Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/qpBmSgzIUZ-JF_w_FubT7VrF8c4.roa
File: qpBmSgzIUZ-JF_w_FubT7VrF8c4.roa (raw, json)
Hash identifier: D0TzUGDY3zzLqGnxf0bS4buT2D40BHpxBb7Zrh1QmS0=
Subject key identifier: AA:90:66:4A:0C:C8:51:9F:89:17:FC:3F:16:E6:D3:ED:5A:C5:F1:CE
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 3574718D
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/qpBmSgzIUZ-JF_w_FubT7VrF8c4.roa
Signing time: Wed 20 Apr 2022 10:11:55 +0000
ROA not before: Wed 20 Apr 2022 10:11:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18046
IP address blocks: 46.32.186.0/24 maxlen: 24
46.32.185.0/24 maxlen: 24
46.32.184.0/24 maxlen: 24
46.32.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896823693 (0x3574718d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Apr 20 10:11:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa90664a0cc8519f8917fc3f16e6d3ed5ac5f1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:39:d6:41:41:79:63:c5:4d:ea:c3:df:14:b6:
f9:e2:cc:3a:2d:80:41:08:9d:ca:66:3b:55:77:5d:
ba:45:07:57:1e:a9:8f:97:06:64:27:a2:a9:5d:1e:
5e:e0:6e:a8:91:37:06:de:c2:df:42:dc:44:d5:7a:
a5:94:1b:58:bc:4c:2d:fb:ad:39:73:05:2e:31:62:
b3:f0:a3:58:49:79:01:1f:83:d9:db:76:71:9d:f3:
e4:01:dc:75:64:16:64:93:30:6a:66:03:8f:93:fb:
49:e0:94:99:18:ac:76:c6:d9:61:f3:2b:d8:84:47:
3d:3f:33:af:76:33:e6:80:f3:2a:f5:b5:df:4f:ba:
0d:22:f3:8e:d0:2a:c7:be:ba:35:be:dc:ce:f3:6e:
16:bf:6c:6f:38:ea:6a:ab:ed:1f:0b:35:22:6d:bf:
18:29:71:88:52:13:22:d0:92:58:72:88:f5:33:04:
0d:0f:78:a0:3c:51:24:98:ae:fe:98:bc:ac:59:b9:
ff:23:a1:fd:ad:bd:fd:f4:ea:7d:f1:49:0a:59:7a:
1e:19:2f:b4:ab:28:17:85:f6:27:31:65:14:61:c5:
52:70:04:53:0a:37:8b:75:ac:c4:5b:79:1d:ac:fe:
b4:0a:f2:b6:99:68:7c:04:02:1e:1f:1a:f9:b8:19:
b7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:90:66:4A:0C:C8:51:9F:89:17:FC:3F:16:E6:D3:ED:5A:C5:F1:CE
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/qpBmSgzIUZ-JF_w_FubT7VrF8c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.184.0/22
Signature Algorithm: sha256WithRSAEncryption
62:a5:5b:48:55:2f:19:68:3d:b5:00:26:09:19:c9:30:61:59:
db:ad:0e:18:40:85:9d:ef:3e:cd:5e:a8:0b:d7:65:e9:48:fe:
5f:c4:93:f7:e9:bf:7f:87:76:68:db:12:8f:01:39:a9:28:6a:
d8:36:fa:bf:d9:4e:a0:25:d0:90:25:53:9d:3d:42:87:19:c0:
20:bf:20:dc:db:f3:8a:96:bc:b4:83:c6:a9:fa:9f:7a:67:ea:
2a:75:83:1e:04:d2:a0:af:49:3e:20:53:c6:bd:6a:9f:f2:fb:
3f:89:89:9e:0e:55:a9:89:d2:84:9c:64:42:3a:fe:a0:cc:92:
9e:b3:3d:e1:48:b8:83:17:06:60:61:6c:da:7a:89:ee:f9:a5:
e2:39:cc:27:7f:ef:40:32:3b:6b:b0:b7:14:a5:d4:d1:ca:16:
a3:28:25:b8:49:4f:38:bb:5c:e2:35:be:7f:d5:5f:6e:a3:cc:
63:4d:43:28:32:f2:87:7a:df:c7:0e:c3:31:0f:ca:2a:f4:a4:
29:c9:75:82:80:78:90:fa:75:0a:6c:be:96:52:5d:d4:87:7d:
85:93:a2:ad:d3:fa:2e:f4:cb:29:de:77:50:cc:81:8f:32:dc:
76:00:54:0b:aa:45:75:2a:6c:9f:40:f6:c7:87:33:5c:91:2c:
ee:52:12:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:22 2024 by rpki-client on console-ams.rpki-client.org