Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/N6AIxK9Nv6THfGnSB4AZ0cuC4UQ.roa
File: N6AIxK9Nv6THfGnSB4AZ0cuC4UQ.roa (raw, json)
Hash identifier: rLF/0jyIx8tqVsQD7U8TLXzY3Ug0KMReZ+ZL4U7CrEU=
Subject key identifier: 37:A0:08:C4:AF:4D:BF:A4:C7:7C:69:D2:07:80:19:D1:CB:82:E1:44
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0184498AE5993F8FAE913BB3DE0179BF269A
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/N6AIxK9Nv6THfGnSB4AZ0cuC4UQ.roa
Signing time: Sat 05 Nov 2022 20:45:50 +0000
ROA not before: Sat 05 Nov 2022 20:45:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16262
IP address blocks: 46.8.52.0/23 maxlen: 32
109.248.169.0/24 maxlen: 24
46.8.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:49:8a:e5:99:3f:8f:ae:91:3b:b3:de:01:79:bf:26:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Nov 5 20:45:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37a008c4af4dbfa4c77c69d2078019d1cb82e144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:76:67:1c:5a:d9:b9:0d:e8:fc:1f:71:cf:94:
97:b9:cd:ee:5e:d7:d8:1e:d0:ce:9a:34:97:ca:9a:
94:dd:1e:2f:c3:fc:72:65:f1:e6:18:73:62:70:ea:
fe:63:03:f2:df:e7:55:bd:92:54:18:fa:81:7f:f7:
18:33:a3:94:da:98:67:e1:4a:66:ab:ac:18:bb:b3:
a7:2f:20:d1:e2:d2:b2:0c:97:d7:06:53:de:2f:73:
ff:6e:a4:8b:cb:0c:6b:d8:70:31:6c:2a:77:a2:57:
dd:79:f1:f5:f5:6a:79:28:a8:5c:ac:1c:99:6b:7d:
48:04:50:8f:d1:5d:57:1a:0e:1e:cc:1b:fb:c9:58:
58:9f:86:5d:21:9f:93:05:5c:aa:7e:ae:42:52:8a:
8d:df:7f:c4:d8:7f:55:35:1a:c6:4a:bd:65:d5:2c:
a9:2e:f6:8b:7b:46:09:b2:2c:63:a2:4e:97:e5:d8:
e6:5f:3e:19:da:e5:6d:05:c7:3f:ef:3b:25:d3:4c:
a1:3b:2a:cd:e9:bb:13:b0:5c:b7:6c:c1:40:a1:5c:
69:d5:cc:cb:3e:29:f8:19:c3:e1:6c:73:e6:bc:4a:
80:6a:a5:ec:a3:46:69:75:0d:bf:a2:b7:f1:2a:55:
30:1a:62:06:f8:57:b8:d6:6f:b6:a6:d9:70:6a:6f:
bf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A0:08:C4:AF:4D:BF:A4:C7:7C:69:D2:07:80:19:D1:CB:82:E1:44
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/N6AIxK9Nv6THfGnSB4AZ0cuC4UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.52.0/23
46.8.153.0/24
109.248.169.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:17:bc:f1:57:7a:05:89:50:ea:6d:10:4e:29:31:aa:3e:e5:
06:2a:a7:bd:ee:62:2d:85:17:8b:32:67:1b:79:03:f2:27:a3:
11:c7:cf:0a:4b:b6:a0:50:e8:cf:d8:ae:9e:eb:6e:d9:f8:a7:
0b:11:ca:78:27:4f:0f:db:25:5b:9e:e6:31:f3:6e:a4:50:4e:
48:43:51:32:be:44:ae:45:d1:bc:92:04:4a:0e:d8:07:ce:9f:
70:d7:3a:14:8d:2c:03:36:df:17:c3:dd:37:31:19:ed:95:a1:
53:34:4e:42:66:7e:f4:8e:50:0d:92:8b:52:dd:ae:04:aa:71:
41:5c:4a:57:49:09:84:93:02:a2:33:74:98:37:56:88:5e:88:
78:cc:e9:aa:e7:dd:3f:c6:54:bc:e6:c9:f7:4b:96:9b:81:07:
08:7f:d1:76:e3:5d:87:7e:b9:a4:64:36:b9:a3:61:cf:d5:09:
27:12:72:c4:3b:2b:bd:fa:71:6d:2a:18:a6:4b:05:7e:d5:79:
b0:45:0f:a5:2b:68:3f:f8:33:ea:c2:a9:98:f6:0d:c7:37:92:
09:54:e9:85:7b:bc:6e:78:b3:8d:a9:c3:46:7e:f5:d1:61:6c:
57:f6:21:42:63:55:cb:6e:0a:af:91:05:3b:22:c3:48:81:f4:
a7:63:d9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org