Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/hKJT0CK-e8KaYaaxtCjClNz_3Lg.roa
File: hKJT0CK-e8KaYaaxtCjClNz_3Lg.roa (raw, json)
Hash identifier: vRWXOjDUmDFPFJQQBFWP/Fhghfb1EzX+MrYoDVAOLic=
Subject key identifier: 84:A2:53:D0:22:BE:7B:C2:9A:61:A6:B1:B4:28:C2:94:DC:FF:DC:B8
Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial: 02021760
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/hKJT0CK-e8KaYaaxtCjClNz_3Lg.roa
Signing time: Sat 01 Jan 2022 03:59:42 +0000
ROA not before: Sat 01 Jan 2022 03:59:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203088
IP address blocks: 46.172.80.0/24 maxlen: 24
46.172.87.0/24 maxlen: 24
46.172.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33691488 (0x2021760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
Validity
Not Before: Jan 1 03:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84a253d022be7bc29a61a6b1b428c294dcffdcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:eb:e2:29:be:84:53:99:fc:e8:c3:fd:e2:
8d:dc:10:ab:78:56:8f:a7:4f:a3:a7:42:7d:b6:5d:
ac:9c:38:a2:19:fd:90:32:4f:29:15:47:05:fa:ec:
62:5c:f0:ce:80:66:4f:d6:e8:aa:9d:8d:b6:6f:40:
e7:77:a1:51:e2:0e:0e:df:92:e3:b2:54:01:72:a2:
89:3f:bd:19:a7:98:40:92:1e:05:6e:86:5f:30:8b:
9c:75:bd:7d:52:c4:ce:6a:5a:66:ca:20:ef:c6:31:
06:50:52:a2:4a:57:3c:63:50:b6:fa:92:c4:37:02:
16:80:7f:56:7b:0d:85:92:0d:6a:46:71:aa:e2:d0:
f9:8a:75:aa:c6:d6:e6:6f:e0:25:cc:7a:15:35:69:
93:f7:26:0c:95:1f:d7:d7:65:5b:66:6e:c0:aa:48:
ed:54:5d:a4:10:cd:22:11:21:03:79:d6:db:8c:ed:
36:cd:03:39:fc:fe:43:cf:d4:e2:0c:b4:08:a8:ff:
39:51:74:2a:f1:5b:1f:58:03:a2:c7:50:ac:69:d9:
3f:2d:80:87:30:96:6f:7d:15:8f:27:2e:90:f2:30:
fc:c0:ff:de:8e:83:6e:7c:ad:ed:a3:ad:8a:a2:2a:
38:77:04:7e:9b:6c:e7:ac:66:a0:7e:ba:ec:3d:ce:
07:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A2:53:D0:22:BE:7B:C2:9A:61:A6:B1:B4:28:C2:94:DC:FF:DC:B8
X509v3 Authority Key Identifier:
keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/hKJT0CK-e8KaYaaxtCjClNz_3Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.80.0/24
46.172.86.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:a4:7e:7e:a2:eb:20:1e:eb:1e:ae:53:69:03:9e:2b:65:2e:
41:d7:b3:41:35:ac:e0:17:f9:dc:fd:2a:9e:f0:07:a4:0c:a4:
83:f3:57:36:8a:7b:32:2d:d2:0b:c1:09:37:74:c0:76:4c:41:
13:b9:77:dc:3a:e1:76:12:53:a1:36:1b:b1:84:fc:2b:42:11:
e4:9f:ee:87:d5:d5:54:74:ff:1e:ec:06:36:6d:4a:21:7f:45:
42:5d:91:20:e9:b0:14:9b:14:e3:22:2c:d1:8d:db:b0:84:f6:
dc:36:02:03:c7:3e:2b:91:0b:b0:6d:a2:2c:48:c2:5a:09:07:
8f:16:8a:24:72:a1:fc:75:57:eb:2a:f4:a5:04:db:40:03:54:
42:23:af:82:aa:2a:49:4d:4d:75:3a:82:4b:9f:86:34:e9:0a:
88:d2:00:e0:68:bc:5a:8a:79:c7:af:49:9c:bd:58:37:d8:9b:
d8:b5:ff:3c:ef:db:ad:87:ff:20:46:4c:aa:4f:bf:e0:c2:c5:
41:8d:48:74:39:67:89:22:1c:c7:87:be:26:49:17:02:2d:3a:
58:27:ae:8c:c1:65:5e:55:66:5f:06:0b:f0:50:39:0c:d8:79:
9a:c2:b7:c7:b7:af:62:67:b3:61:59:c0:c3:f2:a1:e9:0f:2a:
ed:8f:c8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:32 2023 by rpki-client on console-ams.rpki-client.org