Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/N49147EiWgyLNEG7vbUmFTfnAjE.roa
File: N49147EiWgyLNEG7vbUmFTfnAjE.roa (raw, json)
Hash identifier: NEKhseRrdybZCMPlKnIgMXplNPu6NcItfvmAVF4os+4=
Subject key identifier: 37:8F:75:E3:B1:22:5A:0C:8B:34:41:BB:BD:B5:26:15:37:E7:02:31
Certificate issuer: /CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Certificate serial: 0181D23D199BA63F8173CB9C68D235C72E42
Authority key identifier: A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/N49147EiWgyLNEG7vbUmFTfnAjE.roa
Signing time: Wed 06 Jul 2022 06:40:28 +0000
ROA not before: Wed 06 Jul 2022 06:40:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50414
IP address blocks: 212.46.55.0/24 maxlen: 24
2a12:bc0:2::/48 maxlen: 48
2a12:bc0:5::/48 maxlen: 48
2a12:bc0::/48 maxlen: 48
2a12:bc0:3::/48 maxlen: 48
2a12:bc0:1::/48 maxlen: 48
2a12:bc0:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d2:3d:19:9b:a6:3f:81:73:cb:9c:68:d2:35:c7:2e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Validity
Not Before: Jul 6 06:40:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=378f75e3b1225a0c8b3441bbbdb5261537e70231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:05:40:18:86:06:46:dd:ba:62:5a:b6:66:
a7:69:90:0c:20:80:45:e8:1d:4d:b2:67:f8:bb:da:
4e:ac:90:b3:84:d9:57:38:c8:7c:ab:a3:dc:95:2b:
c4:a9:e1:e4:5f:16:36:3d:da:b6:0d:bf:bd:6a:75:
bd:4c:8d:71:df:21:d3:91:6e:54:37:a1:3c:73:a4:
6a:74:dd:ba:2b:14:1a:ae:df:f2:00:48:b8:45:ae:
1e:43:b7:6f:51:be:00:8f:e4:d5:2f:8f:ae:78:95:
32:16:d8:64:b6:f4:52:e6:c4:20:5e:aa:b8:fa:c0:
46:fd:09:40:2a:1a:d6:09:58:84:46:f9:33:cf:2a:
ee:63:4e:5a:aa:d5:31:05:95:59:04:b3:e4:82:ae:
b7:5b:51:96:bd:22:b9:c2:e0:75:f4:7b:90:6f:6c:
b7:72:17:d0:65:6f:70:79:d7:ee:77:47:a7:2b:b5:
df:f6:9c:ae:f5:c3:24:6d:cd:31:69:2e:78:be:23:
35:01:dd:f4:e7:73:27:1c:28:6e:0d:68:1b:94:9d:
61:fb:d3:8a:3c:a4:6e:d7:01:85:6c:64:4f:d0:1b:
c2:53:8f:05:66:20:59:cd:d3:6a:b2:be:d0:43:d5:
a1:e7:ea:14:af:f6:dd:4c:62:b6:17:41:ea:d6:80:
bc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8F:75:E3:B1:22:5A:0C:8B:34:41:BB:BD:B5:26:15:37:E7:02:31
X509v3 Authority Key Identifier:
keyid:A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/N49147EiWgyLNEG7vbUmFTfnAjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.55.0/24
IPv6:
2a12:bc0::-2a12:bc0:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7f:d1:3a:9f:20:01:e5:df:f3:9a:d5:0e:69:db:96:11:4a:ab:
62:96:f5:40:1e:fd:3d:04:56:bf:7a:a3:9e:3a:fa:46:11:b0:
cd:7b:38:0d:42:de:35:37:fa:4e:14:29:11:f9:31:9b:8d:e2:
78:27:4c:b4:2f:4f:6a:c9:48:7d:3a:11:e8:f9:93:d3:c8:67:
47:04:57:77:cb:93:65:b7:23:95:13:63:69:f9:b2:a5:fe:65:
e8:fc:82:1e:95:da:51:84:1e:0a:33:b4:27:7a:c0:d5:22:eb:
3a:4d:72:a6:aa:f1:64:e5:db:85:d0:21:0d:4e:3d:2e:0e:61:
37:db:76:69:65:71:d8:c4:23:95:53:f0:41:25:42:4d:27:4c:
8b:fa:a7:84:53:a5:9a:29:51:6d:9b:92:90:a8:3c:cc:59:fc:
02:04:08:55:e4:28:5d:fd:8e:2a:c2:fc:0a:e9:c7:0a:ac:bf:
9f:21:8c:09:84:29:e6:b1:cd:29:5c:dd:ef:1e:a6:35:c5:66:
b4:dc:40:2d:2f:93:5f:97:58:2c:ee:ec:c9:46:b1:d3:83:32:
f9:ad:06:03:16:13:4b:90:59:fa:2d:fa:5f:16:74:3c:36:eb:
1c:0f:74:ec:71:b1:1d:39:3c:74:28:be:83:ef:f1:85:3f:9c:
d0:a6:d5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:15 2024 by rpki-client on console-ams.rpki-client.org