Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/Ih0GQKH_5ptAneRgrNXTH3QZvW8.roa
File: Ih0GQKH_5ptAneRgrNXTH3QZvW8.roa (raw, json)
Hash identifier: Pz6+urAV4wW9C7dnlDOgwCK5RHOvk0imRNSrBUyaSDg=
Subject key identifier: 22:1D:06:40:A1:FF:E6:9B:40:9D:E4:60:AC:D5:D3:1F:74:19:BD:6F
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 013A719B
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/Ih0GQKH_5ptAneRgrNXTH3QZvW8.roa
Signing time: Sat 01 Jan 2022 12:03:31 +0000
ROA not before: Sat 01 Jan 2022 12:03:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51561
IP address blocks: 46.226.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20607387 (0x13a719b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Jan 1 12:03:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=221d0640a1ffe69b409de460acd5d31f7419bd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:d9:7a:7d:9d:e9:99:1f:a6:00:a4:d6:ed:
10:32:d4:62:49:d6:7f:4d:7d:b1:0a:20:29:00:bc:
8c:60:fc:9b:41:51:d9:2e:87:83:2e:9a:be:b2:25:
de:12:c8:a4:20:03:7c:6b:56:de:2e:03:7c:80:5c:
18:e7:76:95:4a:98:54:63:4b:ed:1e:92:64:5a:c4:
68:dc:8d:4e:b4:be:7e:d3:db:f2:55:c1:6f:84:83:
20:21:82:68:1f:44:6c:58:f2:c6:3d:51:ac:f9:01:
8a:b3:19:ec:25:d2:e3:f2:73:6e:d7:98:cf:92:eb:
9e:52:eb:f3:3f:b5:ce:1c:81:10:03:77:b9:0f:48:
82:29:2e:0e:08:34:b7:68:32:ba:c0:81:f2:8e:ce:
61:ca:c8:71:3f:d4:9b:63:56:96:dd:e2:97:d1:8d:
6a:d9:81:66:61:dc:46:21:3b:bd:2e:76:0e:b8:6a:
57:90:50:98:5d:d9:c9:d3:9f:9b:7d:9f:92:bf:2d:
8a:16:ae:3d:30:eb:21:4a:1f:22:c9:2f:fe:8f:1a:
f7:8a:e0:f8:97:2e:59:b6:a3:e3:a4:a7:a0:77:d9:
c4:9e:58:4f:77:ce:16:1c:4d:8a:de:04:60:21:f2:
d1:4f:ad:ec:e8:da:6e:77:03:86:71:b2:09:ad:42:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1D:06:40:A1:FF:E6:9B:40:9D:E4:60:AC:D5:D3:1F:74:19:BD:6F
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/Ih0GQKH_5ptAneRgrNXTH3QZvW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f3:43:ed:08:cb:84:06:4f:5d:d9:5b:e7:f5:dd:9f:fa:ad:
9f:cd:3e:c2:68:c1:77:0c:e2:e3:b9:dd:3a:6e:9b:c5:e1:3e:
f4:00:d8:67:db:25:ac:7a:6f:46:d7:dd:ee:bc:b2:5e:82:94:
d6:12:37:22:9a:f5:30:d1:c3:ac:6f:7c:77:63:3a:64:2e:00:
44:da:37:99:e6:b7:99:66:5b:0f:83:5b:a7:73:83:f1:00:a7:
80:38:d0:08:fe:90:83:b4:8b:07:19:da:aa:9a:76:61:02:83:
e2:a6:90:71:86:73:35:9f:3d:8e:3b:7a:c9:34:1f:22:dc:ab:
97:18:fd:04:d9:57:59:5d:8f:77:e6:f3:0c:56:81:0f:bc:9a:
6e:55:8d:62:ca:34:29:2b:80:66:fd:ab:19:a7:da:e2:76:73:
04:a6:fa:a4:e4:f3:c6:d9:0c:25:68:3f:be:b4:71:a8:c5:03:
fa:19:82:e6:5d:72:8e:d4:46:7a:70:ce:c6:f7:f1:62:00:a4:
4f:6b:10:61:c7:50:91:1a:53:1b:a1:f2:34:76:b7:65:35:72:
ca:62:9a:d3:2b:6c:de:60:84:55:38:14:de:68:02:91:8c:cb:
83:f8:dc:a8:90:a1:89:d1:9d:80:be:6f:56:d8:76:29:34:7b:
d2:d0:56:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:09 2024 by rpki-client on console-fra.rpki-client.org