Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/_i6gtH8FF0SF_GBhWiKeZaBp4Pg.roa
File: _i6gtH8FF0SF_GBhWiKeZaBp4Pg.roa (raw, json)
Hash identifier: DHuv2YJbmN7oUin0PFdnkhW0JPD0mK8O1Qh0XIJjC98=
Subject key identifier: FE:2E:A0:B4:7F:05:17:44:85:FC:60:61:5A:22:9E:65:A0:69:E0:F8
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 01845B2B71F97576D93E3997491561DA85F0
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/_i6gtH8FF0SF_GBhWiKeZaBp4Pg.roa
Signing time: Wed 09 Nov 2022 06:54:44 +0000
ROA not before: Wed 09 Nov 2022 06:54:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 46.175.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:2b:71:f9:75:76:d9:3e:39:97:49:15:61:da:85:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Nov 9 06:54:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe2ea0b47f05174485fc60615a229e65a069e0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ce:04:20:34:3a:44:23:24:dc:39:63:e8:6b:
30:ce:ec:b7:bd:d2:e5:61:37:ec:8e:81:13:72:ac:
2f:a9:c7:9b:45:60:ea:5f:44:58:36:b5:50:66:23:
5d:fc:46:05:29:53:f4:89:d2:91:b6:8e:9f:27:3f:
95:18:98:b1:0b:b1:e4:4c:ee:a7:6b:22:2a:97:c0:
2f:73:f8:b3:12:7e:9b:b7:55:44:8a:c8:9e:de:c4:
08:4b:e6:c5:61:92:2d:8e:42:29:3c:0d:e8:23:ac:
d1:bb:d4:77:94:7d:74:07:16:32:fb:89:5f:50:b1:
42:15:20:a8:89:1a:ed:7a:36:83:de:b0:6e:3c:a8:
59:ce:a6:92:26:ea:06:3f:7b:80:0f:79:7d:e9:db:
5a:46:d9:a9:c0:2a:e7:67:7e:41:88:be:ae:0a:78:
f1:32:9f:82:c3:ae:5a:67:ed:9c:04:19:b9:c4:7c:
22:c1:93:96:eb:c8:36:f0:fa:df:59:52:0e:30:9f:
00:77:bc:8e:2b:18:dc:23:0d:02:5c:1c:98:c7:ab:
41:b0:a6:15:4e:63:23:26:13:39:36:a6:4d:55:3e:
3c:49:e3:fc:22:05:42:87:d9:08:4a:0e:80:50:f6:
ec:db:29:f0:87:99:61:a0:1a:3d:83:88:de:0a:e7:
1a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2E:A0:B4:7F:05:17:44:85:FC:60:61:5A:22:9E:65:A0:69:E0:F8
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/_i6gtH8FF0SF_GBhWiKeZaBp4Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.130.0/24
Signature Algorithm: sha256WithRSAEncryption
51:86:b6:2b:96:f8:d7:70:3c:45:03:97:1e:55:d8:c1:8f:a1:
da:7e:21:67:69:03:21:32:14:84:37:b3:73:6b:12:13:2b:d8:
b2:ec:e2:26:9c:b0:14:f3:48:3b:d2:7b:c5:43:91:31:cb:80:
3e:2a:c8:a0:2a:06:c6:fc:b5:e4:3d:70:36:90:00:11:ce:2e:
20:26:a5:43:6f:18:56:2c:0f:6e:b3:cc:2a:ab:74:53:69:32:
ba:07:86:92:5f:e0:88:7b:53:1d:f7:b6:da:72:6f:23:04:22:
3a:b2:57:9f:af:85:4b:9b:31:5a:1e:df:5d:90:8d:63:54:01:
18:e3:cb:01:95:d4:0f:db:c2:cf:ab:ec:1a:9f:57:a9:41:03:
bd:fe:59:c6:dd:97:6e:60:d5:cf:6a:27:0b:5e:e0:85:91:cd:
3d:7e:4f:18:59:37:14:a3:db:2e:f5:1c:62:26:68:b5:48:8c:
ab:c1:12:20:a6:d5:51:67:dd:c0:f4:a1:8e:ee:cb:e6:2e:bc:
7a:21:4e:c9:d8:16:1e:22:67:f6:d9:a2:fb:e6:63:b5:c4:18:
d1:41:66:c2:21:d5:84:3f:6c:b9:15:1a:17:4b:5a:02:94:7f:
26:0c:1c:5b:d3:6d:82:16:86:81:2a:ca:27:5d:45:0f:ad:c3:
c9:d6:8c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:32 2023 by rpki-client on console-ams.rpki-client.org