Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/959e6c-8dc6-47a8-9171-ba09a5945c8e/1/0ZqkSec71jbMlWdz7LjenL9ZqcM.roa
File: 0ZqkSec71jbMlWdz7LjenL9ZqcM.roa (raw, json)
Hash identifier: H+BPOg3sgUPDcU0synW39AWNKdftDl0R3SJZ6qhureI=
Subject key identifier: D1:9A:A4:49:E7:3B:D6:36:CC:95:67:73:EC:B8:DE:9C:BF:59:A9:C3
Certificate issuer: /CN=164c704e1a013644af74850c0bbf5b6f6cb71ae0
Certificate serial: 01154468
Authority key identifier: 16:4C:70:4E:1A:01:36:44:AF:74:85:0C:0B:BF:5B:6F:6C:B7:1A:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkxwThoBNkSvdIUMC79bb2y3GuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/959e6c-8dc6-47a8-9171-ba09a5945c8e/1/0ZqkSec71jbMlWdz7LjenL9ZqcM.roa
Signing time: Sat 01 Jan 2022 01:52:59 +0000
ROA not before: Sat 01 Jan 2022 01:52:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202024
IP address blocks: 46.31.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18170984 (0x1154468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=164c704e1a013644af74850c0bbf5b6f6cb71ae0
Validity
Not Before: Jan 1 01:52:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d19aa449e73bd636cc956773ecb8de9cbf59a9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:ef:09:a2:9d:50:cf:d8:e9:e1:4f:9b:8c:
51:91:43:f7:62:82:0c:04:f6:07:56:57:4a:85:c3:
9d:0f:c2:3a:c7:eb:f7:81:53:74:ee:78:a3:58:27:
da:03:d6:12:16:df:53:fe:1b:b5:8b:50:2b:56:b4:
80:a4:ca:c4:ba:b4:5f:c3:72:18:95:7b:fc:71:f6:
c5:cf:90:96:5f:79:ed:7d:b7:ed:6d:28:a6:2d:be:
74:ed:3e:ce:c3:4a:66:bf:bd:37:38:04:5a:b8:99:
fe:7d:33:a6:5f:75:c2:70:61:1c:a7:a6:55:43:53:
d5:10:58:9e:aa:06:8a:9c:37:4e:32:fa:72:3e:05:
a6:93:a7:41:21:9f:8c:a5:4f:72:cc:11:e1:5d:e9:
ac:56:26:1e:a0:07:b4:ae:d3:ba:c3:fc:ed:68:6c:
13:2b:a9:cd:7d:c2:f5:0c:de:ed:3d:7e:b0:ad:a2:
a6:67:a0:fb:c0:14:a3:cd:59:59:ca:9f:51:0c:60:
78:de:01:2a:af:69:bb:e2:6a:1b:08:92:a8:1e:75:
c6:e0:69:7c:5c:c3:9f:7e:46:19:74:8e:e4:29:9e:
62:f9:10:9c:f1:d8:0a:61:59:5c:00:0f:af:ad:50:
ce:a1:6f:51:1e:14:f6:e7:b9:e3:01:c2:f5:40:f0:
9c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9A:A4:49:E7:3B:D6:36:CC:95:67:73:EC:B8:DE:9C:BF:59:A9:C3
X509v3 Authority Key Identifier:
keyid:16:4C:70:4E:1A:01:36:44:AF:74:85:0C:0B:BF:5B:6F:6C:B7:1A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkxwThoBNkSvdIUMC79bb2y3GuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/959e6c-8dc6-47a8-9171-ba09a5945c8e/1/0ZqkSec71jbMlWdz7LjenL9ZqcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/959e6c-8dc6-47a8-9171-ba09a5945c8e/1/FkxwThoBNkSvdIUMC79bb2y3GuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.70.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:25:90:fd:45:4e:eb:10:b3:80:94:28:ef:3e:b0:30:4d:e6:
54:e3:0d:39:a0:d8:ce:4c:83:57:48:e2:73:1c:f4:53:6b:b1:
a5:96:3d:2c:4b:5e:13:13:b8:15:a1:fe:18:30:03:29:19:4d:
c2:3f:f1:b6:b4:eb:f8:7f:12:48:a5:b0:99:8f:94:29:9e:b8:
6a:96:11:74:c2:f3:59:53:14:9a:8b:14:8c:86:5d:39:08:e2:
c2:ac:78:cc:c6:3b:73:0f:0f:37:8c:2e:0a:64:be:70:20:b4:
ec:d2:05:41:ca:af:33:98:0a:5a:b8:f5:e4:eb:14:e1:e0:e7:
5d:ca:42:66:47:54:02:04:79:c3:99:65:65:3f:49:47:f3:a6:
85:1f:94:9b:d6:65:6e:5b:59:04:fa:ba:f8:fb:60:25:af:e6:
ba:71:c8:b2:07:3d:1b:5b:15:dd:4d:58:95:d2:7a:72:d4:cc:
68:6e:7b:f0:d2:4e:90:46:aa:f8:12:83:16:a9:6f:72:cf:e9:
38:3e:b4:3d:1f:56:68:1c:8c:21:fe:9e:66:68:21:25:b4:06:
b7:00:63:ba:71:e5:5f:60:df:b8:77:64:47:80:07:d4:ac:c9:
1a:f6:13:c3:da:bb:02:41:5f:55:7a:9e:76:36:74:f9:22:ca:
84:5d:b0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:31 2023 by rpki-client on console-ams.rpki-client.org