Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/6ZUWrMdMhrLhzT1j055OzI0wQuY.roa
File: 6ZUWrMdMhrLhzT1j055OzI0wQuY.roa (raw, json)
Hash identifier: PQLd7sByoeHx8B4XyDEdgSPQ1KCmIy7TbuwGKSHmWN8=
Subject key identifier: E9:95:16:AC:C7:4C:86:B2:E1:CD:3D:63:D3:9E:4E:CC:8D:30:42:E6
Certificate issuer: /CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Certificate serial: 06BB56E9
Authority key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/6ZUWrMdMhrLhzT1j055OzI0wQuY.roa
Signing time: Thu 28 Apr 2022 07:55:47 +0000
ROA not before: Thu 28 Apr 2022 07:55:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197369
IP address blocks: 46.16.40.0/21 maxlen: 21
46.16.45.0/24 maxlen: 24
46.16.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112940777 (0x6bb56e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Validity
Not Before: Apr 28 07:55:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e99516acc74c86b2e1cd3d63d39e4ecc8d3042e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:62:c7:2d:ab:6a:61:34:0b:6e:e4:7c:62:
1d:0c:b4:dc:83:e4:72:0b:6f:f4:76:2e:c1:c5:2a:
a0:8a:9d:a3:17:b6:57:35:5a:c5:0a:60:a5:5f:10:
04:86:32:83:95:a1:ec:2a:bb:8b:a8:81:41:61:bb:
6e:ea:d2:ff:34:63:65:a3:fa:de:ba:09:b9:bf:ff:
e5:80:70:37:30:b7:a8:03:8b:aa:0c:c0:38:fa:ac:
7d:bd:6b:c2:9d:65:32:cb:87:24:6e:36:9e:c0:06:
ac:bb:9d:69:ac:3e:0c:19:10:a7:a4:51:c5:3f:e4:
70:bb:5e:92:6d:22:fa:5d:c6:ca:e0:40:a0:28:36:
2c:fd:26:7e:01:7e:98:2b:92:5f:cd:a6:9e:1b:ad:
92:d5:6a:02:59:6f:77:a7:12:8f:e9:0a:24:91:be:
66:14:19:33:33:37:77:7a:89:11:94:96:ab:9d:83:
f9:3d:07:e9:5f:7a:7f:a0:25:5f:98:f1:3b:a4:6a:
c9:a5:91:94:57:06:28:6b:93:a8:9b:99:68:59:b1:
6a:9b:6c:ad:93:35:22:c9:a7:13:aa:ac:d9:bd:54:
1b:e4:21:0c:d7:28:69:a2:70:ec:ce:83:8b:00:34:
92:05:35:9f:20:90:48:95:fa:75:21:14:26:56:25:
47:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:95:16:AC:C7:4C:86:B2:E1:CD:3D:63:D3:9E:4E:CC:8D:30:42:E6
X509v3 Authority Key Identifier:
keyid:C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/6ZUWrMdMhrLhzT1j055OzI0wQuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.40.0/21
Signature Algorithm: sha256WithRSAEncryption
22:0f:a6:92:cf:82:d9:7d:f9:c4:0f:e9:60:9c:66:59:69:c2:
64:56:bd:92:d8:6f:09:43:8c:34:a0:e7:26:eb:eb:48:94:31:
0b:6a:7a:e3:56:3c:96:8b:0a:a4:37:83:23:05:95:9f:14:b3:
9d:a3:29:82:d9:2b:46:de:b1:da:bd:b4:e2:10:62:30:5e:ca:
41:46:e1:fa:9d:1f:5a:20:1a:f8:70:be:0e:57:d4:94:37:3e:
7b:0a:a4:d5:d7:e1:d6:15:0b:10:0a:8e:46:c5:83:4b:98:b0:
24:5a:37:1f:c6:5d:95:15:ab:db:57:41:39:ab:04:31:7b:b7:
03:c6:96:a7:c6:27:dd:7c:21:f9:3a:a6:44:ba:80:fa:d1:d5:
46:06:c7:03:f2:09:4a:6c:6a:f7:a8:03:e3:5e:76:85:a4:b8:
ac:a2:27:19:8f:0e:df:32:78:06:33:36:83:68:60:74:74:e4:
e2:fc:66:e8:c5:1a:8a:ca:77:69:66:9c:b1:4d:45:86:45:5a:
c7:d8:3a:66:78:f8:dd:5c:19:7a:96:d9:f9:33:e2:d4:41:f6:
a7:e8:30:51:27:f9:6c:de:62:01:d5:d2:74:c1:0b:fa:52:6e:
bb:16:a4:e9:e6:6b:88:70:f8:65:64:2d:90:14:0c:05:f7:8f:
99:04:b5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:59 2024 by rpki-client on console-fra.rpki-client.org