Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/GAZqUjCga7aFyFhSN9lwEwkh5Bc.roa
File: GAZqUjCga7aFyFhSN9lwEwkh5Bc.roa (raw, json)
Hash identifier: giTwnlhTAubjdbCVL7D97iOmrv5VQfN5QKNfZae9+AY=
Subject key identifier: 18:06:6A:52:30:A0:6B:B6:85:C8:58:52:37:D9:70:13:09:21:E4:17
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 3585C79D
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/GAZqUjCga7aFyFhSN9lwEwkh5Bc.roa
Signing time: Tue 26 Apr 2022 20:03:33 +0000
ROA not before: Tue 26 Apr 2022 20:03:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18046
IP address blocks: 46.32.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897959837 (0x3585c79d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Apr 26 20:03:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18066a5230a06bb685c8585237d970130921e417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:14:df:4e:ee:eb:72:c6:02:b6:e9:63:ee:
db:03:87:4a:a1:15:66:10:b3:c3:15:e6:56:62:8e:
b3:4c:e0:2b:d3:28:e4:a8:9f:5e:64:f1:a7:e4:8b:
e6:5d:72:86:32:1f:88:2d:77:d7:69:1e:28:8f:f2:
91:26:42:03:e6:cf:78:c0:9f:b9:75:18:5b:0f:82:
01:cd:35:00:47:5e:24:9d:ca:d9:da:89:d2:53:a5:
3b:17:f3:e8:7b:e2:68:9b:76:23:7d:0a:08:bd:e2:
d1:af:ee:c4:bf:f8:03:bb:a4:70:81:01:70:8f:62:
45:f1:24:05:16:0c:a0:19:4b:f1:e7:2c:ea:b4:56:
be:8c:71:75:eb:41:6b:db:fd:dd:0c:3f:2b:e3:3b:
3d:27:3f:36:af:f1:55:ed:04:11:15:35:20:52:26:
5b:a7:e5:ae:fa:72:59:c0:72:0e:1d:55:a6:ea:15:
e1:9b:b6:10:7c:bf:4a:28:52:de:9b:ab:ca:d7:f4:
0e:95:3e:b2:f2:3d:8e:0a:5e:c7:90:41:8b:c4:7a:
18:7f:ef:ec:e9:48:55:4e:4a:8d:18:c8:95:05:53:
84:fb:55:93:47:55:bc:3c:8c:47:93:2d:38:a9:b3:
08:0b:26:d4:94:40:29:3f:24:2c:e8:49:b7:5f:ee:
ff:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:06:6A:52:30:A0:6B:B6:85:C8:58:52:37:D9:70:13:09:21:E4:17
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/GAZqUjCga7aFyFhSN9lwEwkh5Bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.184.0/22
Signature Algorithm: sha256WithRSAEncryption
02:e2:9c:f8:fa:dd:2a:d8:7a:10:ed:74:42:06:fc:78:bf:71:
37:2d:75:bf:34:00:ee:94:ef:69:0f:fd:42:b6:7a:81:bb:0b:
d3:ec:6a:25:bf:6b:e5:bd:c5:a3:b8:74:37:7e:02:89:41:d4:
65:8a:eb:86:52:02:3f:8c:56:e7:29:59:b1:6c:f0:f2:f5:81:
f3:b2:2f:2b:aa:39:c4:28:b9:c5:d2:47:34:5d:58:12:9e:3b:
08:2f:9f:46:7e:ac:6c:b0:18:87:d8:c4:2f:18:4f:94:65:5e:
b9:56:0e:27:2a:3a:58:61:82:be:e2:ad:9c:38:1f:e6:cd:ea:
00:98:d8:52:f9:b2:ca:ea:5b:78:df:88:d4:b6:95:af:dd:14:
f3:80:0e:4c:02:c4:e6:73:06:2d:d6:f2:5c:47:ad:28:b8:1c:
fc:7d:83:79:8e:9d:35:d7:f8:5c:67:68:f9:dd:3c:14:ec:7f:
29:79:30:e7:db:ed:d1:36:83:4f:ed:4e:10:d7:ae:f2:89:9c:
94:e9:41:c9:a7:41:8e:0c:48:53:34:b3:72:95:5e:fa:2b:25:
6b:bf:85:b6:48:e2:d2:69:6f:20:50:f4:68:ee:7a:aa:e0:3a:
b3:20:6c:89:05:5a:b8:4e:c8:de:c6:ad:d7:a1:a5:03:32:48:
91:84:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:22 2024 by rpki-client on console-ams.rpki-client.org