Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/siwVPMpHB12Ei2rWezpPUKr4QBQ.roa
File: siwVPMpHB12Ei2rWezpPUKr4QBQ.roa (raw, json)
Hash identifier: ZrAzArvHUj9biVjWuJWcfSMiEl+sAuOBjwkWmtbhhhA=
Subject key identifier: B2:2C:15:3C:CA:47:07:5D:84:8B:6A:D6:7B:3A:4F:50:AA:F8:40:14
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 018558D3F21E164846E6D9BBC4DF195A18BF
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/siwVPMpHB12Ei2rWezpPUKr4QBQ.roa
Signing time: Wed 28 Dec 2022 13:02:42 +0000
ROA not before: Wed 28 Dec 2022 13:02:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211790
IP address blocks: 46.32.168.0/24 maxlen: 24
46.32.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:d3:f2:1e:16:48:46:e6:d9:bb:c4:df:19:5a:18:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Dec 28 13:02:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b22c153cca47075d848b6ad67b3a4f50aaf84014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:d1:cf:73:21:2e:d8:b0:8a:cc:18:a6:ea:
ff:92:22:c5:77:db:8b:24:16:12:cc:6b:f5:cf:4b:
7c:2a:43:49:c9:4f:1c:4b:96:99:50:4e:0a:2e:5d:
6a:03:a8:a2:38:5c:b5:46:bd:3d:ae:bf:ab:91:01:
e7:f1:af:87:44:c0:42:66:13:75:bb:2b:ac:d9:1d:
f2:db:e0:5f:d2:05:81:ad:da:23:30:d8:11:99:65:
e6:8e:55:56:5f:3d:05:15:84:5a:1b:38:8e:48:5c:
54:4d:17:ef:4e:56:0e:19:bb:dc:73:cd:2f:93:27:
a5:8c:b2:34:3d:0a:6b:49:45:87:fe:ec:ff:9b:a0:
fb:e4:5c:61:39:21:ba:c9:ea:5a:21:2a:e5:58:73:
80:10:34:44:fb:16:34:96:c1:4b:5b:29:a6:bd:14:
8d:5a:b7:0f:e5:92:99:d6:cc:16:65:8a:4d:f7:cc:
04:5e:ec:a1:19:e0:55:9b:e0:87:10:f1:dc:e6:a7:
cf:6f:1c:6b:19:10:ae:b5:a8:47:cd:03:e7:52:5c:
76:13:54:03:98:5b:0e:9f:03:4c:ec:b3:03:cc:87:
6d:93:d2:dc:c8:70:fe:f1:28:b5:e0:3c:e8:06:5f:
a3:f9:40:87:20:30:fa:ec:19:4a:76:66:1c:df:30:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2C:15:3C:CA:47:07:5D:84:8B:6A:D6:7B:3A:4F:50:AA:F8:40:14
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/siwVPMpHB12Ei2rWezpPUKr4QBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.168.0/24
46.32.176.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:94:db:00:94:ec:4f:d6:62:8c:a5:64:e2:0d:b2:6b:41:3e:
99:96:12:7b:67:c0:f5:da:99:30:c6:44:12:08:4f:40:c2:94:
10:db:5b:25:af:dd:89:fc:bb:73:86:3b:a0:27:c6:dc:66:dd:
1a:4b:5d:89:bf:71:ab:36:a9:61:da:81:4c:77:33:46:7e:b0:
df:eb:2c:09:ef:d9:38:e2:b4:bf:2f:14:9d:28:07:f0:32:10:
b3:c3:ef:49:85:58:c0:c4:7b:79:49:62:35:cf:7f:e1:cd:bb:
dd:cd:2c:cd:ab:54:3a:5b:49:0a:cb:e9:7f:9a:5b:58:c7:e2:
df:64:7a:66:a2:fb:37:7e:21:62:5b:00:cc:bc:67:1a:71:14:
1b:86:02:36:34:aa:6f:9d:23:a8:9b:f2:b9:5e:cd:e7:1c:60:
37:92:7f:62:60:87:12:fe:ca:df:c7:64:6b:5b:8d:ec:2f:99:
55:a8:e8:16:8d:94:2c:28:40:48:ca:2d:77:d0:08:a6:5a:41:
d9:68:e5:b7:16:99:d3:5e:b2:bc:7d:fb:a2:14:32:f7:51:84:
5d:f1:26:49:bf:e9:ba:b3:e7:a3:5a:5e:c6:e0:91:c6:cc:75:
79:3a:fd:55:2c:b9:f8:cc:3b:d4:01:9b:8b:1a:61:3c:42:f4:
fb:30:fa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:22 2024 by rpki-client on console-ams.rpki-client.org