Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/uSvyKG9KaOAvgYluwWiZbWx_QfQ.roa
File: uSvyKG9KaOAvgYluwWiZbWx_QfQ.roa (raw, json)
Hash identifier: R0obYRIFiIFK5tk2LWZiaCBAHUvt6dLp/9W+vQ2UVz4=
Subject key identifier: B9:2B:F2:28:6F:4A:68:E0:2F:81:89:6E:C1:68:99:6D:6C:7F:41:F4
Certificate issuer: /CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3
Certificate serial: 047814
Authority key identifier: 13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/uSvyKG9KaOAvgYluwWiZbWx_QfQ.roa
Signing time: Thu 03 Mar 2022 08:57:29 +0000
ROA not before: Thu 03 Mar 2022 08:57:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52110
IP address blocks: 46.174.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292884 (0x47814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3
Validity
Not Before: Mar 3 08:57:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b92bf2286f4a68e02f81896ec168996d6c7f41f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:69:91:8c:fa:88:bc:b5:c4:86:ad:b2:79:
42:7a:88:9f:21:e8:38:60:c6:0e:9f:a4:ae:c5:90:
e9:07:e8:2d:71:2d:00:5f:03:7d:e4:e2:be:92:29:
06:c2:d5:33:26:9a:a5:4a:71:15:e2:27:80:2c:ed:
72:85:c7:34:60:e4:10:51:9d:6f:b7:cc:51:49:ee:
20:cf:f0:01:d3:ec:a6:14:22:4c:41:96:f2:27:07:
48:48:4a:a8:db:3b:37:42:a3:5c:0a:1e:39:05:1f:
bf:17:0e:69:d0:fa:79:5f:aa:8e:1b:fe:af:6d:75:
d7:56:1e:3d:11:7f:1b:c0:76:f1:ad:f1:75:01:64:
7f:e3:52:3d:e6:39:ff:2f:13:06:89:a5:31:62:cb:
8f:5e:1d:69:c7:c8:96:57:dd:f6:c6:a8:a9:28:ce:
1f:e1:3e:ac:10:a0:7c:6e:5f:be:f0:4c:f0:63:85:
e1:5b:44:4d:31:e2:50:2d:15:2c:fd:87:a6:72:5c:
01:ea:f9:14:ab:02:98:34:3b:f4:c7:0d:31:f6:f6:
7e:19:3e:b4:a4:1f:bb:7b:22:bf:f2:46:29:95:45:
02:87:50:5c:7d:6b:f4:21:59:03:30:93:21:87:e7:
76:7e:f0:e5:bb:29:98:d7:e1:96:68:3d:7c:6d:5d:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2B:F2:28:6F:4A:68:E0:2F:81:89:6E:C1:68:99:6D:6C:7F:41:F4
X509v3 Authority Key Identifier:
keyid:13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/uSvyKG9KaOAvgYluwWiZbWx_QfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.24.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:2a:4d:49:44:0b:a8:06:ff:72:9a:22:2b:46:ef:3a:d2:a2:
99:af:21:59:61:c5:77:5a:07:56:d8:bf:4a:9f:73:0b:67:3d:
7d:48:f6:df:33:6f:51:01:2e:1a:27:ff:74:40:1b:a5:15:a0:
92:cb:4f:ae:a0:b8:68:02:5b:e1:45:c0:d9:78:cf:ce:8d:ff:
91:ce:e8:39:18:4b:54:c6:6b:b0:48:d7:21:77:7d:9f:7a:59:
c1:85:53:4d:5f:0b:e1:cc:fe:99:7c:39:8f:86:25:d1:56:89:
0c:ee:ae:27:4b:40:79:04:cd:55:47:e9:7b:95:51:e8:6c:3a:
6d:d5:2c:6f:9d:7a:2c:4e:07:c9:d7:81:bc:31:e9:66:d3:89:
17:4d:8f:c4:2b:e8:c0:3e:5e:35:9a:07:1e:90:4e:4d:fb:eb:
c8:26:f1:6c:00:4b:b6:77:16:6e:0e:f7:30:70:ab:10:34:3d:
e1:bd:c5:32:bc:52:62:fe:12:b4:8b:65:5e:62:ff:77:08:5f:
eb:23:16:e5:6a:8d:d4:5a:0d:2b:a6:00:aa:d0:e1:64:21:f6:
f1:22:b1:2d:6f:32:46:7f:2c:01:01:31:0a:1b:37:d0:ce:15:
1e:a1:7f:34:ee:f4:22:2c:b3:1c:34:74:07:98:58:b4:0a:e7:
1f:27:db:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:48 2024 by rpki-client on console-ams.rpki-client.org