Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/_toSDu75WaG17KP9HqijZrTz6lY.roa
File: _toSDu75WaG17KP9HqijZrTz6lY.roa (raw, json)
Hash identifier: ukPRpWf+Z9HIvKVRt9/HnRz0yl31GDG29ijsuG6vBOQ=
Subject key identifier: FE:DA:12:0E:EE:F9:59:A1:B5:EC:A3:FD:1E:A8:A3:66:B4:F3:EA:56
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 08F2C50A
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/_toSDu75WaG17KP9HqijZrTz6lY.roa
Signing time: Mon 21 Feb 2022 14:24:51 +0000
ROA not before: Mon 21 Feb 2022 14:24:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10103
IP address blocks: 46.3.164.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150127882 (0x8f2c50a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Feb 21 14:24:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=feda120eeef959a1b5eca3fd1ea8a366b4f3ea56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:99:68:24:b2:85:0e:06:8d:8a:10:e6:40:
1c:36:59:24:89:f7:af:8f:a8:20:05:a9:5e:79:11:
0f:bb:d5:8f:77:dd:e9:0c:7b:80:44:1e:a2:c1:28:
18:6c:42:ad:02:42:7e:74:2b:3e:91:56:86:98:89:
0a:75:18:94:dd:ba:a0:a3:4b:01:29:54:07:66:19:
e4:35:75:f8:f6:ad:c6:b3:55:60:69:f6:55:4c:55:
60:78:a7:0a:9a:1e:27:fc:53:f0:5f:f5:cc:64:a1:
a7:8c:52:81:81:a7:9a:b5:20:64:52:dd:5b:66:7a:
bd:ec:35:fb:12:6d:92:ec:af:54:12:9d:db:21:e3:
e1:02:90:39:98:4e:13:54:44:a0:52:24:8c:80:34:
42:1a:1d:72:31:09:d3:d0:f6:57:68:68:c2:8d:54:
86:be:d0:f6:66:91:ad:53:1f:52:06:8d:6b:a5:c5:
bb:42:e2:6f:4e:66:fd:dd:e6:1b:4b:4a:aa:37:f4:
f4:69:42:4e:ed:11:df:42:c2:13:5d:09:f3:84:d7:
fe:16:ff:dd:ec:6c:c1:e0:5f:02:1f:41:6c:c6:ed:
07:5a:b3:80:96:7e:8c:22:d9:ff:9d:78:c8:1b:72:
9e:fc:50:f6:57:81:1c:64:c8:10:20:ac:27:53:04:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DA:12:0E:EE:F9:59:A1:B5:EC:A3:FD:1E:A8:A3:66:B4:F3:EA:56
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/_toSDu75WaG17KP9HqijZrTz6lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.164.0/22
Signature Algorithm: sha256WithRSAEncryption
92:16:84:19:a8:0b:aa:4b:a8:ce:f1:db:27:6b:f8:31:a2:2f:
b3:85:00:8e:82:57:b6:d3:3b:85:e4:bc:88:75:3d:e3:5e:e8:
90:e5:e2:37:3b:69:19:f1:6b:f7:f6:07:b4:e7:80:a3:63:36:
4f:64:51:c8:b0:af:4e:ff:00:10:21:3d:07:50:84:9f:f6:50:
ed:32:da:53:41:29:fe:b3:a5:0f:9e:25:b6:30:a0:dc:5a:1e:
52:cd:61:7a:d1:ed:b1:12:0b:76:9d:d9:f9:17:1d:60:92:5a:
55:ae:09:94:12:e9:94:15:3a:90:dc:87:f6:50:b2:2c:14:11:
da:5c:9d:8c:f3:ef:fa:fc:2d:be:e8:dc:c9:74:66:9e:d6:33:
81:06:ac:a4:67:88:d5:0e:8b:63:74:4f:bc:50:75:ee:02:6c:
38:ed:82:54:76:f0:10:bb:44:e8:1d:3c:0e:a1:2f:04:5c:0d:
64:29:a8:63:6f:a1:84:66:10:44:73:58:4e:3d:74:22:74:5a:
6b:17:00:bd:aa:e0:43:72:6b:25:ac:2b:23:3a:e0:5c:2e:8a:
67:b9:42:72:59:c7:63:af:6d:f0:58:91:12:0c:c9:23:d4:21:
79:e9:6c:ef:e8:f7:e9:e6:b3:f6:d2:e7:1e:32:eb:68:16:f4:
1f:3b:87:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org