Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/nbUgN9HqsS75BAy_GAKJLJd8N5A.roa
File: nbUgN9HqsS75BAy_GAKJLJd8N5A.roa (raw, json)
Hash identifier: R501cnqX+jJrrKkSn1ztoz0gsvmSp/CgPaDyNLwUHTc=
Subject key identifier: 9D:B5:20:37:D1:EA:B1:2E:F9:04:0C:BF:18:02:89:2C:97:7C:37:90
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 340E4B6A
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/nbUgN9HqsS75BAy_GAKJLJd8N5A.roa
Signing time: Sat 01 Jan 2022 04:02:39 +0000
ROA not before: Sat 01 Jan 2022 04:02:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201056
IP address blocks: 46.228.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 873352042 (0x340e4b6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jan 1 04:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9db52037d1eab12ef9040cbf1802892c977c3790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:d0:52:a1:ea:16:b0:4d:e3:d8:07:af:49:
70:52:31:2c:aa:5a:aa:94:19:aa:1a:dd:19:a0:f7:
4a:34:3d:3b:78:70:7f:5f:24:6a:d5:ca:65:22:87:
42:f8:86:af:0d:1f:a9:35:35:20:e0:0d:55:50:86:
1e:8c:17:aa:6f:1d:dc:7c:b4:24:f4:e3:f8:9d:e4:
8e:9f:1a:af:12:30:3c:65:79:4a:3e:d1:86:8c:dc:
05:d9:38:eb:8c:b6:92:5f:35:78:9f:7f:76:31:26:
2f:06:ce:be:87:88:66:47:9a:ee:3e:f9:bc:d5:8f:
ab:40:d3:ec:06:47:a3:b5:ad:66:0d:73:d2:1e:9e:
2c:d4:e9:a3:9e:5f:1a:1a:79:8c:77:88:3e:b5:62:
bf:80:9e:66:7c:c3:a2:f9:05:df:fc:8c:ff:3d:b0:
b5:b5:72:b4:25:1c:2d:8e:33:41:e5:50:33:5a:f1:
e4:35:ba:63:a8:cb:30:79:0e:e2:55:db:0c:65:e4:
64:cc:13:95:1d:26:30:6a:c2:14:68:eb:a1:a5:97:
84:d5:c9:ee:f0:fb:f1:66:d8:65:69:b6:b5:d1:62:
d8:4e:38:50:af:1a:9d:c6:d5:a7:ff:ef:19:85:82:
32:44:4a:73:c1:90:2b:13:12:37:72:e3:c3:d2:f3:
90:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B5:20:37:D1:EA:B1:2E:F9:04:0C:BF:18:02:89:2C:97:7C:37:90
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/nbUgN9HqsS75BAy_GAKJLJd8N5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.140.0/24
Signature Algorithm: sha256WithRSAEncryption
17:12:b4:fd:06:36:ea:47:69:93:87:cc:99:5a:b7:04:5a:56:
42:68:6e:15:fb:ae:7b:3a:96:91:a2:c8:91:55:8f:7f:f4:76:
0e:be:7e:e9:17:4f:fd:d0:9f:aa:51:2a:d3:b4:7a:0f:d1:28:
97:88:ea:2f:91:06:c1:01:b3:a4:08:f6:a8:8f:b4:af:83:b6:
4b:60:a3:26:13:86:2c:1a:96:75:ea:3c:f9:28:fe:bb:8d:95:
79:64:90:aa:cb:95:48:bb:51:92:6f:df:c4:00:d0:69:ac:23:
50:43:bc:76:34:2b:f5:df:88:74:bd:28:35:27:df:3d:b8:33:
ba:b2:f7:11:5b:d5:6a:30:36:40:f7:0b:c1:3b:d4:90:4c:31:
5b:40:c4:89:97:be:a3:e9:23:33:4d:1a:7e:62:a9:c4:1b:66:
9a:e3:54:d5:a3:de:54:6e:71:bd:67:a4:dd:34:df:e5:fe:19:
63:d6:4b:46:92:5d:ac:ba:ed:96:84:20:fe:bf:59:83:48:fb:
31:3a:5a:50:18:a7:7d:0a:ba:4c:af:c5:f1:e9:c7:12:44:39:
04:10:19:e7:76:5b:f5:84:a2:76:ac:5a:75:dd:78:47:2e:12:
3d:7a:72:e0:ee:59:59:43:f5:1b:01:bc:c8:15:19:7e:2a:24:
c7:2d:7f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:08 2024 by rpki-client on console-fra.rpki-client.org