Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/bGiOyOG1yXyRJBBlNe39uhVC-N0.roa
File: bGiOyOG1yXyRJBBlNe39uhVC-N0.roa (raw, json)
Hash identifier: JQlRZltMD+sqyBfvS1afopXHa0fg1CoGu7IiTD72bOc=
Subject key identifier: 6C:68:8E:C8:E1:B5:C9:7C:91:24:10:65:35:ED:FD:BA:15:42:F8:DD
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 038C9B
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/bGiOyOG1yXyRJBBlNe39uhVC-N0.roa
Signing time: Tue 22 Feb 2022 11:39:30 +0000
ROA not before: Tue 22 Feb 2022 11:39:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51795
IP address blocks: 46.18.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232603 (0x38c9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Feb 22 11:39:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c688ec8e1b5c97c9124106535edfdba1542f8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:eb:c5:09:6a:2b:35:4c:d4:de:1b:14:c5:
91:52:88:f3:d7:fc:ec:c9:08:f4:c4:ae:d4:d9:25:
7f:d4:d0:0c:e6:1b:fb:ad:7b:6a:1b:e3:2f:f6:29:
8d:73:af:f5:29:4c:77:f6:ce:5f:30:89:c7:1e:1a:
64:47:e8:e1:08:f5:19:73:24:7f:d3:7f:c3:1d:4f:
88:84:7f:b2:aa:38:a7:f2:0c:67:36:5c:1e:31:56:
9b:5f:e3:45:7a:d0:45:ea:96:b0:cf:1c:d0:bf:0d:
19:d8:18:46:4d:44:81:f1:2f:bb:98:4f:9d:07:9f:
7d:61:9f:f8:81:28:02:80:e0:96:b7:ab:47:49:50:
0b:7d:26:ad:79:d2:08:10:fe:5f:fe:1e:83:1d:53:
f8:7c:92:9c:43:50:50:3d:25:0b:b7:8f:6d:80:16:
f3:28:ad:96:a5:bc:d8:65:32:e4:f0:78:b1:02:c3:
43:14:12:ba:ba:23:73:cf:53:eb:46:b7:fe:df:2f:
ea:b5:ca:c4:41:b1:5f:7c:d1:ae:c5:8b:9f:b1:86:
10:03:fe:00:90:22:10:64:97:4f:e1:76:ff:c1:89:
9b:bd:06:b4:28:ef:9e:b0:85:f5:40:da:cd:2e:1c:
e7:97:21:d3:49:f6:3d:c2:23:92:f2:9b:54:9b:3e:
75:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:68:8E:C8:E1:B5:C9:7C:91:24:10:65:35:ED:FD:BA:15:42:F8:DD
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/bGiOyOG1yXyRJBBlNe39uhVC-N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.245.0/24
Signature Algorithm: sha256WithRSAEncryption
83:00:3d:20:48:41:b8:4e:9b:99:81:37:50:23:c9:27:7e:2c:
1a:b6:b4:b9:43:25:46:7c:67:26:a2:5b:01:b3:96:c3:2e:6e:
14:15:67:1a:48:d4:a3:e2:fc:58:0c:af:c6:d3:52:17:03:19:
e0:d2:61:c9:c5:1d:8d:7e:eb:6a:7c:6e:ea:7d:7d:f1:51:bb:
7e:ed:9d:95:57:95:9f:fb:8d:eb:12:81:94:6a:7c:9d:d2:08:
25:d5:3c:ee:9c:da:f3:01:06:bf:55:4d:05:af:ef:68:82:b6:
bc:29:75:bf:7d:5c:d1:2a:da:ce:08:a1:58:77:ad:15:d1:72:
b8:13:cc:0d:ef:26:fd:df:d4:70:66:bb:e2:3c:4b:89:a3:d0:
d1:5e:7d:2c:0f:5b:e5:83:16:ca:83:70:9b:79:f2:a0:dd:5a:
3d:29:2c:81:81:3c:a6:2f:5f:32:b9:4b:06:85:7f:2a:71:04:
c7:1a:cb:df:be:6b:86:60:d1:dd:8f:0c:af:c9:10:27:ca:d6:
86:65:c5:c8:cf:77:74:9d:fb:b0:67:02:21:3c:37:5f:8f:3d:
db:64:38:e7:56:03:5d:b8:db:24:1a:0a:a0:c5:6a:96:09:f9:
65:f0:19:f7:ba:34:ea:54:df:f0:b9:58:1b:a5:49:e3:4d:48:
2e:cc:e7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:07 2024 by rpki-client on console-fra.rpki-client.org