Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/6Nsk_nTLSnC1Vw4JywGb1zkhBOo.roa
File: 6Nsk_nTLSnC1Vw4JywGb1zkhBOo.roa (raw, json)
Hash identifier: ivRgiluNYMQkyWKCd7I8WeJ5Asir2CQ/DENHpcXeDbg=
Subject key identifier: E8:DB:24:FE:74:CB:4A:70:B5:57:0E:09:CB:01:9B:D7:39:21:04:EA
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 01848AF189CB05EE5F22C52336372289F518
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/6Nsk_nTLSnC1Vw4JywGb1zkhBOo.roa
Signing time: Fri 18 Nov 2022 13:33:15 +0000
ROA not before: Fri 18 Nov 2022 13:33:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25498
IP address blocks: 46.232.232.0/23 maxlen: 23
195.22.130.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8a:f1:89:cb:05:ee:5f:22:c5:23:36:37:22:89:f5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Nov 18 13:33:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8db24fe74cb4a70b5570e09cb019bd7392104ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:18:8c:c9:32:12:ee:ac:0f:0a:d3:2f:2b:
71:ea:ef:02:e1:9b:9c:c9:cb:88:8b:e0:ec:13:1f:
95:b9:2e:fa:14:21:d8:86:72:ef:5b:92:c1:22:f1:
aa:aa:97:54:af:fe:b4:47:23:e2:78:31:0e:09:9e:
6b:dd:9e:2d:98:b7:ac:53:26:bc:37:2d:14:47:65:
52:69:e8:3e:3b:ac:1c:ca:44:72:6c:1c:d7:81:16:
4d:45:fb:dd:a6:cd:53:27:cc:47:f6:cc:ec:d1:57:
be:8b:fd:94:17:7b:33:8a:c3:6c:d6:10:5c:fb:a6:
ad:ae:0b:d7:da:86:ac:c5:0b:85:d1:4f:be:f1:dd:
e6:b2:72:25:ec:1b:a7:31:02:d7:c6:fc:ba:1f:d6:
a8:b2:20:3d:62:52:08:d0:ee:50:dd:29:6a:5f:5b:
a1:b8:7a:fd:5b:cf:56:36:0a:a0:e7:75:b8:a9:6e:
12:f6:b6:36:e4:27:77:9c:56:0b:23:42:9b:d2:b5:
a2:47:01:14:3f:0f:68:33:3a:de:d8:95:0b:3c:0d:
88:04:31:7e:7e:3f:78:89:27:06:84:87:a0:d7:c6:
6d:86:d1:0b:d7:2e:c2:5f:ab:b4:f1:5c:ca:cd:08:
00:ed:a4:96:c4:f6:e3:4c:02:5c:77:5c:57:e0:7c:
c4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DB:24:FE:74:CB:4A:70:B5:57:0E:09:CB:01:9B:D7:39:21:04:EA
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/6Nsk_nTLSnC1Vw4JywGb1zkhBOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.232.0/23
195.22.130.0/23
Signature Algorithm: sha256WithRSAEncryption
47:2d:c0:76:27:9c:ad:8e:ac:a9:8f:35:d6:1f:0b:71:a9:a7:
56:0f:0a:e6:69:57:3c:20:a5:10:c5:4f:1f:f8:b3:be:88:3b:
c6:11:03:47:93:99:25:59:6a:bc:0d:c7:19:3b:a9:48:a7:8f:
8d:a5:12:8f:5d:67:30:50:20:ec:75:40:a4:ea:d3:92:05:ee:
3c:fb:82:79:aa:a6:c6:88:5f:a2:3d:f7:9e:f8:35:d0:63:6f:
1c:51:5a:ba:51:a3:8c:7f:77:68:53:c6:33:f3:2c:fe:eb:00:
71:e1:64:f3:24:53:8f:42:a4:50:57:84:95:b7:aa:82:91:24:
99:eb:81:07:2c:6d:07:19:d4:f0:1b:c7:a8:57:e3:15:e8:05:
6d:fe:46:84:1b:f1:f2:36:ed:10:78:19:d2:c4:77:45:c4:5c:
a8:5c:1f:e2:f2:16:a1:f0:2e:a5:69:d4:3b:c1:ef:d8:5b:01:
b4:a4:76:cf:fc:95:ac:c9:0f:24:28:69:32:ae:eb:e7:8b:05:
f5:e7:be:63:3a:f5:7b:d4:eb:2f:54:44:48:b8:e7:45:ea:f1:
74:a4:19:7a:68:ff:1d:8f:f5:fa:f3:ba:c6:ec:3e:72:af:37:
46:52:a9:7a:ed:2f:81:81:13:bf:cd:9c:f1:76:73:6a:b5:4d:
7d:0f:f9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:21 2024 by rpki-client on console-fra.rpki-client.org