Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/5o_AWMobAqckXlwOL21TULYSv1E.roa
File: 5o_AWMobAqckXlwOL21TULYSv1E.roa (raw, json)
Hash identifier: RVqljklhkCi+obC9Y96Za4+4kWLf6O9qnZ+u2UVm17g=
Subject key identifier: E6:8F:C0:58:CA:1B:02:A7:24:5E:5C:0E:2F:6D:53:50:B6:12:BF:51
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 14587D0A
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/5o_AWMobAqckXlwOL21TULYSv1E.roa
Signing time: Sat 23 Apr 2022 15:36:56 +0000
ROA not before: Sat 23 Apr 2022 15:36:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8932
IP address blocks: 46.162.220.0/22 maxlen: 24
185.48.240.0/22 maxlen: 24
2a00:cc40:2::/48 maxlen: 48
2a00:cc40:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341343498 (0x14587d0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Apr 23 15:36:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e68fc058ca1b02a7245e5c0e2f6d5350b612bf51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d7:b9:88:69:bb:f1:aa:50:85:f4:fb:af:e5:
e6:2f:e8:ec:15:f9:1d:31:10:9d:b3:e8:c9:fc:12:
0e:04:19:aa:70:64:06:02:f6:5e:8b:5e:a1:b8:84:
46:49:eb:4a:e8:ea:ed:ef:57:a2:ad:13:02:28:4c:
d5:6d:7d:5b:12:f0:0a:c6:2f:93:59:88:82:12:9e:
17:8e:d4:85:3b:b5:9d:da:34:1d:2c:37:9b:ea:22:
77:e7:81:6f:cd:00:11:e5:2b:60:fb:f4:f4:31:6f:
1d:fa:1e:57:e6:d8:a2:8d:6c:25:20:e2:d1:dc:4c:
d2:04:e6:99:53:75:f4:82:80:be:69:46:48:5a:dd:
b1:be:99:fb:bc:24:19:e2:6f:78:1d:d8:f5:20:de:
ad:a3:bd:f4:e9:af:22:74:9b:bf:fa:12:7e:29:9b:
37:83:ef:cd:4b:a0:d7:a7:01:94:7b:fe:44:fd:d5:
0d:2f:90:51:1a:ac:77:c8:e5:8f:b9:d9:48:1e:84:
d1:9b:35:b1:35:a8:9f:62:e7:53:84:04:cd:56:8a:
41:1f:b2:31:b8:7c:a1:58:8d:14:0d:4e:e8:a6:b0:
53:fe:42:70:0c:87:36:a0:70:5a:07:45:3b:ca:2c:
30:f8:f9:07:a4:d5:ca:c7:3f:1c:17:cb:f7:a8:45:
72:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8F:C0:58:CA:1B:02:A7:24:5E:5C:0E:2F:6D:53:50:B6:12:BF:51
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/5o_AWMobAqckXlwOL21TULYSv1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.220.0/22
185.48.240.0/22
IPv6:
2a00:cc40:1::-2a00:cc40:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
18:1c:e8:d3:a0:e4:e5:f5:05:fa:10:85:4a:53:59:4d:65:0a:
38:f9:0e:20:10:99:df:62:46:e3:ff:ce:16:5b:85:fe:89:6a:
a5:c2:fc:9b:8e:40:d7:8a:51:93:75:6f:4f:54:81:58:eb:4f:
f4:ff:fc:f5:78:b1:08:0f:0d:4a:6f:9f:ec:ee:15:08:8c:85:
e2:36:e5:72:10:ef:86:6f:17:08:27:d2:76:80:34:45:19:fb:
3b:23:47:e2:96:8f:5a:e3:3e:d2:05:db:09:24:5e:5c:06:d7:
70:aa:9f:29:1c:58:77:0d:82:b5:8e:5b:18:1c:6b:19:b8:59:
64:15:7c:26:43:23:7d:1b:da:6f:3a:7e:cf:43:46:62:02:77:
0c:1d:27:36:22:b8:5c:17:81:07:7c:8f:cf:be:b5:3d:f3:2c:
36:38:8c:85:05:7e:b2:67:6b:66:7a:ec:45:52:d1:92:c4:94:
52:01:b4:3c:db:48:26:cc:3c:de:0d:9d:fd:4f:65:c9:37:2c:
d5:eb:d5:3f:b9:32:51:7f:c4:a7:a4:f0:3b:8f:6b:e4:da:34:
f1:4e:15:0f:ea:18:d8:09:8f:47:21:5d:f8:f8:9f:63:12:9d:
15:dd:cf:66:6b:a2:f1:cc:55:61:fe:69:b6:92:fa:38:24:b0:
f8:04:a2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:53 2023 by rpki-client on console-fra.rpki-client.org