Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/AQ6NhAE7FydYwo-rGXNMxXzf1xw.roa
File: AQ6NhAE7FydYwo-rGXNMxXzf1xw.roa (raw, json)
Hash identifier: wuzAcsONiCu/N7XdJsipqpBomA4HpDFFyRptUB8y3Gc=
Subject key identifier: 01:0E:8D:84:01:3B:17:27:58:C2:8F:AB:19:73:4C:C5:7C:DF:D7:1C
Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial: 018409849F22E438E3E0E3A88547F775A6AA
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/AQ6NhAE7FydYwo-rGXNMxXzf1xw.roa
Signing time: Mon 24 Oct 2022 10:23:17 +0000
ROA not before: Mon 24 Oct 2022 10:23:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 46.255.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:84:9f:22:e4:38:e3:e0:e3:a8:85:47:f7:75:a6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Validity
Not Before: Oct 24 10:23:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=010e8d84013b172758c28fab19734cc57cdfd71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:a9:e5:82:a5:5a:cf:f0:db:56:a4:98:5a:
0a:fe:4b:0b:35:d8:aa:65:ce:f9:6e:f1:38:ea:49:
39:c5:53:28:1e:33:a0:df:1e:dd:b4:c4:d2:3b:92:
b5:ac:03:c9:57:c5:78:e8:d8:fe:5b:ac:10:86:af:
27:2c:6f:a0:74:9a:7a:40:32:9e:e9:74:7d:54:09:
a6:f3:9e:72:b9:e3:52:b6:b8:f2:37:4d:07:03:77:
a9:f1:0a:c9:3a:51:e7:ba:57:59:99:86:7e:89:c2:
04:b7:cd:f6:4c:8d:3e:8a:55:c4:41:d6:4f:93:8c:
98:ea:a5:97:9d:26:fd:74:c0:92:c7:f6:c1:56:30:
55:a9:83:7c:a9:32:6c:63:2c:e9:84:45:00:06:8e:
0e:0e:87:8d:8e:89:b3:7b:e7:08:8d:c7:8f:9c:fb:
bd:4e:94:e4:13:0e:9e:c3:65:1d:c0:56:69:4c:1b:
18:eb:05:de:9e:b2:3f:41:a7:fb:29:91:cf:e2:19:
80:81:3e:b5:6c:80:f5:58:b7:4d:e8:4b:42:93:74:
a1:17:14:89:b2:e2:fc:97:67:0b:14:9e:4e:9e:a7:
f4:6a:24:74:98:1b:92:93:18:ce:bb:3f:14:11:b1:
3b:a6:9d:f9:15:c6:ac:87:51:47:e5:2b:42:42:8c:
53:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0E:8D:84:01:3B:17:27:58:C2:8F:AB:19:73:4C:C5:7C:DF:D7:1C
X509v3 Authority Key Identifier:
keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/AQ6NhAE7FydYwo-rGXNMxXzf1xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.76.0/24
Signature Algorithm: sha256WithRSAEncryption
12:62:ed:f4:85:02:a0:8c:72:04:4b:38:81:ee:a2:17:47:05:
04:33:cb:ff:6f:1b:46:ba:e6:a0:90:28:f0:84:d6:89:b0:db:
ac:9e:31:bb:b5:90:f2:7b:15:a2:aa:83:6a:a0:df:29:27:ab:
9d:a7:16:52:e7:b5:84:91:00:dc:39:a1:15:6b:76:d3:e1:eb:
0e:5a:c6:1c:34:08:ba:2c:93:7f:df:7f:c8:58:1d:f6:9d:01:
d1:bf:8d:16:94:b1:92:af:f8:8f:c8:8c:d5:6a:88:02:d9:d8:
9f:61:b4:0e:82:d6:8c:f5:cc:53:e4:44:e2:49:45:cb:83:ed:
0d:ce:2c:01:56:36:f7:49:cb:7e:39:4e:f0:9e:e2:81:44:40:
02:a0:19:4c:a1:fa:2c:0e:35:18:55:79:56:4c:2c:b8:2e:f4:
1b:15:67:af:27:0f:b2:6d:55:49:13:39:49:14:25:6d:07:b4:
68:34:ee:75:73:8d:61:42:5d:7f:16:b4:fd:2b:c5:ae:a5:6c:
3a:2d:f8:b5:04:4d:9a:4c:0b:61:99:8d:ff:5b:09:a7:55:14:
51:58:07:22:8e:7e:77:c0:a2:ec:80:f3:8a:d9:33:c5:96:18:
ca:05:99:c3:96:d1:07:e4:a1:3c:02:25:e1:1b:ea:45:09:64:
cd:56:d3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:22 2024 by rpki-client on console-fra.rpki-client.org