Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/aGMdLv7bJqOffM-dC7KRurqfr4c.roa
File: aGMdLv7bJqOffM-dC7KRurqfr4c.roa (raw, json)
Hash identifier: pBWV888xnrjtS9/yuGD1tLCw089uTNdJHmO1LCNeVog=
Subject key identifier: 68:63:1D:2E:FE:DB:26:A3:9F:7C:CF:9D:0B:B2:91:BA:BA:9F:AF:87
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 01835A29297833C815EA2F48F482DBB2F38A
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/aGMdLv7bJqOffM-dC7KRurqfr4c.roa
Signing time: Tue 20 Sep 2022 09:09:50 +0000
ROA not before: Tue 20 Sep 2022 09:09:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41911
IP address blocks: 176.110.32.0/19 maxlen: 19
46.250.96.0/19 maxlen: 19
176.110.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5a:29:29:78:33:c8:15:ea:2f:48:f4:82:db:b2:f3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Sep 20 09:09:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68631d2efedb26a39f7ccf9d0bb291baba9faf87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:08:17:a6:1a:29:ef:1f:25:fc:61:7d:d3:
59:88:b8:ae:de:32:77:c5:32:95:c9:c2:e1:37:1b:
40:ba:cd:f4:74:45:b7:07:6c:5f:f3:dc:3c:04:2e:
df:49:d8:dc:d1:d6:e4:e8:b9:5e:ce:fd:b0:d3:af:
d3:2d:b5:9c:4a:b3:ac:77:3d:cc:d1:ce:88:4e:77:
f0:d0:6f:c0:84:7b:a3:d8:a7:08:99:5f:29:dc:54:
d6:be:aa:ec:11:84:a3:e1:26:d3:96:c5:dc:3a:b8:
83:b8:0c:91:e3:cf:f2:fa:2d:52:53:17:2c:c9:74:
84:41:28:05:86:1b:d3:55:62:f3:dd:bf:cb:eb:01:
87:19:30:f6:53:03:50:c8:9d:43:ed:91:7b:34:e6:
76:25:5b:09:c4:3a:22:77:55:89:2a:55:bc:e9:ac:
c9:a8:ef:95:39:fb:d3:e9:e4:79:ea:56:c1:7e:8d:
0f:6a:ca:92:bb:17:39:07:65:6d:1c:65:22:f8:dd:
17:9f:51:cf:39:b3:7d:31:97:73:bc:85:e3:62:9d:
72:6a:19:cf:e1:3b:70:79:24:43:6e:cc:58:7f:c8:
d3:2e:e7:1d:7c:37:ca:bb:f2:48:ce:5a:87:f8:63:
55:23:e5:e5:83:a8:a9:db:8d:49:2b:7b:06:a9:dc:
b6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:63:1D:2E:FE:DB:26:A3:9F:7C:CF:9D:0B:B2:91:BA:BA:9F:AF:87
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/aGMdLv7bJqOffM-dC7KRurqfr4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.250.96.0/19
176.110.0.0/18
Signature Algorithm: sha256WithRSAEncryption
a9:d2:61:73:d0:0d:1d:60:ba:85:3c:7a:e9:b6:9b:d6:2e:1c:
6a:e4:65:17:2d:62:60:61:02:97:58:ab:45:24:e5:14:f9:2d:
b7:83:b2:56:69:f3:14:eb:c8:b3:2c:e9:dd:72:44:b8:11:d6:
c4:97:64:b7:40:b1:59:96:d7:82:c8:50:81:38:9f:b3:cf:1c:
ac:d7:9f:36:9c:d7:70:d4:ac:27:63:a2:48:09:3a:fd:22:8f:
c1:0b:7c:d1:ea:c7:a0:06:22:3d:f0:0a:09:7f:5d:51:5c:32:
e5:29:5c:6e:9e:ec:ae:32:6b:57:02:9d:90:c9:18:37:dd:7d:
36:92:f3:11:f2:c5:aa:4a:80:df:bf:21:8d:7e:fa:b2:6e:de:
7d:96:2d:50:ea:e9:94:11:e9:73:be:09:4a:e3:1e:45:8d:3b:
c4:10:0b:3e:8f:72:b9:5c:3d:78:59:d8:39:e2:a8:e2:57:8f:
be:58:0e:1f:78:73:07:35:c2:7d:2b:4f:22:c0:1f:d7:97:5a:
08:75:7a:ac:50:62:90:cd:0d:62:cc:e8:48:e3:91:89:63:a5:
cc:ab:4b:6f:02:57:70:b9:09:7e:1f:90:bc:9b:7a:1b:0a:9a:
5b:93:37:f4:47:a2:ab:2e:cf:99:15:5c:da:95:f3:57:15:3d:
42:0a:21:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:44 2023 by rpki-client on console-ams.rpki-client.org