Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/OjyidNNYQDKk2tmxaiLQ8G26OQ4.roa
File: OjyidNNYQDKk2tmxaiLQ8G26OQ4.roa (raw, json)
Hash identifier: yMqx7eNl2o/lTVC2hxHApzR61oYkBa+FsPzKNEmW/24=
Subject key identifier: 3A:3C:A2:74:D3:58:40:32:A4:DA:D9:B1:6A:22:D0:F0:6D:BA:39:0E
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01835F8FBA86741E70564406AB88FA7CEA42
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/OjyidNNYQDKk2tmxaiLQ8G26OQ4.roa
Signing time: Wed 21 Sep 2022 10:19:58 +0000
ROA not before: Wed 21 Sep 2022 10:19:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202795
IP address blocks: 46.243.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:8f:ba:86:74:1e:70:56:44:06:ab:88:fa:7c:ea:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Sep 21 10:19:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a3ca274d3584032a4dad9b16a22d0f06dba390e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4f:9b:9c:5f:f6:d5:1d:e3:e0:98:20:b0:3b:
40:52:57:7a:0a:ba:f0:3c:ca:0e:d3:fa:d1:0e:d1:
c3:89:1e:f9:2d:aa:0d:cd:cc:8f:a1:05:66:67:d9:
1d:9d:b6:ce:69:93:4b:8a:61:1a:e3:08:d6:e7:97:
ff:fe:d4:e2:ae:0c:63:1e:0e:0e:9a:5c:6c:5b:35:
68:c3:b4:ec:61:45:09:a8:bf:6c:34:bd:a4:5b:60:
ab:71:0a:e4:39:b0:26:dc:ec:5b:30:05:9e:45:81:
c2:5c:31:20:d7:87:b1:33:2f:69:8b:d4:1c:bf:b3:
18:58:71:80:e7:9c:99:d3:07:0c:1b:da:f0:5d:60:
98:bc:3a:e6:28:4c:b4:de:45:08:92:0b:17:49:a0:
d6:9c:75:d1:09:1b:ab:9d:89:f8:23:31:ce:7f:27:
e6:dd:10:b5:c9:29:e6:b3:69:bd:87:f0:40:03:6b:
c8:e2:0d:e3:37:8e:89:2b:b4:aa:64:23:76:1a:0e:
61:b0:01:8e:18:7e:a9:2d:7e:27:18:94:1b:b2:fc:
3d:ca:42:0a:ca:f6:25:86:9e:2c:80:28:f1:b3:89:
8f:ea:5b:f4:4b:b3:71:88:46:f2:81:3e:44:a7:d0:
af:e3:63:23:2a:83:47:e2:55:c5:06:b0:e6:37:29:
6c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3C:A2:74:D3:58:40:32:A4:DA:D9:B1:6A:22:D0:F0:6D:BA:39:0E
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/OjyidNNYQDKk2tmxaiLQ8G26OQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.168.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a8:0d:54:b9:e7:f2:ee:0c:e8:b2:b4:46:39:3f:a9:52:91:
25:88:be:d2:f3:dc:23:d6:a3:e3:62:26:de:1f:28:95:7c:6b:
87:07:a3:c9:5b:07:10:67:3f:13:b6:65:8f:ad:ef:ed:d5:f9:
f4:a6:b6:78:93:f6:af:6b:ff:d2:d8:8f:c2:b7:9a:e7:e4:a9:
53:b6:ac:09:01:68:75:fc:54:01:8a:7e:90:7a:93:7a:c0:1c:
8a:5f:01:51:9d:a4:47:a7:aa:49:3f:17:c3:c1:89:98:c3:78:
3a:5f:2a:7b:d7:a8:6a:8d:28:8c:f6:a4:3b:ec:12:cb:a4:b9:
36:bc:17:f9:f9:f1:1d:73:51:9c:89:32:2f:9f:66:59:8b:2d:
7c:35:13:8d:73:8c:eb:91:22:86:cf:06:d7:d3:45:bc:27:e8:
0c:de:61:86:f1:66:70:80:f2:d8:97:e1:ad:1b:53:9e:25:77:
98:8e:b1:ea:7d:f4:b3:fb:c4:c3:8e:93:e8:ae:3b:fd:2e:89:
80:be:d3:02:2a:9a:8a:ff:ce:89:30:42:cd:f3:44:9f:3e:52:
bc:b2:13:91:d1:15:eb:e7:d0:92:3e:e7:21:c3:bd:47:c0:f5:
b9:71:ca:27:80:60:5b:7b:66:43:e1:c5:94:55:7a:83:05:d7:
30:33:fe:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org