Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/hxRps5QGUdJzG01mZmBByQkb42I.roa
File: hxRps5QGUdJzG01mZmBByQkb42I.roa (raw, json)
Hash identifier: Imn0LcUWWtkTk0STqd1zWat3tKEW+2NfqZr9bjxsNwo=
Subject key identifier: 87:14:69:B3:94:06:51:D2:73:1B:4D:66:66:60:41:C9:09:1B:E3:62
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 0181D342F11A924A90F109145723C3417A7F
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/hxRps5QGUdJzG01mZmBByQkb42I.roa
Signing time: Wed 06 Jul 2022 11:26:28 +0000
ROA not before: Wed 06 Jul 2022 11:26:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51759
IP address blocks: 46.36.108.0/24 maxlen: 24
46.36.108.0/23 maxlen: 23
46.36.107.0/24 maxlen: 24
46.36.106.0/24 maxlen: 24
46.36.110.0/24 maxlen: 24
46.36.109.0/24 maxlen: 24
46.36.97.0/24 maxlen: 24
46.36.96.0/23 maxlen: 23
46.36.96.0/24 maxlen: 24
46.36.102.0/24 maxlen: 24
46.36.101.0/24 maxlen: 24
46.36.100.0/24 maxlen: 24
46.36.100.0/22 maxlen: 22
46.36.99.0/24 maxlen: 24
46.36.105.0/24 maxlen: 24
46.36.104.0/22 maxlen: 22
46.36.104.0/24 maxlen: 24
46.36.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d3:42:f1:1a:92:4a:90:f1:09:14:57:23:c3:41:7a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Jul 6 11:26:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=871469b3940651d2731b4d66666041c9091be362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2c:25:62:32:47:c6:d5:66:0c:98:31:da:a7:
b6:f4:ad:40:e3:9d:91:4e:dd:fc:13:00:9e:70:25:
e2:43:a2:0a:40:4c:07:08:64:12:fe:40:4c:b2:59:
86:19:2f:e2:c1:41:7e:cb:e9:6b:db:d9:67:db:05:
75:79:a4:87:1d:2b:31:9f:60:bb:fd:e5:4a:ed:18:
8d:ce:2e:49:39:2d:82:ec:44:d6:47:78:4d:47:95:
90:ae:64:f4:e0:30:1d:bc:7f:91:93:19:67:82:bd:
5b:2f:0f:ba:df:2b:33:e6:e0:91:61:60:f7:7c:04:
e6:ee:5c:38:ef:32:9a:fc:bb:f0:a0:85:db:61:c1:
0c:1f:5d:62:38:a1:a3:be:db:61:7f:67:46:27:50:
62:ec:04:4f:53:b9:a3:d0:83:e2:30:78:f9:9d:18:
f2:4f:f7:ac:28:d0:b6:3e:65:59:ad:0c:c6:cd:99:
90:a0:5c:2d:74:9f:56:a1:10:70:0c:7f:90:70:af:
35:92:d2:03:33:d1:46:cf:46:7e:cb:4e:63:db:25:
df:3d:a3:f9:00:f0:d0:4c:98:fd:34:44:0e:f4:92:
9b:5a:a5:11:92:5e:4d:a5:62:32:24:be:bb:8d:e8:
8e:bb:65:96:77:08:e5:5b:6d:e7:ba:35:c1:63:04:
7f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:14:69:B3:94:06:51:D2:73:1B:4D:66:66:60:41:C9:09:1B:E3:62
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/hxRps5QGUdJzG01mZmBByQkb42I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.96.0/23
46.36.99.0-46.36.110.255
Signature Algorithm: sha256WithRSAEncryption
2c:52:a6:b8:92:2b:1b:aa:33:10:f0:c3:a3:a9:31:21:32:6d:
ce:99:22:ee:6e:d1:3d:b2:a9:15:15:c5:e0:30:69:61:99:c4:
5c:08:7b:a5:cf:d8:ce:3b:bf:d9:6e:52:a2:2b:49:ac:3b:c7:
d1:69:cb:55:d3:17:07:17:43:fe:f6:5c:e5:37:d5:45:9f:bb:
91:4a:41:40:82:5a:18:81:08:2b:91:a2:4d:ea:f3:ba:93:81:
49:c2:1a:62:9a:54:1b:da:40:63:c8:87:18:a6:64:e9:db:a1:
bc:40:44:f6:1b:5b:39:94:62:69:5c:d1:c5:24:f9:68:56:96:
b0:61:43:14:5c:66:93:91:90:3a:72:d2:df:a1:f1:03:98:1f:
b6:ac:32:54:7f:b3:75:16:97:f2:6e:13:9d:e4:26:63:a7:21:
5d:84:86:a7:2e:db:e1:1a:c3:62:86:35:66:e8:7d:8f:45:fb:
6a:c7:d7:2d:7c:28:54:20:e8:88:d8:ed:12:60:76:b1:ff:0f:
50:15:5e:52:e8:b9:85:e2:91:dc:1d:a3:0f:7f:72:02:ff:73:
95:7c:05:5f:66:5a:2d:93:9f:47:92:c1:d7:f2:51:ff:08:0f:
c7:53:b6:2d:b5:90:46:f1:9f:63:4c:40:51:82:ce:3e:39:e4:
f1:73:b5:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:38 2024 by rpki-client on console-ams.rpki-client.org