Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/hH1k0d6HHzG8qDPzMCGLIX_IRT4.roa
File: hH1k0d6HHzG8qDPzMCGLIX_IRT4.roa (raw, json)
Hash identifier: FhfsXSZQwnetfY9qj3Q92BJYzP9ECKCJLknrg/TDJsQ=
Subject key identifier: 84:7D:64:D1:DE:87:1F:31:BC:A8:33:F3:30:21:8B:21:7F:C8:45:3E
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16D1D9F5
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/hH1k0d6HHzG8qDPzMCGLIX_IRT4.roa
Signing time: Sat 01 Jan 2022 12:01:30 +0000
ROA not before: Sat 01 Jan 2022 12:01:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50673
IP address blocks: 128.0.68.0/23 maxlen: 23
188.72.68.0/23 maxlen: 23
46.243.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382851573 (0x16d1d9f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=847d64d1de871f31bca833f330218b217fc8453e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:11:11:8b:5c:fc:32:a4:bb:be:a4:58:01:
33:b8:4c:e0:e9:b9:fc:a9:7d:2d:f8:f4:f6:16:70:
c3:b2:c8:35:fb:e5:f8:5e:fa:06:5a:e1:ce:44:fc:
ad:e5:67:b3:6f:1a:9d:ae:79:68:cb:90:03:bd:95:
22:f8:59:ea:22:6a:5a:e8:93:92:d4:4c:a2:84:c7:
2c:ac:4b:49:9b:b1:46:c4:0a:20:10:7c:59:c9:c5:
ae:82:dd:28:1b:c5:0f:1b:0c:ff:3f:67:0b:27:65:
27:33:ac:61:56:e2:3b:69:3c:23:5e:02:7d:e1:a2:
15:d8:26:78:43:7f:03:f5:71:bc:5c:f5:46:a9:ee:
8a:a2:fa:89:ec:88:e1:78:19:a0:6c:c7:1f:32:d3:
2c:f8:18:58:e8:49:0a:9b:22:3e:eb:52:5f:b8:c0:
3a:12:de:6c:ca:1d:41:3c:63:fc:2b:32:8f:88:ee:
f3:de:8e:81:c7:bd:7f:17:8c:01:c1:36:76:d0:db:
a4:2d:5d:2d:e7:c3:d9:19:de:53:03:72:51:b3:14:
3c:3b:de:88:09:63:fc:7f:27:98:e9:09:ee:16:fb:
0c:a3:8d:75:3a:97:96:18:fe:2d:b8:1b:bc:53:5c:
03:b7:ea:9e:f4:33:c0:1d:38:d2:bf:fe:12:3f:cd:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7D:64:D1:DE:87:1F:31:BC:A8:33:F3:30:21:8B:21:7F:C8:45:3E
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/hH1k0d6HHzG8qDPzMCGLIX_IRT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.188.0/22
128.0.68.0/23
188.72.68.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:51:73:b6:07:dc:40:ab:bd:86:b7:2c:54:00:e2:3b:fc:b2:
88:da:5a:3e:06:33:dd:c5:70:e8:4c:49:f8:4f:df:c9:43:33:
a2:77:7d:aa:4c:a2:d1:79:77:5c:6f:e1:e7:88:a0:bf:0c:dd:
45:68:90:6b:9e:ac:ab:73:d1:9b:46:88:e4:01:44:6d:fb:a1:
fb:12:31:dc:80:08:b6:9a:50:a5:a8:31:5e:30:1c:70:99:ea:
d7:f1:58:a7:be:05:f0:8c:60:c3:0d:3c:68:68:2c:34:ac:f3:
e1:e1:c9:b8:3f:8a:d9:a3:bf:5f:0f:00:47:5d:d8:8c:3f:ed:
dd:a4:bf:d8:3c:2d:c5:a8:f2:70:2c:c9:ea:47:05:04:f9:b7:
e6:43:e8:3d:86:00:df:97:30:9c:0b:42:34:be:1f:1b:77:bb:
98:e2:47:11:f9:93:9e:2c:25:94:3e:96:8f:ec:42:ba:57:09:
e7:c3:64:bc:f2:74:f1:a5:73:ad:19:01:26:5a:44:d5:2d:88:
e5:99:53:89:4f:33:32:5f:15:f0:63:6a:8b:fe:f6:e2:25:82:
77:aa:2a:d5:33:34:de:63:14:05:62:fd:95:33:79:4a:97:e2:
f4:50:be:48:2f:f7:e8:2d:61:7a:30:62:e6:08:c2:69:bd:c9:
88:a8:36:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org