Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/weB2k0cpKB5FpDQvYaenIkY5T2Y.roa
File: weB2k0cpKB5FpDQvYaenIkY5T2Y.roa (raw, json)
Hash identifier: uVd7vjlhbFPfcMi5EOP4dEi0Qav1jTEp7tzkcjSaT7I=
Subject key identifier: C1:E0:76:93:47:29:28:1E:45:A4:34:2F:61:A7:A7:22:46:39:4F:66
Certificate issuer: /CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Certificate serial: 179C4A15
Authority key identifier: 4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/weB2k0cpKB5FpDQvYaenIkY5T2Y.roa
Signing time: Wed 13 Apr 2022 22:41:45 +0000
ROA not before: Wed 13 Apr 2022 22:41:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211401
IP address blocks: 185.46.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396118549 (0x179c4a15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Validity
Not Before: Apr 13 22:41:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1e076934729281e45a4342f61a7a72246394f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:a2:ab:33:5c:7e:1a:fa:a2:ce:c5:4d:80:
83:27:a2:35:a8:cc:45:0d:a4:58:5b:5e:a8:89:05:
04:f4:d9:65:2b:bd:b0:c4:6f:8e:ae:9c:6d:e7:33:
6b:2e:a3:c1:4d:24:79:7d:de:e7:10:9b:d7:e4:7b:
40:5e:92:77:e9:8b:1a:bd:de:d0:cf:90:37:d8:92:
f8:d9:92:df:17:11:1d:83:ec:2f:0c:a2:8d:30:64:
dd:2f:8f:07:99:9e:22:34:8b:e6:14:b8:22:08:cf:
e0:76:d9:b2:d4:1c:1d:a2:20:a8:80:2f:0c:58:52:
85:bd:24:3c:2c:66:3a:db:6c:37:a5:ec:ab:53:63:
c2:79:56:f7:04:56:74:93:75:72:0e:e1:b1:11:34:
98:72:a7:e7:e2:71:8f:a3:40:66:07:4b:a8:97:58:
18:9a:ba:24:24:df:a2:39:59:cc:2c:d4:1a:65:f2:
36:0c:e3:2e:2e:32:01:62:62:f7:b8:d4:e0:b4:2f:
75:57:b6:a8:fd:bf:5e:f3:40:34:c6:98:85:13:81:
14:3f:86:27:39:48:53:16:70:31:8f:bf:45:6a:1d:
7e:63:99:a5:53:ce:af:f6:05:f6:0d:d5:a0:8b:f4:
4e:c5:25:46:f6:13:2d:78:fc:7f:e4:a1:1d:dd:75:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E0:76:93:47:29:28:1E:45:A4:34:2F:61:A7:A7:22:46:39:4F:66
X509v3 Authority Key Identifier:
keyid:4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/weB2k0cpKB5FpDQvYaenIkY5T2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.40.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:c6:5b:df:45:1b:40:a7:8c:38:73:94:4b:85:15:80:4a:c7:
06:70:59:c5:21:b9:b2:bf:ff:6a:ea:94:bb:5f:1e:a7:35:11:
ee:9d:0e:0c:5b:64:37:82:bf:13:10:5a:f7:1a:a9:0c:5c:34:
4d:f8:fe:12:25:00:9d:b9:03:b6:15:5c:27:a1:9d:f5:97:dd:
e1:3c:e9:47:94:c3:3b:e3:c6:25:9d:e5:0b:30:fc:3e:6d:a6:
bd:70:9b:af:67:e7:fa:3e:2e:4b:a5:ba:68:94:8b:33:6f:1a:
3a:9c:a7:a8:96:b1:95:28:00:ed:69:71:5e:07:01:04:4d:77:
b7:43:8a:d3:05:74:6f:72:cb:50:9d:44:23:e8:cf:fd:9e:1a:
b2:fc:70:d2:2b:f4:e9:67:cf:89:b9:93:bb:e5:d5:19:42:a5:
15:8a:df:db:e7:2f:aa:ca:1d:5f:5b:ec:0b:14:bc:55:cc:08:
0f:40:d2:37:df:f0:73:d9:dc:e6:22:bd:6d:73:61:d2:5e:85:
03:ef:25:f8:54:c5:5d:56:1c:52:a2:c6:78:80:ba:50:7a:cb:
8d:de:b7:00:ca:3d:4e:08:39:15:e5:6b:d5:bf:93:13:f8:6e:
3b:26:8e:72:2f:40:ef:8c:b7:71:f3:e2:c6:31:cf:82:44:99:
a2:dc:88:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:12 2024 by rpki-client on console-fra.rpki-client.org