Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/KSlKZcBLA7RylKFDOhRHSin2u4Y.roa
File: KSlKZcBLA7RylKFDOhRHSin2u4Y.roa (raw, json)
Hash identifier: HFagWA9D1uCes6v0d9wjcWPCtkqKJlXRAYNSRJC750U=
Subject key identifier: 29:29:4A:65:C0:4B:03:B4:72:94:A1:43:3A:14:47:4A:29:F6:BB:86
Certificate issuer: /CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Certificate serial: 03F2793C
Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/KSlKZcBLA7RylKFDOhRHSin2u4Y.roa
Signing time: Sat 01 Jan 2022 03:51:42 +0000
ROA not before: Sat 01 Jan 2022 03:51:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56364
IP address blocks: 46.173.208.0/22 maxlen: 22
46.173.208.0/24 maxlen: 24
46.173.221.0/24 maxlen: 24
46.173.222.0/24 maxlen: 24
46.173.220.0/22 maxlen: 22
46.173.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66222396 (0x3f2793c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Validity
Not Before: Jan 1 03:51:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29294a65c04b03b47294a1433a14474a29f6bb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:b3:d2:fe:2f:82:29:4d:76:a4:0e:d5:c8:
b8:7d:c5:36:c5:c1:a8:c6:36:75:4a:ae:27:88:7a:
9b:02:1f:76:f7:82:a1:7a:f5:13:bb:4d:97:37:65:
9e:6d:a7:04:a3:11:52:0f:7d:35:49:18:46:21:57:
12:06:8d:d6:ef:4c:6a:d7:b9:ef:05:8e:6e:bc:bc:
eb:66:e2:4f:64:19:4c:8c:4f:b8:f3:52:06:a3:c0:
ca:3e:9b:85:83:eb:38:7a:59:20:9b:10:3a:1b:26:
fa:82:e9:82:84:d1:c4:ee:02:b3:dc:91:5f:a0:ec:
a9:b5:1b:f1:ee:83:e6:a6:a5:0d:59:28:48:39:47:
67:0f:e1:cb:d4:34:6e:7e:7a:23:5c:b9:b3:72:83:
b2:7c:41:cf:d6:93:df:27:3f:79:5a:2d:bd:9d:77:
80:55:e8:b0:0d:d4:3f:47:36:01:0c:72:af:4b:db:
18:46:bb:cb:fd:4a:9c:c4:47:11:f2:93:8b:03:1d:
b3:5c:ab:4b:95:94:3b:0d:f1:43:f3:e4:52:c7:ea:
aa:03:21:47:61:f0:3b:bd:ca:3a:60:b6:83:5a:5c:
e9:7e:72:e2:7e:76:f9:6d:c5:5d:69:22:a5:af:5f:
21:5f:0e:1d:23:34:3b:d6:b2:35:97:d4:4e:af:25:
03:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:29:4A:65:C0:4B:03:B4:72:94:A1:43:3A:14:47:4A:29:F6:BB:86
X509v3 Authority Key Identifier:
keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/KSlKZcBLA7RylKFDOhRHSin2u4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.208.0/22
46.173.220.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:aa:d7:a0:c6:1e:88:5a:18:d3:11:26:5e:54:0b:9e:1a:1f:
d8:47:ed:6d:da:95:62:ff:7a:77:36:f0:52:15:c5:d2:e8:f2:
7d:88:de:87:b9:01:7b:87:3c:c4:77:7a:19:e7:4e:59:b0:5a:
a3:52:a7:2b:2d:f1:d0:f0:a8:6b:f4:7c:0b:40:ce:ee:7a:96:
c2:a8:fd:92:6c:c8:42:f3:42:a2:9c:3a:c0:97:f5:2b:a0:db:
80:5c:48:a5:50:88:cf:84:03:0e:05:cf:1b:08:82:b4:d6:0e:
86:99:bd:9d:de:a1:33:b2:c6:eb:fa:63:5c:cb:e6:f7:93:49:
02:5d:c9:e2:b0:e5:51:e6:e3:29:1a:32:e5:90:20:bd:fa:ce:
d1:c0:c4:7d:4b:8e:1a:99:40:a2:d6:08:ca:b3:a8:79:34:48:
46:2f:3c:ac:f5:46:e7:0b:e2:f1:c3:dd:08:a0:13:0d:0d:53:
ba:2b:7c:db:ca:ed:b1:0c:be:90:68:c4:73:a7:06:e3:a6:53:
ab:f1:18:b5:d4:d4:21:fd:33:f5:60:c4:b1:87:95:03:34:38:
00:57:a0:8d:ee:55:0d:60:d4:62:6e:39:87:6c:82:cd:59:73:
9f:31:4b:e0:98:1d:b3:fc:5b:ed:78:58:ad:ad:e8:d7:5f:fd:
7c:b7:08:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:06 2024 by rpki-client on console-ams.rpki-client.org