Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/46vtXddH0EYc2bCvk0utwRZHhG0.roa
File: 46vtXddH0EYc2bCvk0utwRZHhG0.roa (raw, json)
Hash identifier: Qw/IiJmCUwHZ6qBMIYB/9+lJgNM1E4oTS3FgK4yaCEA=
Subject key identifier: E3:AB:ED:5D:D7:47:D0:46:1C:D9:B0:AF:93:4B:AD:C1:16:47:84:6D
Certificate issuer: /CN=416532420a21e42b8ad30da24ebf4347de95ef35
Certificate serial: 0183A1F278CCF5D2C089635A5A533C2E8EF2
Authority key identifier: 41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/46vtXddH0EYc2bCvk0utwRZHhG0.roa
Signing time: Tue 04 Oct 2022 07:42:45 +0000
ROA not before: Tue 04 Oct 2022 07:42:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207645
IP address blocks: 194.120.133.0/24 maxlen: 24
2a0d:b100::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a1:f2:78:cc:f5:d2:c0:89:63:5a:5a:53:3c:2e:8e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416532420a21e42b8ad30da24ebf4347de95ef35
Validity
Not Before: Oct 4 07:42:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3abed5dd747d0461cd9b0af934badc11647846d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:e1:58:2b:48:2d:f5:40:11:86:f4:31:a0:
78:c0:5d:64:64:08:3d:46:5d:83:8b:ff:5e:58:ac:
02:e5:66:2a:d4:70:e3:f7:e1:08:ae:7d:70:d0:74:
ad:49:08:1a:0a:a3:79:db:ca:e7:5d:6b:fe:87:85:
f0:c8:c8:0b:ae:35:e5:6f:a8:a5:e3:75:98:70:9d:
67:d0:da:25:b3:79:81:8b:7a:b6:ca:55:cf:5c:90:
cd:76:b3:e6:af:31:e0:8b:d8:f3:fb:6c:6f:7e:00:
f4:32:60:98:5b:dc:07:2d:be:a6:6d:08:1e:2c:2e:
cd:7c:c2:48:34:fa:a4:eb:25:c9:38:ff:f6:19:05:
9a:61:ab:76:65:05:81:88:3d:ee:8c:2c:1f:6c:05:
14:d1:a3:b9:7b:ce:d9:86:0b:2f:20:62:8b:e2:3c:
29:52:b1:2b:57:2f:a5:78:3b:65:da:82:50:1c:2e:
b0:21:22:fd:40:bd:4a:13:91:ac:f5:bd:61:8d:92:
02:5d:cc:8f:f1:3e:29:41:9a:1d:cf:d9:8a:49:31:
b7:10:bd:ec:32:a1:d1:a4:bf:1e:6b:81:b5:b0:8b:
0d:fa:e9:7b:d4:61:5a:76:a8:c7:fb:77:0e:5c:70:
33:9c:85:82:1d:43:ac:9e:a0:d6:49:31:90:e3:ea:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AB:ED:5D:D7:47:D0:46:1C:D9:B0:AF:93:4B:AD:C1:16:47:84:6D
X509v3 Authority Key Identifier:
keyid:41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/46vtXddH0EYc2bCvk0utwRZHhG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.133.0/24
IPv6:
2a0d:b100::/29
Signature Algorithm: sha256WithRSAEncryption
17:f5:06:b8:f1:f8:2c:d9:6a:d8:ab:ce:af:af:b8:5d:ba:f9:
4b:3e:a1:d0:9d:68:5d:ae:8c:1c:f7:10:94:14:93:10:d1:f3:
42:a9:bf:f7:3a:df:a6:5c:a8:73:ae:e6:b5:e2:23:a0:5b:81:
0a:b4:74:46:d8:95:4c:84:84:6b:b5:78:5a:8c:ea:70:02:76:
87:89:06:a1:af:2e:e7:2e:76:5b:af:85:c7:39:6f:e2:5c:70:
00:a6:22:bf:da:df:13:3f:86:06:f4:1a:a3:18:9f:c9:a4:20:
27:a8:42:36:72:a9:22:28:e9:54:84:c2:48:03:7c:54:5f:d2:
d0:c6:78:53:b2:4a:5c:54:93:0d:66:2f:3f:6f:d0:c6:7e:02:
22:a9:9d:37:a0:79:22:e1:02:6d:f5:ee:bc:ab:58:51:6f:75:
ba:86:85:d8:45:7f:1f:8d:d3:2e:9c:84:e8:55:8d:f7:52:43:
16:e9:54:2d:55:5d:4a:ee:8a:30:9a:2e:38:ee:63:6a:bb:ab:
b8:df:4b:b2:dc:b4:90:df:d0:86:55:a2:e0:a2:51:8c:65:6e:
53:06:dc:5a:45:a8:11:6d:f0:60:e6:8c:be:97:64:11:f5:07:
3f:ee:c0:76:7d:6b:53:92:70:92:54:ed:69:0a:6d:e8:42:b6:
04:11:d1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:37 2024 by rpki-client on console-fra.rpki-client.org