:5a:81:fd:3c:98:
d0:a1:1e:cb:b4:fd:7e:dd:07:02:df:fc:47:1d:5d:57:df:d0:
a4:19:a2:f0:cd:5a:70:35:1a:a1:31:fb:30:58:f4:db:ea:e7:
7c:6a:63:33:8a:90:96:63:3b:92:eb:24:b2:fd:8c:24:10:9b:
77:15:5a:85:e8:5d:9c:a4:64:dc:1e:26:5a:dd:5d:1e:a6:97:
b6:95:62:58:85:54:1a:00:d5:2c:fc:b5:0f:3b:55:9c:37:e8:
2e:43:e2:ad:98:81:9a:5d:2a:5b:00:dd:94:b2:9c:eb:a7:18:
00:63:fd:63:a8:02:c8:aa:2e:db:bb:44:f5:2e:8f:75:66:da:
2d:33:8a:86:b1:d9:ff:b8:c5:54:56:fc:14:0a:d6:ba:f4:f1:
8c:07:7e:f9:1f:17:f0:6a:ee:24:eb:60:34:77:1f:e3:c7:db:
fa:a7:5f:f8:f5:56:ef:03:53:e7:6e:11:b0:07:62:25:55:3c:
3e:5c:d3:bb:7a:09:31:5a:21:8a:ee:a0:38:ad:2e:de:f1:2c:
b1:33:09:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:17 2023 by rpki-client on console-fra.rpki-client.org