Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/J6VSmeOy39yt0c6TXzYtpyle-oc.roa
File: J6VSmeOy39yt0c6TXzYtpyle-oc.roa (raw, json)
Hash identifier: TF2QfSICo6Nk3x+UhTnW4wjHMaazdApJbA0NWV1S7ng=
Subject key identifier: 27:A5:52:99:E3:B2:DF:DC:AD:D1:CE:93:5F:36:2D:A7:29:5E:FA:87
Certificate issuer: /CN=173b0d7f0eac665733d92816dd49162d72e221f3
Certificate serial: 08ED1CFB
Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/J6VSmeOy39yt0c6TXzYtpyle-oc.roa
Signing time: Sat 01 Jan 2022 13:07:19 +0000
ROA not before: Sat 01 Jan 2022 13:07:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49821
IP address blocks: 46.175.12.0/24 maxlen: 24
185.236.64.0/22 maxlen: 22
185.236.68.0/22 maxlen: 22
2a0d:9f00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149757179 (0x8ed1cfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3
Validity
Not Before: Jan 1 13:07:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27a55299e3b2dfdcadd1ce935f362da7295efa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:2a:73:69:c5:12:51:d2:41:0f:2c:26:1a:
ea:43:82:8d:29:e9:14:a0:ab:47:e5:fb:24:4f:76:
7f:86:45:9e:03:a1:48:c2:49:0d:f8:28:5c:27:ba:
31:5f:b7:aa:b6:4a:4e:d4:28:3c:cc:99:41:40:50:
6c:e0:65:f9:04:ac:8e:27:28:ba:d3:90:e5:b0:21:
8a:ba:e4:e1:74:db:3b:f5:fb:f0:5d:4b:7f:8f:15:
09:dd:39:e7:67:c7:2f:3c:9b:aa:74:1e:3c:04:0b:
22:1b:ea:2e:b0:0c:50:11:bb:a4:25:26:9d:a2:ae:
f4:e4:f6:13:ab:4e:60:dc:e0:45:84:88:8b:02:d7:
81:82:f5:d7:20:1b:05:f4:ea:85:4e:78:fd:70:98:
0d:dc:6b:92:1c:81:1b:ce:ac:9b:96:8f:3f:95:5f:
19:96:5c:72:3a:58:8b:3c:b9:75:29:34:1a:c6:8f:
26:67:29:4b:e1:11:27:9c:7b:bc:4d:fa:49:3c:86:
b6:b1:93:52:6f:30:32:16:6a:09:2e:78:0f:cf:a6:
83:19:91:13:93:b9:ec:57:fb:40:28:4d:2f:fc:4a:
3d:cc:5e:f0:e1:ad:e7:d9:57:ab:a5:0c:ec:02:6c:
33:71:a8:14:78:a5:89:72:6d:d5:2d:59:a8:17:78:
8e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A5:52:99:E3:B2:DF:DC:AD:D1:CE:93:5F:36:2D:A7:29:5E:FA:87
X509v3 Authority Key Identifier:
keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/J6VSmeOy39yt0c6TXzYtpyle-oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.12.0/24
185.236.64.0/21
IPv6:
2a0d:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
a6:40:c2:20:03:4c:f7:3b:58:ca:36:51:56:d0:c2:72:f5:8c:
14:ff:e9:dc:69:d7:14:e1:dc:17:59:3d:d3:15:89:56:9a:97:
72:49:06:5e:24:a1:41:2c:19:28:65:76:d8:5d:85:cf:13:a5:
af:50:6f:0d:f8:e0:71:d6:02:bf:d1:b1:5e:b4:77:1c:d1:94:
04:d6:3a:ab:c2:02:36:2b:e8:bb:6f:f6:c4:31:6a:70:22:c6:
4b:69:ba:69:60:ad:c7:eb:31:a6:2d:d7:7e:21:49:76:06:9d:
aa:27:fb:24:f0:8e:05:29:ac:2f:4c:67:e3:e6:53:00:1e:73:
b3:d3:d2:9f:a7:27:4a:fd:25:d0:2a:70:4d:76:99:05:c0:61:
7d:86:e3:79:00:8b:1f:ba:74:cd:f5:62:71:e9:9e:f2:8c:68:
62:79:e1:16:b3:fc:0e:99:cb:f0:c9:95:9a:c3:8c:c7:31:f3:
f8:3e:45:2a:52:bc:e8:45:cf:00:87:8e:db:fb:ee:9b:00:7b:
02:9e:23:d9:8a:80:53:3b:19:bd:5d:fd:be:33:ab:6e:49:32:
b3:9e:57:32:27:d6:79:16:00:92:cc:af:b8:1b:34:a4:be:4a:
60:1e:86:b9:af:bd:76:eb:12:9e:c8:43:5a:a9:93:91:f7:9f:
89:ea:23:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:32 2023 by rpki-client on console-ams.rpki-client.org