Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/mHVJYlBsIIpOT7wHMCj5dS4v0sU.roa
File: mHVJYlBsIIpOT7wHMCj5dS4v0sU.roa (raw, json)
Hash identifier: m29or7Uu7yqyb6NqzCcEiL2QjgEnC+uPBUGtmwKRx80=
Subject key identifier: 98:75:49:62:50:6C:20:8A:4E:4F:BC:07:30:28:F9:75:2E:2F:D2:C5
Certificate issuer: /CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Certificate serial: 0184A8F4A4F7F32172D1D3F051C0A8B80314
Authority key identifier: 29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/mHVJYlBsIIpOT7wHMCj5dS4v0sU.roa
Signing time: Thu 24 Nov 2022 09:25:15 +0000
ROA not before: Thu 24 Nov 2022 09:25:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207456
IP address blocks: 46.149.104.0/24 maxlen: 24
193.23.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a8:f4:a4:f7:f3:21:72:d1:d3:f0:51:c0:a8:b8:03:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Validity
Not Before: Nov 24 09:25:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98754962506c208a4e4fbc073028f9752e2fd2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:de:3b:ab:db:88:4b:88:e7:af:51:c9:c4:b9:
6c:f6:22:ae:45:43:8d:14:49:e6:19:6f:99:f9:f2:
cb:51:0d:c8:e2:8d:1d:53:f6:1f:a0:c4:de:27:d1:
1e:43:7e:f9:04:7d:8f:aa:34:86:96:2b:21:65:18:
b8:be:03:2b:dc:75:23:ac:ee:3b:84:2d:37:a5:01:
ad:bf:5e:da:41:fb:b0:10:8b:06:79:c4:66:95:92:
99:fc:d5:fa:bb:d3:73:e7:5a:89:74:47:53:bf:ac:
a5:b1:51:df:1e:9e:50:37:18:dc:6c:ab:b0:4f:81:
db:3e:e3:f4:b7:cf:54:9b:84:e2:f6:dc:25:7c:21:
dc:e1:1f:42:a5:ca:96:88:49:be:22:ad:5e:af:ad:
05:03:34:e9:4a:f7:6f:b7:4f:dc:1d:21:b5:2c:91:
b2:08:79:92:d7:11:2d:98:0e:1d:90:50:b1:d5:76:
39:b1:cc:79:20:d4:09:06:e5:83:f6:82:1b:7e:c3:
31:69:8f:7b:3e:e5:25:e9:08:d0:82:93:39:08:11:
62:a7:28:64:c6:67:69:21:f2:a9:81:d3:f3:23:5f:
4c:3e:49:b4:e1:de:7c:23:2c:b6:d1:fd:95:18:4a:
5a:e4:99:39:14:b3:7a:04:45:81:ff:21:4d:e2:79:
81:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:75:49:62:50:6C:20:8A:4E:4F:BC:07:30:28:F9:75:2E:2F:D2:C5
X509v3 Authority Key Identifier:
keyid:29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/mHVJYlBsIIpOT7wHMCj5dS4v0sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.104.0/24
193.23.133.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:43:9f:20:a0:a8:05:35:1d:e4:1e:5b:c1:24:83:41:24:63:
d0:72:99:ba:72:5d:60:bd:ac:e5:8c:c9:25:15:e0:76:3d:68:
e9:46:26:8b:7f:66:c6:06:0a:09:99:6b:96:8e:ed:f5:3c:1e:
86:1a:4e:73:c7:07:25:18:f7:ba:26:ec:7c:3a:65:63:c0:d0:
d9:b7:78:da:5c:ae:99:6d:b4:68:7c:de:75:15:58:8f:7c:f8:
20:bc:cc:c9:08:d5:ba:10:fe:a9:04:a6:f6:75:0d:60:ac:9c:
fe:db:5e:36:14:60:39:9c:92:d8:3d:a0:2d:40:d9:45:0c:be:
3f:c1:c1:4c:b0:a2:eb:04:58:14:55:ba:be:e5:ad:d1:4e:34:
5e:0e:b6:80:1a:2d:6e:6e:19:25:8c:1c:cb:73:f6:d4:7a:31:
d2:23:87:fc:98:ab:42:34:98:d4:d0:e6:ea:4d:1e:24:05:22:
8d:48:1e:15:c8:97:5a:11:a8:7d:04:17:8e:0b:ba:54:48:ab:
83:1f:3f:69:f6:29:28:90:f9:c2:ba:7e:6a:c4:ab:4a:f0:eb:
87:a1:fa:d2:78:7c:2d:cd:f2:40:63:59:53:2b:8b:f3:c7:9a:
bf:4a:89:65:59:9f:ee:78:c6:ad:a3:7f:96:7d:2a:94:f7:73:
3d:08:a6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:39 2024 by rpki-client on console-ams.rpki-client.org