Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/CgXntRGfcdTPaJp9UCZrYrA8yUU.roa
File: CgXntRGfcdTPaJp9UCZrYrA8yUU.roa (raw, json)
Hash identifier: f6+PTP6GrFHejoFyzad3Ohdk2uGfROrnipCyMqe7EZ4=
Subject key identifier: 0A:05:E7:B5:11:9F:71:D4:CF:68:9A:7D:50:26:6B:62:B0:3C:C9:45
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16DE48AA
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/CgXntRGfcdTPaJp9UCZrYrA8yUU.roa
Signing time: Sat 01 Jan 2022 12:01:36 +0000
ROA not before: Sat 01 Jan 2022 12:01:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62010
IP address blocks: 46.243.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383666346 (0x16de48aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a05e7b5119f71d4cf689a7d50266b62b03cc945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:62:74:e2:ca:2c:b9:ad:41:69:0e:b5:5d:
bd:50:ba:34:52:7e:86:8d:0e:9c:86:ab:33:7e:e7:
2a:7d:aa:3a:0a:7b:3c:97:d8:32:c0:fc:5d:fd:db:
16:d1:f4:22:3a:2a:d6:72:24:ce:60:e2:80:50:09:
45:94:11:a9:00:fc:bb:00:0d:b7:4f:13:64:42:eb:
73:30:60:b0:0a:9a:7e:a1:c5:3f:87:66:68:f3:82:
ab:b3:15:c9:ae:83:8b:04:5d:a0:b7:43:15:36:aa:
c9:cd:04:32:d8:9d:48:d2:8f:41:52:f4:59:24:db:
65:2e:6a:a9:1d:e3:5d:a0:b5:5e:72:25:6e:1d:89:
a2:6f:5d:24:cf:35:b2:a0:6a:8d:63:b2:75:32:8b:
95:e6:e0:80:b0:16:fa:ad:5a:4d:12:e0:07:d1:da:
8a:97:5b:a2:97:c7:12:87:42:98:b8:3f:e0:e7:c0:
97:8a:13:d7:f8:24:01:ce:14:ad:cd:71:54:92:3a:
7a:b2:50:77:b8:58:9e:90:cd:8e:ce:df:f1:f1:df:
d9:db:42:1b:8c:49:f7:f8:fb:a9:1c:0e:68:3d:44:
40:bb:f6:4c:66:ac:d5:b1:0d:12:c5:92:02:d9:d1:
8d:63:28:7d:94:d7:1d:ac:33:c6:df:d0:f7:59:b3:
2c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:05:E7:B5:11:9F:71:D4:CF:68:9A:7D:50:26:6B:62:B0:3C:C9:45
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/CgXntRGfcdTPaJp9UCZrYrA8yUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.174.0/24
Signature Algorithm: sha256WithRSAEncryption
00:72:88:ee:6a:0d:d3:43:ae:83:bc:77:c3:7f:26:e8:a9:e7:
5c:85:8a:9b:da:69:95:0a:38:d8:43:13:de:42:a9:c8:80:a1:
0c:10:89:44:b6:59:3a:84:d9:d1:4c:70:96:87:41:01:3b:2e:
57:67:47:33:7b:d0:d2:d2:32:ae:1a:0d:95:8a:67:0a:68:73:
f5:eb:f8:2d:00:92:0e:2f:1f:12:f5:03:33:b9:38:41:f1:81:
af:91:82:67:23:b6:69:94:06:9a:3a:f5:73:0e:0a:8e:df:ef:
3b:51:83:59:a1:4c:ee:5e:f5:20:e8:d2:a8:f4:93:0c:f8:ca:
93:af:8c:7b:49:fa:09:b6:88:b2:72:f6:76:31:05:8e:1e:24:
e1:b0:99:cc:58:b3:7e:6b:b6:47:b4:c8:94:68:68:07:f9:4a:
16:a0:21:9d:19:aa:10:35:f6:45:d0:c3:3d:b2:2a:30:69:e3:
73:6a:13:91:87:76:81:ba:00:50:fa:08:0d:5b:80:ef:a2:0c:
60:64:fa:84:e1:67:8f:c8:98:35:be:ee:70:89:cf:f4:80:c9:
8f:02:18:9e:0b:cf:f1:c7:16:26:30:ad:77:31:38:41:5d:61:
16:a8:47:03:c9:fb:5a:a3:e1:95:89:9c:e2:06:5c:fd:ba:1b:
ac:82:4c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org