Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/XYQeXR-e8sYrULKvvXZRb51WjxE.roa
File: XYQeXR-e8sYrULKvvXZRb51WjxE.roa (raw, json)
Hash identifier: /huWKcti0YG1HpZ1JqlokzjGbg+E02WrOQeKal2uLlk=
Subject key identifier: 5D:84:1E:5D:1F:9E:F2:C6:2B:50:B2:AF:BD:76:51:6F:9D:56:8F:11
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0F46972D
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/XYQeXR-e8sYrULKvvXZRb51WjxE.roa
Signing time: Sat 01 Jan 2022 12:58:25 +0000
ROA not before: Sat 01 Jan 2022 12:58:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42410
IP address blocks: 46.233.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256284461 (0xf46972d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jan 1 12:58:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d841e5d1f9ef2c62b50b2afbd76516f9d568f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5d:aa:04:ae:dc:be:b4:5d:18:f2:87:47:2c:
cf:8a:ee:c0:2d:4b:0e:bb:d3:10:7c:bf:81:5a:91:
ec:5c:ff:77:3b:33:1c:0a:f7:a3:e5:26:60:34:f8:
1f:09:d6:d1:07:ef:28:5a:b5:47:7f:6f:fd:a7:0b:
84:1e:0f:c8:ef:28:44:d2:08:1e:e0:44:cb:9d:47:
66:0e:d3:b8:81:4c:aa:eb:03:48:84:86:99:cd:af:
06:36:d9:6d:69:63:e0:aa:c2:cf:09:d7:9d:ae:19:
7c:62:d0:46:0e:6a:c6:33:64:cd:d5:f2:b9:50:df:
0b:b4:f1:c3:cf:28:88:59:08:ca:d9:d6:f5:63:56:
af:52:a1:3d:5c:59:8b:ab:38:b5:35:1a:4e:fe:c5:
db:cf:49:f2:d9:8e:65:e8:f0:8d:9f:de:aa:8d:a3:
ff:38:a1:2b:fd:6d:9d:d9:cb:cf:de:7c:83:5f:df:
54:79:7c:03:de:ba:d3:1e:b7:98:21:7b:e3:43:f5:
d7:1f:e7:c4:11:cc:49:ca:d1:7c:72:f3:2d:d4:3b:
fe:e9:fb:51:dc:e9:e6:b8:b5:a5:c5:85:7b:32:28:
a9:0d:8e:21:e8:f8:a8:f0:19:a8:3e:08:1b:77:f1:
57:c9:34:09:63:d9:73:31:1b:2f:0c:7e:ba:2c:ec:
19:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:84:1E:5D:1F:9E:F2:C6:2B:50:B2:AF:BD:76:51:6F:9D:56:8F:11
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/XYQeXR-e8sYrULKvvXZRb51WjxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.48.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:a8:da:b3:38:b5:c5:b6:9d:99:9d:48:7d:37:86:6d:4f:62:
5f:ef:7c:2f:47:1a:ce:1f:13:63:8e:74:bb:67:ed:3c:20:2d:
02:5d:79:6a:7b:ce:f2:3b:33:03:7c:8b:da:87:e2:09:3c:4b:
56:19:6b:79:f8:b9:73:0e:0b:89:74:d2:86:ec:22:d2:07:99:
3c:5d:0e:b1:2d:15:37:7f:29:1c:29:66:b1:af:72:61:8b:32:
da:6d:30:cf:d2:bb:f2:55:76:b0:7a:4b:59:32:4b:18:0a:32:
60:24:32:98:d3:cb:2a:fc:2a:1c:59:c7:e4:b8:40:b0:73:07:
49:51:7e:7c:86:91:d8:8f:62:6f:d0:e6:3c:37:f2:e9:80:7f:
f6:4b:31:42:25:d0:ef:1f:05:1e:2d:d0:66:41:4e:5f:d5:e2:
76:c2:f2:a2:75:d7:4e:fb:05:87:ad:2f:8d:2f:3b:19:3f:59:
cd:86:c3:ef:54:c5:41:c8:eb:68:e0:ee:e7:c6:06:27:2f:d6:
c1:69:2e:1b:cc:2e:ac:47:e0:11:09:f4:b2:dd:3d:62:86:3d:
99:a8:87:f9:d5:f1:82:8d:62:d7:ae:33:a9:7f:82:e4:d2:b4:
a8:02:b4:3b:05:ef:84:0c:68:14:71:bc:2d:c7:09:aa:9d:f7:
e7:fa:74:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:09 2024 by rpki-client on console-ams.rpki-client.org