Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/IWpv_R7tNc4wDbK4TGkpMD56_dQ.roa
File: IWpv_R7tNc4wDbK4TGkpMD56_dQ.roa (raw, json)
Hash identifier: uQIPIJ6CUeANZZsnyQ65NSwJTsu2wV5U2j8BQXnni6A=
Subject key identifier: 21:6A:6F:FD:1E:ED:35:CE:30:0D:B2:B8:4C:69:29:30:3E:7A:FD:D4
Certificate issuer: /CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Certificate serial: 08D41E0F
Authority key identifier: 8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/IWpv_R7tNc4wDbK4TGkpMD56_dQ.roa
Signing time: Sat 01 Jan 2022 04:59:18 +0000
ROA not before: Sat 01 Jan 2022 04:59:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 46.174.136.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148119055 (0x8d41e0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Validity
Not Before: Jan 1 04:59:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=216a6ffd1eed35ce300db2b84c6929303e7afdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:cd:3d:65:f0:c5:30:40:1b:13:6c:d3:c1:
6b:d7:8e:e1:30:66:45:a4:a4:22:fa:3b:60:84:16:
a8:7f:30:a9:d2:e7:18:84:4e:36:92:69:fc:67:d7:
95:ea:8b:31:26:ca:ed:ba:85:53:e0:04:14:e2:0b:
cb:3f:2b:e4:6a:79:84:30:17:ca:1d:fb:ee:cb:58:
ae:3a:64:43:30:0e:97:d6:8f:8a:fb:86:7f:06:ed:
37:0b:98:51:c5:82:3b:d0:56:01:37:5a:96:b3:07:
f5:80:0a:dd:85:64:4d:97:84:1a:8e:ef:3e:76:0f:
d6:a7:90:d4:4c:80:9c:35:62:8c:5f:37:76:06:ad:
8a:d2:64:bc:17:58:4c:7a:73:cc:60:ec:c9:89:b7:
3e:ff:f9:a6:68:9d:51:90:36:a5:00:a7:6c:f4:b1:
d8:c7:d2:b7:49:20:d2:5b:d4:c1:bd:c1:fb:f4:9a:
57:ed:92:8a:1d:ab:f6:df:db:bb:04:5c:12:02:dc:
ed:01:d1:30:16:d5:65:4f:99:7c:05:ad:26:35:40:
67:da:61:de:0a:e6:4c:22:f3:fa:94:6d:6d:f5:9b:
f2:2b:05:ba:04:3f:3b:52:11:45:ff:6d:92:df:50:
ca:81:d3:ab:16:7c:2b:80:c9:71:fc:bf:79:cc:38:
3d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6A:6F:FD:1E:ED:35:CE:30:0D:B2:B8:4C:69:29:30:3E:7A:FD:D4
X509v3 Authority Key Identifier:
keyid:8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/IWpv_R7tNc4wDbK4TGkpMD56_dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.136.0/22
Signature Algorithm: sha256WithRSAEncryption
18:9f:7b:3e:5f:0f:8c:54:d8:a6:c8:2c:06:87:cb:83:be:c1:
07:f7:38:bd:9b:96:68:80:39:c1:14:46:56:23:05:9a:fe:6b:
5e:88:3a:f0:27:61:98:0e:f7:cd:93:55:f0:c8:54:54:25:a3:
91:34:01:2d:59:0b:cd:f3:21:d6:fd:59:16:43:b9:ef:ba:a6:
c2:71:4a:d4:6a:2b:ff:56:ac:ab:0e:88:11:b7:47:49:17:36:
64:9f:0e:62:74:8a:e4:3d:b1:a5:87:a0:a3:16:de:32:b8:22:
05:4e:67:7f:2f:13:ff:59:f5:29:ba:d0:e9:cf:6a:18:62:24:
4f:54:b1:b1:02:1a:9e:0a:e8:ff:bd:f6:a7:fa:b6:48:5d:8b:
14:9f:3e:59:1f:c7:88:ec:80:5b:dc:86:7a:a4:84:f6:68:9f:
c8:99:2c:c7:17:ba:1d:87:dd:7c:09:01:03:b1:c5:1f:03:5f:
1e:46:91:39:e1:43:53:8b:40:88:62:66:f1:02:c8:be:70:20:
3c:20:56:5f:eb:fd:18:6d:22:43:11:55:f0:57:53:28:b5:24:
2d:69:3d:cd:7c:7e:97:61:f5:a5:eb:a2:63:9a:f2:7d:6b:05:
56:ca:76:b4:2d:be:6a:aa:a6:09:0b:21:93:5e:28:62:fb:d6:
4e:71:9a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:36 2024 by rpki-client on console-fra.rpki-client.org