Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/DOovZRCMwSYGv8KfmgPELy5bEws.roa
File: DOovZRCMwSYGv8KfmgPELy5bEws.roa (raw, json)
Hash identifier: /Czyz9xC5Kb/JAJXHaRG+5CFbi1r0AZU3CXJI77ilts=
Subject key identifier: 0C:EA:2F:65:10:8C:C1:26:06:BF:C2:9F:9A:03:C4:2F:2E:5B:13:0B
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018499E645DFAAA845008235AA038AB9C9B8
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/DOovZRCMwSYGv8KfmgPELy5bEws.roa
Signing time: Mon 21 Nov 2022 11:15:15 +0000
ROA not before: Mon 21 Nov 2022 11:15:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200615
IP address blocks: 46.243.76.0/22 maxlen: 22
193.42.60.0/22 maxlen: 22
77.83.32.0/22 maxlen: 22
2a09:e683:1::/48 maxlen: 48
2a09:e685::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:99:e6:45:df:aa:a8:45:00:82:35:aa:03:8a:b9:c9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Nov 21 11:15:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cea2f65108cc12606bfc29f9a03c42f2e5b130b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:60:46:11:e9:54:17:5c:b0:54:aa:f1:16:e6:
fb:6f:42:3d:b3:52:80:88:cf:81:40:24:6c:6b:0e:
15:c4:1a:e9:09:c1:59:1b:d8:cb:01:35:ed:60:69:
20:f2:5b:f9:8d:a0:91:d4:8d:4b:60:e0:f4:4d:5b:
ad:e3:45:31:d5:86:5e:8c:02:cd:84:c5:d3:eb:62:
ed:b5:1d:ba:ea:57:f6:5b:d4:43:fc:b5:58:69:11:
96:9c:4e:29:80:72:e9:9e:e4:a1:ce:59:bd:38:0b:
25:88:dc:f8:d5:b7:8a:be:3a:4a:d1:26:0a:61:50:
2a:36:d3:a8:5e:f6:94:ae:88:07:74:d4:34:b1:8f:
d6:d0:22:52:40:82:40:11:af:33:24:05:0e:e4:35:
e8:9a:80:6e:df:43:63:ad:90:b5:e6:3e:e6:00:9f:
d6:0c:ff:95:a0:db:6d:5b:f5:c7:7a:66:fe:2b:b3:
d7:e7:ab:69:1f:b3:72:6f:56:94:f3:c6:49:ed:5d:
24:4f:3c:65:ae:df:27:ff:8f:33:00:3e:ea:8c:8c:
92:bc:f9:56:05:17:2f:9f:03:21:30:49:98:eb:46:
4a:88:a1:83:a2:f6:90:db:73:d1:6c:91:da:16:84:
57:90:df:be:26:2d:65:78:68:43:5a:bd:28:7b:35:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EA:2F:65:10:8C:C1:26:06:BF:C2:9F:9A:03:C4:2F:2E:5B:13:0B
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/DOovZRCMwSYGv8KfmgPELy5bEws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.76.0/22
77.83.32.0/22
193.42.60.0/22
IPv6:
2a09:e683:1::/48
2a09:e685::/48
Signature Algorithm: sha256WithRSAEncryption
9e:19:f2:b0:42:a8:d7:e2:56:6a:b0:87:e1:59:4c:7e:9c:26:
22:4c:d5:ea:3e:3d:a6:92:3f:ae:98:a5:2a:97:ce:ec:1d:e0:
25:37:45:29:6f:c1:41:85:35:3c:01:d2:fd:37:24:12:76:17:
d6:a0:e6:d1:7c:73:8a:bd:34:da:1e:ad:98:b7:56:a7:ac:6d:
3d:06:b3:ed:59:84:6f:c6:dd:8e:92:06:7e:94:3a:75:3e:80:
8c:c8:ce:9a:ec:6b:54:ab:c8:15:f0:06:f6:1a:15:36:b5:93:
1a:19:96:d6:26:b3:33:fb:d3:b3:90:32:66:ef:67:6d:24:f3:
3e:7b:7c:96:e0:0e:00:c6:b0:12:5f:79:27:de:68:66:bd:3f:
4a:1b:11:7d:2d:68:56:5c:36:f1:ab:92:5e:0f:27:cc:08:49:
a3:56:53:55:2a:6b:13:1f:99:24:22:29:df:e8:c2:ae:ef:aa:
01:c6:22:26:da:f1:7b:34:51:f8:bc:71:95:4b:7f:d8:6a:c6:
0e:34:fd:e2:71:0f:c0:13:50:90:38:af:f2:4d:44:af:72:82:
49:83:01:3e:5a:cf:d9:28:e8:69:57:7b:3d:74:45:4e:56:d2:
8a:81:d0:1b:c0:6d:27:8d:0d:b0:30:c8:74:af:15:7b:b2:04:
99:6e:db:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:30 2023 by rpki-client on console-fra.rpki-client.org