Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/20dz1BZuAjPBdX2kGvI3xyBmHGg.roa
File: 20dz1BZuAjPBdX2kGvI3xyBmHGg.roa (raw, json)
Hash identifier: WmPLCbv5u3Nf3NWzUYuKUGkfvus/lwVlgO4SyE2qm/U=
Subject key identifier: DB:47:73:D4:16:6E:02:33:C1:75:7D:A4:1A:F2:37:C7:20:66:1C:68
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 348F13A4
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/20dz1BZuAjPBdX2kGvI3xyBmHGg.roa
Signing time: Sat 01 Jan 2022 02:55:10 +0000
ROA not before: Sat 01 Jan 2022 02:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51759
IP address blocks: 46.36.108.0/24 maxlen: 24
46.36.108.0/23 maxlen: 23
46.36.107.0/24 maxlen: 24
46.36.106.0/24 maxlen: 24
46.36.110.0/24 maxlen: 24
46.36.109.0/24 maxlen: 24
46.36.98.0/24 maxlen: 24
46.36.97.0/24 maxlen: 24
46.36.96.0/24 maxlen: 24
46.36.96.0/21 maxlen: 21
46.36.102.0/24 maxlen: 24
46.36.101.0/24 maxlen: 24
46.36.100.0/24 maxlen: 24
46.36.99.0/24 maxlen: 24
46.36.105.0/24 maxlen: 24
46.36.104.0/22 maxlen: 22
46.36.104.0/24 maxlen: 24
46.36.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 881791908 (0x348f13a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Jan 1 02:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db4773d4166e0233c1757da41af237c720661c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:27:19:90:5c:cb:1b:f3:0a:f9:1f:00:1d:
6d:63:ac:62:4b:c8:d1:50:05:88:e8:cc:f4:1e:40:
7b:df:50:fb:e6:b8:40:13:90:bf:47:12:40:51:20:
f2:07:2f:b7:90:cd:73:78:91:6d:9f:7c:93:09:bf:
f6:25:98:6c:2e:c6:a1:4e:fc:43:a2:3d:a8:43:06:
41:4d:92:e5:6b:a6:19:06:02:ae:eb:be:64:c0:ab:
30:4c:11:4c:41:ad:f2:9d:34:85:08:a1:9a:51:f2:
48:1e:19:63:af:24:54:49:78:d6:f1:9b:44:a9:67:
35:ec:3d:57:bc:4e:77:a7:09:59:f3:94:c2:db:3c:
67:3b:6e:34:26:f3:07:02:7b:3e:78:4b:cd:d3:c9:
36:52:34:d5:23:e0:a9:69:cf:68:1a:fd:b5:9c:e6:
f7:73:63:e8:38:cc:40:15:62:e2:97:d1:5f:e9:d8:
6d:3e:cc:d2:bf:ef:d8:17:9d:a3:c1:69:f1:16:4a:
53:42:31:90:00:9a:0f:7e:37:33:3d:fe:da:a2:e2:
08:1c:db:1b:93:41:50:96:69:d6:df:ff:56:d1:60:
09:0a:60:dc:33:e7:d1:4b:85:43:37:1d:24:09:31:
5a:c2:63:d5:b0:72:82:7d:4e:ac:98:11:f5:06:43:
88:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:47:73:D4:16:6E:02:33:C1:75:7D:A4:1A:F2:37:C7:20:66:1C:68
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/20dz1BZuAjPBdX2kGvI3xyBmHGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.96.0-46.36.110.255
Signature Algorithm: sha256WithRSAEncryption
34:31:ad:e1:84:ba:96:56:55:77:be:cf:ee:e5:cb:5d:bc:53:
0c:e9:7b:1b:33:8b:39:f1:39:68:f7:e9:fa:4c:f6:c0:4f:86:
d4:fd:99:b4:b3:3c:7f:85:12:78:37:b9:a2:08:da:a8:92:91:
00:90:43:ce:4e:e7:4a:30:16:b9:c4:23:e5:8b:ce:88:71:85:
ff:80:72:8f:06:d7:3d:42:fe:ea:8e:3d:cc:e8:ff:81:83:70:
d5:65:9c:e8:e9:36:43:4f:5d:f4:25:20:73:9f:fa:db:0a:4f:
1f:3a:d1:e7:be:63:04:4f:cc:10:c7:df:da:b8:a4:2c:17:eb:
b6:d4:be:7e:29:d7:3f:ae:0c:fc:c3:3b:b9:d4:0f:9d:cb:3e:
f2:25:e3:25:f7:08:75:65:6f:86:08:a7:ed:95:6b:21:4d:2d:
9d:de:64:7d:53:c6:37:5b:0e:bb:d2:98:7d:f0:f2:82:df:e2:
e1:11:3b:7f:55:5b:9e:59:b5:e7:9b:d5:be:95:c6:61:a4:94:
8d:e8:68:1e:10:08:2a:4c:cf:14:b6:74:e1:d0:a9:f1:4d:9b:
61:a3:58:77:ab:d8:2b:25:69:0b:52:6c:b9:83:6d:75:45:0f:
82:2b:1b:75:25:f0:b8:90:86:a8:2c:90:e3:fe:92:24:d0:b9:
ec:82:ae:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:39 2023 by rpki-client on console-ams.rpki-client.org