Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/3p-EnL86tawi1dMkkqUkBx7x7IE.roa
File: 3p-EnL86tawi1dMkkqUkBx7x7IE.roa (raw, json)
Hash identifier: RFPbbOFALCQlCoQJvcF5CqD0tzrJwHCy2ExcLy8hWS4=
Subject key identifier: DE:9F:84:9C:BF:3A:B5:AC:22:D5:D3:24:92:A5:24:07:1E:F1:EC:81
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 0184010B58F923AA32F9A83B03AC999FD617
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/3p-EnL86tawi1dMkkqUkBx7x7IE.roa
Signing time: Sat 22 Oct 2022 18:53:51 +0000
ROA not before: Sat 22 Oct 2022 18:53:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199312
IP address blocks: 46.28.160.0/21 maxlen: 24
185.10.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:01:0b:58:f9:23:aa:32:f9:a8:3b:03:ac:99:9f:d6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Oct 22 18:53:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de9f849cbf3ab5ac22d5d32492a524071ef1ec81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:81:53:29:7a:31:d8:08:ea:7a:2e:54:1e:1a:
c8:27:5d:d1:09:66:40:b9:eb:b9:33:5e:c7:a0:b1:
8d:dd:42:0b:68:21:e6:2f:b6:fb:c2:59:19:fc:c7:
4f:1c:5b:78:75:39:c7:4e:c1:5b:b3:39:5a:96:9c:
3a:ef:42:ce:26:74:7d:44:d5:ea:43:91:b5:65:0b:
dd:47:eb:dd:06:80:11:a7:2f:74:1b:7c:4d:0f:f7:
e9:b7:90:9e:09:41:c7:20:72:1f:43:7e:c9:d3:5e:
b3:da:50:4e:c0:71:63:31:a5:6c:9b:6a:0b:e6:24:
38:9c:f5:6d:7c:41:61:51:60:83:f4:9b:2a:bc:34:
6f:73:fc:8d:8d:1c:63:a3:a8:ca:17:90:f0:13:91:
ab:c6:8f:4b:65:74:23:57:a2:90:5e:f4:7c:c8:a7:
e3:96:3a:d2:65:79:b6:91:fe:d8:4d:b4:3b:03:b6:
d6:f1:cf:00:95:6f:0a:07:fb:79:d0:8e:83:a7:76:
d0:bd:84:fa:10:dd:1c:c8:df:f8:d8:37:c5:f3:cf:
19:40:ae:c3:82:58:f1:88:1b:57:63:97:6f:d8:41:
23:d1:08:66:5f:e8:ef:9e:49:fa:53:40:9b:34:6a:
99:39:b7:7a:f5:3f:38:5a:52:05:e7:8a:33:d5:7f:
5f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9F:84:9C:BF:3A:B5:AC:22:D5:D3:24:92:A5:24:07:1E:F1:EC:81
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/3p-EnL86tawi1dMkkqUkBx7x7IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.160.0/21
185.10.248.0/22
Signature Algorithm: sha256WithRSAEncryption
42:62:1c:ef:e7:66:b4:dd:72:2a:02:69:8f:aa:2d:01:e8:03:
c9:bf:57:34:98:96:63:6f:71:3c:ba:6e:59:2e:23:5f:07:84:
fc:ca:20:05:11:54:58:cf:44:b7:a8:d0:4f:b2:b4:21:aa:05:
b5:c1:ae:67:ac:f7:ea:88:02:7f:44:9f:a2:c1:af:f7:25:4b:
3d:1f:e6:c9:75:20:31:a3:5b:0e:aa:dc:20:54:8c:d7:b6:46:
09:14:37:06:c3:d8:6e:37:b5:2c:9e:c3:ec:a0:cf:54:85:6f:
b8:1b:3e:45:81:50:bb:32:a6:cf:3d:4a:7f:23:4e:31:09:c0:
4a:80:66:df:08:77:b9:c2:c9:c2:64:5c:db:0d:6b:75:55:1f:
32:d4:d0:4d:68:b8:f5:32:ee:80:69:7e:79:3d:10:dd:62:02:
72:35:ee:4e:f0:ee:53:9f:9d:62:da:cb:bc:3a:a2:92:84:10:
c6:c1:4b:de:40:50:58:92:53:ce:38:5e:0a:88:4d:00:b2:cd:
6f:04:45:7e:8a:30:28:41:bf:65:9d:2d:9e:0e:4f:06:f8:2b:
b9:a2:fd:e5:54:3e:a1:7c:29:d0:0a:d5:a2:58:0f:a3:b5:35:
5d:20:4e:45:07:76:9b:4f:93:b0:6e:f0:d1:f7:44:9d:a7:b0:
83:ee:30:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:47 2024 by rpki-client on console-ams.rpki-client.org