Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/qJel3b7a6eKrxSGifqvHtSDEpaQ.roa
File: qJel3b7a6eKrxSGifqvHtSDEpaQ.roa (raw, json)
Hash identifier: D6dDMTtEN0Q520K3d6bgAEE+T+mYNbxAeTs8VBl8SII=
Subject key identifier: A8:97:A5:DD:BE:DA:E9:E2:AB:C5:21:A2:7E:AB:C7:B5:20:C4:A5:A4
Certificate issuer: /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial: 05D2C6F6
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/qJel3b7a6eKrxSGifqvHtSDEpaQ.roa
Signing time: Mon 27 Jun 2022 15:23:32 +0000
ROA not before: Mon 27 Jun 2022 15:23:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50820
IP address blocks: 46.46.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97699574 (0x5d2c6f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
Validity
Not Before: Jun 27 15:23:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a897a5ddbedae9e2abc521a27eabc7b520c4a5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f9:38:17:80:97:e0:b2:2e:c6:8e:ea:2b:77:
d5:2c:58:ec:10:2b:b5:30:35:99:3b:41:bf:5c:c4:
0e:cb:fc:bc:48:9d:3f:1d:8e:de:40:8d:5a:a8:3f:
4c:43:05:f4:3c:54:95:20:06:a4:c6:1a:20:4a:ec:
45:4f:be:ab:27:c1:51:64:d8:fe:77:84:21:5a:ca:
da:c6:8d:9e:43:a5:f4:88:2e:d2:fe:66:68:9c:7e:
ec:ef:7c:b7:2e:90:7c:d8:db:f2:9e:84:d6:cd:7c:
e4:98:32:4e:75:c8:f1:8b:58:5d:b1:4d:ca:b5:7c:
ae:a9:c7:9b:1c:ff:4a:1f:59:b4:6e:24:82:64:5d:
70:1f:83:ab:d8:3c:5c:ed:94:93:0f:28:20:50:be:
d6:57:a9:d0:9e:77:1c:ef:4d:90:a8:07:08:d7:06:
c0:f9:03:14:85:60:19:c6:d3:dc:cf:c7:75:02:15:
79:d9:bf:18:ab:75:80:b6:5b:84:c7:4c:dc:9b:84:
88:b3:1e:a3:07:34:72:71:ce:3c:5e:73:eb:9a:93:
89:58:d4:53:0a:c4:ce:cf:d7:11:a9:9c:c8:dc:97:
60:ad:d4:4f:c8:b0:97:aa:89:71:4e:9c:55:af:02:
e5:f4:43:da:2d:5b:c8:43:21:50:52:11:50:9a:86:
4e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:97:A5:DD:BE:DA:E9:E2:AB:C5:21:A2:7E:AB:C7:B5:20:C4:A5:A4
X509v3 Authority Key Identifier:
keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/qJel3b7a6eKrxSGifqvHtSDEpaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.46.191.0/24
Signature Algorithm: sha256WithRSAEncryption
81:22:6d:3d:27:40:1d:67:90:f7:76:fd:58:6b:92:74:56:c6:
2c:e9:f4:b5:87:be:3c:8e:80:79:d5:e8:68:60:e6:bb:6f:c3:
48:21:b3:19:d6:3b:39:89:91:bf:9e:dc:8e:5d:34:51:f5:04:
0c:51:af:66:a8:9d:92:f9:f2:f1:1a:ed:df:af:61:28:65:c8:
9c:9b:90:f3:85:77:92:63:8f:df:c7:b1:73:fc:57:97:29:1f:
c0:ce:b1:de:e5:3b:00:4e:74:8b:a6:fe:e7:6e:bd:c2:64:03:
41:ef:e6:de:1c:f1:24:a7:2c:ac:f4:5e:ed:4d:b3:8a:1a:00:
cb:79:74:16:85:7b:f7:b6:10:21:b9:17:7f:d0:b9:2d:e0:d9:
62:36:d3:39:5c:57:11:54:55:79:25:1b:37:3a:c4:1c:a3:7c:
52:f6:ec:15:ed:a6:94:8b:22:7b:93:8b:3e:d7:e7:1c:7d:c6:
32:1f:44:3d:a3:af:9e:81:98:94:4a:66:9b:57:25:6b:67:1b:
33:c1:f5:d4:18:c9:d3:75:38:63:da:33:18:67:1b:a2:74:73:
8b:0c:c3:73:f5:f5:35:3f:41:93:97:9c:c1:7a:37:1b:fb:ec:
52:36:b5:c4:b0:bf:9b:a0:95:46:56:db:44:8c:f5:9a:0b:5f:
47:ec:14:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:37 2023 by rpki-client on console-fra.rpki-client.org