Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/z3JklHIHMPwHRnfpqi13bu39ubw.roa
File: z3JklHIHMPwHRnfpqi13bu39ubw.roa (raw, json)
Hash identifier: wiypAiVw/gxOZK2DJ2bK4Rul+cbbwKCQqo7DsKK9+fk=
Subject key identifier: CF:72:64:94:72:07:30:FC:07:46:77:E9:AA:2D:77:6E:ED:FD:B9:BC
Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial: 37DF9C25
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/z3JklHIHMPwHRnfpqi13bu39ubw.roa
Signing time: Sat 01 Jan 2022 14:58:54 +0000
ROA not before: Sat 01 Jan 2022 14:58:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36040
IP address blocks: 46.28.246.0/24 maxlen: 24
46.28.247.0/24 maxlen: 24
193.33.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937401381 (0x37df9c25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Validity
Not Before: Jan 1 14:58:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf726494720730fc074677e9aa2d776eedfdb9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:c0:02:20:a4:ce:91:d8:d1:09:f9:94:ed:
e4:34:99:fc:95:86:ed:65:2d:47:28:8b:ba:20:42:
dc:d7:d3:7a:4b:27:ab:b4:d9:89:6d:24:96:26:20:
72:37:75:45:a5:b9:a1:2d:cc:9b:c3:b1:bf:e0:d7:
69:aa:15:f1:ad:43:87:90:bd:24:b8:54:78:a4:74:
70:b0:50:65:6d:18:9d:60:eb:68:21:1a:37:82:cc:
2d:eb:1e:f4:99:69:ef:78:6c:ef:99:42:d8:c5:0b:
b7:ad:5e:61:20:c2:64:66:f3:ad:a1:51:ab:9f:32:
8d:ac:9d:45:64:aa:42:cd:b9:a2:b3:b5:56:7d:a5:
1b:f5:18:9d:45:70:44:9b:92:78:30:c1:4b:83:d6:
8f:54:0a:2d:ed:44:e0:8c:f5:13:12:e1:d9:af:74:
ff:f0:9e:da:a3:32:07:6d:30:0b:a8:fa:e1:cd:45:
2a:eb:fd:bf:0f:f6:31:49:14:dc:75:99:f1:d3:fd:
da:da:3d:20:f5:f7:bc:eb:f1:f8:cf:0f:21:f4:34:
5e:9a:19:6b:85:1b:8b:27:b1:cc:d8:77:23:ca:1d:
9b:25:57:8e:9c:80:85:4e:43:72:75:da:50:8f:3e:
b6:24:8c:6b:b4:ba:1c:13:69:ee:ed:5e:47:f1:ec:
eb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:72:64:94:72:07:30:FC:07:46:77:E9:AA:2D:77:6E:ED:FD:B9:BC
X509v3 Authority Key Identifier:
keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/z3JklHIHMPwHRnfpqi13bu39ubw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.246.0/23
193.33.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:3a:cd:5a:35:2f:71:22:06:a4:4f:8d:28:5f:85:dd:23:6c:
63:71:86:33:bb:ae:77:96:db:82:58:04:14:a4:b4:81:28:e6:
b8:00:b8:af:43:a5:65:ba:b6:26:e5:4f:f7:6c:99:fe:bc:64:
13:c8:d1:d1:95:e4:99:92:a7:d1:a6:1c:b2:1b:9c:76:42:b5:
b7:e0:a0:f8:24:0b:50:ad:0c:a1:0c:a6:67:78:61:49:0a:04:
cb:7c:55:c4:8d:75:f7:82:2a:f8:c4:17:26:88:b4:1e:f6:33:
d1:ce:ec:e1:ee:6a:24:5c:d9:37:31:33:6c:0e:54:89:87:e7:
1d:74:c8:1b:be:27:50:e7:bc:c8:37:c1:2f:34:76:62:27:5a:
56:6c:f2:f1:12:6b:39:36:60:37:4f:be:d0:ea:c0:77:13:13:
52:3b:6e:04:ac:be:27:a0:ee:e7:f0:42:59:53:c0:0b:d5:05:
0b:cb:ec:b4:6a:b0:d7:7b:85:45:ad:aa:9f:5b:68:09:94:a1:
7b:2b:a0:ea:90:16:d2:14:18:30:c7:c9:8b:75:7e:b8:84:4f:
66:0a:fe:42:34:08:98:19:76:ee:ec:68:36:07:d0:e4:e0:c1:
ae:b5:68:f7:ac:e2:21:3e:a8:72:6e:75:b4:86:ce:0d:de:30:
d5:8a:69:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:12 2024 by rpki-client on console-fra.rpki-client.org