Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Y4R10iOx4KdWhJyiScAOig4jG6E.roa
File: Y4R10iOx4KdWhJyiScAOig4jG6E.roa (raw, json)
Hash identifier: 9M0L7SNbaZhfl4eJYVXuKfXttv5hGSg1CGuaixMZQVo=
Subject key identifier: 63:84:75:D2:23:B1:E0:A7:56:84:9C:A2:49:C0:0E:8A:0E:23:1B:A1
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A7ACF03
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Y4R10iOx4KdWhJyiScAOig4jG6E.roa
Signing time: Sat 01 Jan 2022 16:07:08 +0000
ROA not before: Sat 01 Jan 2022 16:07:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47374
IP address blocks: 46.254.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175820547 (0xa7acf03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=638475d223b1e0a756849ca249c00e8a0e231ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:ff:40:98:f9:95:a9:ff:e3:38:60:61:cf:
5a:e0:b4:c6:0f:00:a2:39:08:2c:ac:81:3c:8e:36:
ae:62:ca:0e:63:63:cd:43:c2:51:7a:b0:a7:ea:8d:
c8:47:e7:0e:58:36:04:64:0d:39:3b:61:ff:23:ef:
09:5c:12:c2:ce:49:8a:c8:ba:91:55:7f:92:69:7c:
45:44:e1:00:74:6b:8f:23:5e:a7:4a:fc:f7:af:e8:
ba:91:81:45:ca:65:5e:20:52:dc:30:07:b0:5e:4d:
2e:5f:a0:c3:9b:a8:e2:4e:99:85:c3:3e:05:56:7d:
41:ca:14:1a:e5:72:66:9d:66:55:d1:8c:3b:0b:09:
4f:3f:64:f4:47:70:3f:6b:8e:29:8a:b4:2e:a8:69:
eb:ff:3a:b6:85:02:86:7f:3b:9f:4f:5b:55:ba:17:
02:b0:fe:c2:7e:a8:fb:28:8c:4a:ca:df:93:6a:32:
31:a1:d5:ad:68:6f:85:39:3b:af:31:6d:a6:22:ea:
59:e6:31:7a:53:a4:fa:91:6f:e9:8d:2a:17:1c:0d:
1f:85:da:0f:76:97:b6:03:cc:60:56:17:8c:66:c8:
eb:f7:2c:c0:43:6e:de:57:30:18:95:ac:fa:c0:fc:
be:0c:ef:15:02:32:41:90:66:81:28:4d:1a:7d:6f:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:84:75:D2:23:B1:E0:A7:56:84:9C:A2:49:C0:0E:8A:0E:23:1B:A1
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Y4R10iOx4KdWhJyiScAOig4jG6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.128.0/22
Signature Algorithm: sha256WithRSAEncryption
73:cd:0a:2e:8a:73:20:7d:c1:0e:4c:66:66:e5:fa:45:a1:47:
fd:27:94:cc:20:60:59:d9:8c:c8:78:17:ba:f3:38:af:bc:ec:
e6:bf:09:f0:84:1b:ae:f0:36:78:db:a4:45:61:27:69:36:48:
7e:96:a4:46:be:86:05:69:81:30:a4:97:f2:75:5e:b1:37:9b:
c6:ce:2c:db:99:55:30:88:31:53:41:87:e5:56:04:b0:42:22:
2f:04:5c:6f:12:05:2c:6d:d9:5a:96:a8:a3:e9:46:9e:3c:93:
89:8e:3d:13:60:d8:81:23:b2:9d:94:d2:16:94:a0:36:7d:03:
dc:ae:24:58:bf:df:1f:bd:9d:a4:a9:9f:32:ab:1c:cc:03:28:
02:25:5f:b9:56:12:67:99:91:75:5a:f7:d3:62:70:46:43:c2:
72:04:3f:49:20:5f:57:7c:f1:73:8a:24:d0:65:10:d1:82:f0:
e8:7c:62:07:09:21:92:b2:46:b2:fd:84:b9:cc:90:b8:4a:2a:
55:2f:ab:f3:b0:7b:4c:fc:05:bf:f2:86:78:e3:87:29:e8:a7:
7a:eb:f5:4e:a1:68:7c:0f:36:35:f6:c4:e3:43:6e:08:f6:c4:
45:91:f0:c5:18:06:25:40:eb:d1:28:6d:19:18:23:0b:0c:b4:
bf:54:44:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org