Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/JFyLYKQB3IxT-kcYWGQcmSFDQ9c.roa
File: JFyLYKQB3IxT-kcYWGQcmSFDQ9c.roa (raw, json)
Hash identifier: VlloYwWThokjucu1WbcRFMdLGnEXwZFFrnMIAia2Mzs=
Subject key identifier: 24:5C:8B:60:A4:01:DC:8C:53:FA:47:18:58:64:1C:99:21:43:43:D7
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0957BE22
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/JFyLYKQB3IxT-kcYWGQcmSFDQ9c.roa
Signing time: Fri 01 Apr 2022 08:53:30 +0000
ROA not before: Fri 01 Apr 2022 08:53:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 46.232.80.0/20 maxlen: 22
46.3.208.0/21 maxlen: 21
46.232.112.0/20 maxlen: 22
149.126.192.0/18 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156745250 (0x957be22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Apr 1 08:53:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=245c8b60a401dc8c53fa471858641c99214343d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0f:0f:16:99:73:4a:39:89:7a:a5:bf:bd:5b:
e8:0c:2e:64:ef:ad:f7:e7:07:31:d3:bf:27:d6:99:
27:5c:74:c9:d1:5d:51:5e:d6:2b:0d:bf:5b:05:1d:
3a:bc:15:1c:6d:c4:67:76:e2:33:f7:c4:75:7a:d6:
12:28:37:a5:87:7e:69:c5:dd:97:60:ed:0a:3d:51:
0b:2b:81:fe:08:d4:18:35:19:ff:dc:2f:7b:54:c7:
83:bd:3c:01:51:2f:a6:e5:36:61:4c:45:67:14:b9:
57:f8:2a:b2:56:8d:21:cd:42:89:4b:a3:cc:0b:57:
2e:a2:7c:24:80:31:b5:7d:88:77:95:47:4e:2a:22:
7e:4c:72:b9:17:a6:56:7f:e5:9b:b6:94:3b:c4:c1:
b6:52:22:74:98:96:d5:5f:c8:3a:a6:42:6c:a7:be:
0e:2a:ec:0a:a1:89:d3:58:7f:bb:3e:09:b1:31:87:
34:23:26:70:34:69:df:68:4a:d4:69:63:da:eb:6c:
e1:69:6b:71:0b:e2:63:ea:47:44:40:0d:29:7c:f8:
51:28:d3:d3:92:74:42:40:a9:b2:b7:05:16:4a:c9:
35:0c:78:c6:ad:c6:06:97:18:7d:b7:4e:70:cf:bd:
16:ca:9a:f6:f5:b7:7f:11:33:83:ff:b7:17:29:a4:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5C:8B:60:A4:01:DC:8C:53:FA:47:18:58:64:1C:99:21:43:43:D7
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/JFyLYKQB3IxT-kcYWGQcmSFDQ9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.208.0/21
46.232.80.0/20
46.232.112.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
7b:c1:41:f8:aa:37:72:ed:50:6d:18:1a:48:93:f6:2b:5a:bc:
02:e1:5e:b1:b4:ee:b4:2e:88:ce:bd:84:15:1c:7a:5c:73:a0:
8d:c7:f1:e9:a0:e0:e9:d1:c0:3d:8b:0d:32:4b:5a:d7:c9:6e:
96:da:b9:58:ef:1b:d5:17:13:95:d3:6e:8f:12:91:14:76:42:
f5:0f:af:a3:54:96:b0:bc:3a:7c:dc:48:36:91:5b:55:36:86:
e5:6c:6b:6b:f1:67:c3:2e:c5:2e:55:03:25:b0:ee:d7:bc:40:
cb:00:f2:f0:18:24:48:10:f6:fb:c7:05:9c:1f:f3:e7:09:c0:
4c:ec:49:10:bd:77:94:52:82:c3:d5:ff:17:14:f6:9d:b0:df:
9f:f7:7d:4d:5d:8c:08:fa:de:3f:53:f0:2b:bf:c8:6c:fe:9b:
15:bc:92:74:f7:27:4d:49:b5:f2:d4:1b:eb:9c:f5:b3:ed:c3:
ed:fd:d8:ab:d6:74:9f:2f:e2:d7:88:eb:59:df:45:0d:f0:63:
ed:25:1b:9f:1b:a0:11:69:ca:1d:22:18:f8:c2:56:99:09:2c:
c9:b7:c7:31:88:fd:dd:35:ef:07:87:48:bf:de:bc:e6:b0:e9:
6f:bb:29:5f:bf:40:7b:b7:ff:b8:7a:c6:7a:f2:09:bd:7d:2b:
2b:88:4c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org