Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/W0O9vxqb4k5habf2VTFN8b_svzM.roa
File: W0O9vxqb4k5habf2VTFN8b_svzM.roa (raw, json)
Hash identifier: WjwszVX6xFpQz6HwVahbtaCwDci0GiBPTIy4F30F0CI=
Subject key identifier: 5B:43:BD:BF:1A:9B:E2:4E:61:69:B7:F6:55:31:4D:F1:BF:EC:BF:33
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01849AEDF2E017145D599B3D3B0A282EB52A
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/W0O9vxqb4k5habf2VTFN8b_svzM.roa
Signing time: Mon 21 Nov 2022 16:03:16 +0000
ROA not before: Mon 21 Nov 2022 16:03:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211399
IP address blocks: 46.8.140.0/24 maxlen: 24
46.8.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:ed:f2:e0:17:14:5d:59:9b:3d:3b:0a:28:2e:b5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Nov 21 16:03:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b43bdbf1a9be24e6169b7f655314df1bfecbf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:8e:98:77:c9:cd:62:a0:81:ce:da:73:99:
22:29:1a:20:fe:13:0e:21:88:5f:5f:02:94:da:bb:
d0:1a:17:f9:77:99:3f:3f:47:16:f0:49:35:a6:bf:
26:ed:25:7d:19:34:e6:66:0c:43:72:8b:de:29:d0:
aa:1e:ff:00:9b:37:c4:31:b1:d2:34:12:c4:b9:34:
81:c7:ff:ec:b5:2d:70:e1:b4:40:82:5d:ec:fb:8d:
42:44:90:c6:99:6e:5c:3d:1e:85:f3:93:8f:e3:96:
80:a3:7c:1d:27:b1:67:51:2d:57:c6:9b:8b:c7:c8:
4f:c3:00:d1:0c:ed:ed:5b:63:10:e1:fe:c9:42:d0:
03:3f:fa:82:56:1a:7b:44:3f:ba:90:b7:b4:67:da:
f6:bb:22:22:3e:a3:7d:af:c4:a4:3d:a1:fe:7d:bd:
dc:b7:a9:20:ce:c0:57:bb:e0:b6:7e:60:07:3a:17:
25:ab:e2:f3:4e:b9:c4:27:71:5f:24:52:67:60:4c:
65:89:af:61:d1:be:2d:ad:b1:36:d3:fa:c1:51:5e:
5d:9e:eb:cb:b3:e3:8c:04:9e:a3:ac:58:43:dd:b0:
15:32:fe:ce:5e:6c:12:49:72:28:07:ec:a5:90:6b:
d8:6d:92:4b:c5:98:d0:d5:b2:42:3a:68:f5:41:72:
59:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:43:BD:BF:1A:9B:E2:4E:61:69:B7:F6:55:31:4D:F1:BF:EC:BF:33
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/W0O9vxqb4k5habf2VTFN8b_svzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.140.0/24
46.8.148.0/24
Signature Algorithm: sha256WithRSAEncryption
04:4c:13:3d:9f:cf:34:b2:e3:43:2a:9b:bd:4b:96:c0:77:7f:
22:bb:28:00:2e:9f:f9:3c:24:c1:7b:06:be:54:5e:c8:f4:83:
ae:56:97:6c:89:da:4a:79:61:30:54:ae:d5:51:3d:60:24:21:
60:3c:bf:51:78:2b:01:31:0b:31:f1:46:f5:64:61:66:21:2b:
92:02:51:ff:79:c6:25:ed:d8:c6:93:90:25:59:c3:71:9f:2b:
8f:2d:be:ba:f7:3c:df:b3:24:7e:db:e1:89:0a:6c:38:2f:15:
74:19:7a:b5:a7:f3:5a:c5:4b:84:c0:44:99:c4:04:91:23:76:
b6:ef:b6:65:e4:42:16:90:9f:83:7c:a2:e2:12:4e:17:b3:e8:
49:e6:48:ec:76:38:93:ca:ca:88:5d:9f:fb:d4:d4:fb:90:d5:
f8:0c:ee:22:72:08:31:41:b6:b1:e5:6b:7d:32:17:31:d3:c2:
24:54:f1:c4:93:62:0d:91:32:0f:94:bb:fe:b1:ce:03:38:4c:
0c:43:6e:d2:e5:e7:9c:75:78:43:30:8d:76:ab:98:a1:a5:ba:
dd:07:83:f3:4f:7a:06:11:9e:04:0d:fd:d7:67:04:64:f9:7f:
61:83:bf:bb:ef:b9:92:a1:9a:ec:bb:e4:ee:55:a0:67:e7:a5:
0a:d5:1f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org