Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bRAZI6gtD9oatPIOJOwLXoLORz8.roa
File: bRAZI6gtD9oatPIOJOwLXoLORz8.roa (raw, json)
Hash identifier: yhkC/IzU2m7WokbMmXBE7WsaTQ60Dmp/CalJ6x042gk=
Subject key identifier: 6D:10:19:23:A8:2D:0F:DA:1A:B4:F2:0E:24:EC:0B:5E:82:CE:47:3F
Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial: 04BFF950
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bRAZI6gtD9oatPIOJOwLXoLORz8.roa
Signing time: Sat 01 Jan 2022 09:57:51 +0000
ROA not before: Sat 01 Jan 2022 09:57:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59643
IP address blocks: 46.175.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79690064 (0x4bff950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Validity
Not Before: Jan 1 09:57:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d101923a82d0fda1ab4f20e24ec0b5e82ce473f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:6b:1d:ab:90:d5:90:ea:99:8c:94:b3:25:
ee:aa:37:c3:66:02:22:22:ac:2a:2c:39:26:18:84:
4d:c2:d6:db:0a:c4:37:66:b1:00:cf:53:ae:eb:36:
4e:e1:5c:fd:5c:4e:75:c9:c9:43:45:59:7e:bd:69:
d9:ed:bf:f4:3e:b1:54:5a:5f:9b:78:54:60:db:93:
0b:c7:df:d7:01:71:f8:e1:64:74:3a:ad:9b:e3:4e:
3d:4e:88:db:7e:d0:1a:cb:4e:29:b8:a6:af:04:3e:
4b:b2:88:db:18:09:27:21:67:18:fd:29:6d:0e:b8:
12:c0:67:02:1c:fb:64:04:27:f2:88:6c:79:0e:55:
72:55:a5:14:8a:69:c1:de:49:3c:c3:cf:5c:59:34:
1f:19:78:43:73:ff:a6:b1:d9:a3:c4:1c:c8:ff:e3:
d9:af:fa:5d:ea:ac:cc:a9:79:25:59:d8:ee:2f:4b:
29:75:73:34:52:b4:aa:d8:22:ba:14:c0:e0:b2:a4:
ea:6b:db:f5:8c:e7:5d:c1:ce:81:89:77:b8:e1:d3:
fd:28:1b:82:31:5f:1c:41:a1:4c:9a:9e:d8:9a:92:
ea:b2:0d:da:8c:92:21:0d:aa:c7:24:00:8b:2b:41:
ca:be:5a:0e:49:ff:70:56:83:36:d2:1d:9d:ac:e2:
e5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:10:19:23:A8:2D:0F:DA:1A:B4:F2:0E:24:EC:0B:5E:82:CE:47:3F
X509v3 Authority Key Identifier:
keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bRAZI6gtD9oatPIOJOwLXoLORz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.13.0/24
Signature Algorithm: sha256WithRSAEncryption
84:64:dc:7f:53:f0:02:46:92:c5:aa:d7:28:d2:c8:ba:30:4f:
75:0e:9f:01:6c:5a:75:7f:a2:ae:db:ea:88:92:5f:42:69:5e:
41:a5:72:ad:73:c9:3d:98:05:25:fc:5f:43:2e:8c:39:ed:4e:
38:03:be:fb:85:8d:71:cc:fc:77:93:0b:ac:e6:dd:3e:51:41:
92:64:9b:14:0f:c9:35:41:58:46:d3:3f:8b:51:76:86:bf:47:
12:25:2b:b0:8b:38:45:de:d3:e5:ff:ee:11:fa:a8:eb:20:b5:
9a:d2:76:ba:4b:f8:79:65:75:89:49:75:03:eb:ac:9d:88:36:
19:75:bf:8c:da:81:a8:2d:17:75:d2:0e:ad:12:b2:cf:0d:7c:
33:c6:84:22:ce:a3:b2:5e:65:9b:73:4d:73:ff:2e:e2:f0:11:
92:f6:f4:2a:5d:80:fa:9a:eb:8e:17:c2:0b:89:17:27:c3:e4:
c5:a7:74:8e:d0:9a:d0:14:1c:94:13:c2:7f:0c:c2:80:f8:e7:
28:e4:a2:f5:66:ba:5e:83:ef:d9:ce:15:87:d4:84:08:ad:26:
4a:a1:b3:ad:b8:d1:59:bf:25:78:b7:2e:d8:1a:87:e0:f3:7a:
4f:95:31:99:4c:4b:2c:5c:8c:04:75:fa:15:84:5b:b1:e6:73:
3b:ab:24:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:45 2024 by rpki-client on console-ams.rpki-client.org