Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/Ebw-eKIhREtx3jlfPLb_mIpldPk.roa
File: Ebw-eKIhREtx3jlfPLb_mIpldPk.roa (raw, json)
Hash identifier: eyxY0YuQR+5H2WO3KRi67Mlf9qksmsYZiwlWk0SRcWU=
Subject key identifier: 11:BC:3E:78:A2:21:44:4B:71:DE:39:5F:3C:B6:FF:98:8A:65:74:F9
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 0181D426E875D7BA21B312FB03AA0F40AE5B
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/Ebw-eKIhREtx3jlfPLb_mIpldPk.roa
Signing time: Wed 06 Jul 2022 15:35:28 +0000
ROA not before: Wed 06 Jul 2022 15:35:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204079
IP address blocks: 46.36.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d4:26:e8:75:d7:ba:21:b3:12:fb:03:aa:0f:40:ae:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Jul 6 15:35:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11bc3e78a221444b71de395f3cb6ff988a6574f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0e:8c:2e:d5:dc:03:54:f3:b4:9b:54:f2:a7:
16:0b:80:15:db:c2:34:cf:a3:c5:e3:05:cb:8b:92:
be:b4:2c:08:1f:7c:69:7f:97:9e:2f:ac:62:00:d2:
1c:d5:0b:e6:0d:93:ac:80:e6:e6:b9:c4:bb:cb:98:
14:c0:da:24:2d:85:69:bb:36:96:d5:4f:e7:39:b6:
74:a2:a5:c1:9a:c1:9f:04:73:be:57:74:b5:a3:aa:
9a:47:0a:84:9e:df:22:19:9f:28:fa:e8:40:df:14:
cc:7d:51:e8:27:2b:35:d2:eb:a6:1e:d1:c3:23:37:
e7:25:9c:a8:98:56:ae:7d:d2:b4:44:8a:8c:59:7f:
98:f4:62:ea:9f:55:d4:62:b1:0c:25:f0:03:75:62:
52:87:a7:04:81:cf:bc:ff:74:d4:e1:d1:55:1a:c0:
02:ff:aa:f3:69:c9:6d:54:9b:67:86:eb:35:f3:e0:
ec:80:10:e8:e4:47:eb:1b:25:19:ae:ef:0c:0d:a4:
c8:1e:f0:3c:05:ca:cd:77:16:fa:fb:73:a3:ae:ea:
83:68:24:a4:fc:51:21:4a:11:64:5c:4e:a1:b5:ff:
5d:1c:42:6f:8b:88:59:dc:f6:40:0e:be:ea:d2:a7:
b1:9c:f7:66:bc:dc:ec:0c:b6:17:b7:66:b7:e0:06:
9f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BC:3E:78:A2:21:44:4B:71:DE:39:5F:3C:B6:FF:98:8A:65:74:F9
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/Ebw-eKIhREtx3jlfPLb_mIpldPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.98.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d7:cd:61:98:79:ce:e3:3d:02:38:d4:69:98:ec:ca:a9:d5:
10:ab:23:c1:23:17:42:60:4d:f0:fb:87:0e:76:da:5c:8d:23:
f4:b9:e6:b8:71:6b:1a:1a:61:70:bc:db:2a:0a:f5:11:e9:89:
6d:05:69:03:87:72:0c:3b:a4:5a:c1:6d:3f:0f:ce:13:1d:82:
d8:e4:79:44:d7:0e:7c:d2:e2:f8:29:58:15:ce:6e:fe:e6:b5:
ff:4a:9b:ac:c0:0b:b3:97:52:29:6a:6f:eb:e8:01:b9:27:87:
4e:50:3e:cd:2c:c3:b0:27:99:3c:b0:e7:71:db:b9:76:9d:c6:
dd:02:b0:0a:9d:34:3f:8d:65:a6:04:5c:ae:ae:31:38:88:65:
10:b1:25:ee:1c:ab:b0:b3:51:7c:4d:cd:05:a0:6e:52:bb:1b:
4b:6f:ee:96:51:1e:c0:7b:9f:50:eb:2f:95:f7:43:24:ea:53:
b5:ed:ad:3c:cf:31:7c:ea:e1:9e:5a:72:2c:8a:79:dd:e5:f1:
39:8a:3a:16:9c:fa:7d:71:c9:17:5c:16:3d:35:6f:5f:74:39:
71:93:24:36:cf:d3:e8:31:2c:e8:fe:52:aa:2d:d1:32:cc:14:
35:57:a5:57:d9:0f:9a:95:14:1a:92:e8:69:da:cd:9b:09:a1:
6f:74:4c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:52 2023 by rpki-client on console-fra.rpki-client.org