Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/d0SLKp_JVujHpOME6KikpeT4iKI.roa
File: d0SLKp_JVujHpOME6KikpeT4iKI.roa (raw, json)
Hash identifier: 8cYF1roKfGwWac23a9Er7knCqRm2I7zRHXho/pej7Vg=
Subject key identifier: 77:44:8B:2A:9F:C9:56:E8:C7:A4:E3:04:E8:A8:A4:A5:E4:F8:88:A2
Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial: 07B89C42
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/d0SLKp_JVujHpOME6KikpeT4iKI.roa
Signing time: Sat 01 Jan 2022 07:03:28 +0000
ROA not before: Sat 01 Jan 2022 07:03:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31198
IP address blocks: 46.18.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129539138 (0x7b89c42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Validity
Not Before: Jan 1 07:03:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77448b2a9fc956e8c7a4e304e8a8a4a5e4f888a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:6d:57:b5:a8:84:f2:45:a3:04:e0:24:29:
bc:0a:92:36:8e:1f:11:64:72:83:77:f7:a0:5c:6a:
dd:8f:e9:89:33:a5:73:64:cc:b2:94:f6:86:7f:9d:
bb:ec:35:6a:64:63:e3:2e:c7:c0:ae:04:1e:76:36:
9c:ee:08:66:53:82:5e:d5:38:61:dd:ed:84:de:23:
e6:6e:a8:2d:7e:8c:3c:82:39:53:8d:97:fe:1e:8b:
99:d7:eb:8a:51:d3:29:13:d1:cb:61:ba:61:a5:be:
10:9b:9b:a4:87:1e:31:26:2b:f1:fd:30:1c:76:0c:
05:8d:f6:14:27:b3:2b:23:04:62:4a:43:1d:ac:7c:
c1:1d:33:dc:af:7e:10:74:b8:73:fd:a3:6f:5f:e2:
98:b0:01:62:d4:79:0c:c5:97:4f:89:80:5e:1c:90:
5b:ba:be:f9:4d:ba:2a:16:93:3a:c8:e0:f3:dd:76:
a9:7c:12:fa:0e:b2:43:09:d0:05:bc:27:f9:b9:0f:
2c:d4:9e:c3:94:18:d1:95:f3:50:31:a5:1e:89:0c:
32:2f:51:01:83:c1:c0:a0:fb:b9:3d:2b:05:45:ca:
cb:90:dc:71:5f:25:b4:d2:f8:32:10:89:fe:68:be:
d7:12:a9:d6:13:8a:80:b1:cb:66:82:d4:29:08:6b:
ab:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:44:8B:2A:9F:C9:56:E8:C7:A4:E3:04:E8:A8:A4:A5:E4:F8:88:A2
X509v3 Authority Key Identifier:
keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/d0SLKp_JVujHpOME6KikpeT4iKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.152.0/21
Signature Algorithm: sha256WithRSAEncryption
37:d4:17:5a:fc:6d:a8:2c:19:a1:4f:87:ac:75:e6:b7:25:66:
e8:7e:1b:9a:74:cc:da:ac:97:ab:24:3e:46:f8:2b:13:af:2d:
d5:32:ec:8e:00:d0:ec:42:d8:7a:66:76:c2:5a:b9:ae:ea:94:
b6:ec:9d:50:0a:c1:46:a5:25:4e:e2:b9:f6:2a:86:19:ab:3f:
5f:7e:9e:62:dd:8a:06:83:36:9f:bb:13:76:f5:e9:e1:77:98:
e9:68:39:e2:7e:28:98:0a:84:46:fc:dc:94:9a:7b:be:30:44:
b4:02:a9:32:e7:5b:ec:14:43:95:74:61:38:58:b7:bb:04:a1:
b3:5d:f9:00:be:06:1d:50:65:0c:8b:e2:93:9c:7a:c1:93:87:
19:6d:51:db:94:4c:04:ee:40:59:e1:16:22:21:34:e7:7f:e0:
b3:37:e3:8a:c1:40:f3:1b:7f:c2:aa:00:06:c4:6c:a0:a2:c4:
dc:98:d2:27:d7:6c:b6:df:99:f4:df:f4:e3:28:5b:66:d2:c4:
bd:75:ed:94:ef:62:81:2e:cb:95:03:ac:d3:e1:c8:e1:14:fd:
d9:93:89:91:bd:0e:7e:4a:d1:0f:17:d4:e5:68:6f:90:ed:3e:
2b:3d:22:82:6d:ec:e6:2b:84:43:8f:0e:7d:78:3b:aa:0a:53:
a3:7b:07:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:25 2024 by rpki-client on console-fra.rpki-client.org