Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/nCiam-dFbKPgCk-dkiKUNQ-KVEM.roa
File: nCiam-dFbKPgCk-dkiKUNQ-KVEM.roa (raw, json)
Hash identifier: fTl2I8usZENmnlbU9ir0myM62X8nCae1dL1OCFW08S4=
Subject key identifier: 9C:28:9A:9B:E7:45:6C:A3:E0:0A:4F:9D:92:22:94:35:0F:8A:54:43
Certificate issuer: /CN=6e8e9da43dfc793d4d5488097b4001ba40941904
Certificate serial: 01104659
Authority key identifier: 6E:8E:9D:A4:3D:FC:79:3D:4D:54:88:09:7B:40:01:BA:40:94:19:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bo6dpD38eT1NVIgJe0ABukCUGQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/nCiam-dFbKPgCk-dkiKUNQ-KVEM.roa
Signing time: Sat 01 Jan 2022 01:54:51 +0000
ROA not before: Sat 01 Jan 2022 01:54:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 46.226.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17843801 (0x1104659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e8e9da43dfc793d4d5488097b4001ba40941904
Validity
Not Before: Jan 1 01:54:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c289a9be7456ca3e00a4f9d922294350f8a5443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:e8:cc:37:2e:7b:17:d9:20:ca:d6:ee:51:
77:50:c2:20:e9:41:e2:af:79:03:12:bb:30:6c:79:
63:b5:82:13:88:8b:c9:02:66:c5:ab:c3:91:30:58:
0c:32:d3:38:b8:fc:a6:19:31:4b:52:56:57:ec:0e:
b3:35:a3:37:0f:7f:1f:48:01:43:66:55:12:df:24:
50:74:73:da:95:86:20:7a:34:47:dc:44:61:74:6b:
3d:27:20:6a:8c:9f:f9:66:06:e2:0e:ab:52:28:54:
da:5d:bf:03:1a:1f:4f:59:22:17:ce:0a:61:e4:9b:
9d:28:33:f1:4a:be:06:b0:39:2d:5a:26:34:1c:7a:
fc:e8:57:bb:66:e4:7d:0a:00:46:e8:34:8b:db:e6:
25:f1:aa:76:bf:98:95:86:65:28:fb:be:fa:78:6f:
5e:9d:39:52:72:40:9a:7f:d2:b1:fb:80:4c:03:9e:
92:22:f4:44:9c:31:6f:85:9e:1d:7f:2c:7a:8d:c6:
3e:53:fb:c4:46:98:b3:92:0e:dc:ff:7d:7c:13:a6:
1b:e7:69:40:f6:2c:14:7a:8e:6d:2c:2a:48:b8:01:
e7:cb:88:ce:c6:df:fe:28:19:a2:83:b5:30:70:d8:
c9:af:ce:63:00:1e:da:9f:00:36:92:cf:64:11:ca:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:28:9A:9B:E7:45:6C:A3:E0:0A:4F:9D:92:22:94:35:0F:8A:54:43
X509v3 Authority Key Identifier:
keyid:6E:8E:9D:A4:3D:FC:79:3D:4D:54:88:09:7B:40:01:BA:40:94:19:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bo6dpD38eT1NVIgJe0ABukCUGQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/nCiam-dFbKPgCk-dkiKUNQ-KVEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/bo6dpD38eT1NVIgJe0ABukCUGQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.124.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:64:55:16:b7:09:56:9a:f6:8a:2a:aa:06:b1:fe:f7:e2:6e:
62:27:ab:04:7d:f4:1b:42:da:e9:e0:b9:af:66:27:8b:d9:14:
56:62:c2:4f:eb:1d:a7:47:9c:9a:ca:3a:af:82:f8:a7:39:58:
7a:8e:2d:ec:2c:8d:09:f1:07:c0:5b:05:71:12:55:1f:66:41:
5c:66:c5:04:60:4e:ea:eb:cb:27:ce:a2:6c:9d:85:04:25:72:
a9:91:b2:f3:c0:62:29:02:ba:35:2d:71:4b:36:2c:60:4e:12:
ea:3f:56:8e:35:e0:57:29:69:d3:68:e7:fd:cf:82:77:c7:53:
1e:46:04:a1:fe:a5:da:bd:c6:95:68:9c:fe:bb:1d:ed:f8:54:
f4:0e:db:29:69:16:33:1e:21:2b:c7:1e:5c:8d:c6:76:a6:a4:
ef:b6:07:21:f4:03:ee:ed:53:23:e6:b0:9f:f2:aa:da:6a:10:
06:80:38:11:cc:34:7d:f9:51:91:96:94:cd:cd:31:cd:7c:a7:
04:e1:03:45:c2:77:ba:fe:c2:4b:02:00:7e:aa:74:bd:0a:cf:
2c:99:a4:74:52:93:d8:7c:4a:86:75:76:07:fc:6d:ae:11:8e:
71:cb:9d:cd:05:e4:37:f4:38:4a:87:4b:bb:74:c1:a6:27:29:
d9:6e:71:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:31 2023 by rpki-client on console-ams.rpki-client.org