Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1pbCWnTfgAYfBU0NjgqIb9yWlx0.roa
File: 1pbCWnTfgAYfBU0NjgqIb9yWlx0.roa (raw, json)
Hash identifier: CRNvOleVtBwKbZp4d2es/Fvc1zUOAN35q57YUHAiRSI=
Subject key identifier: D6:96:C2:5A:74:DF:80:06:1F:05:4D:0D:8E:0A:88:6F:DC:96:97:1D
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 018314D2CEA3C426D5024176936A559D494E
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1pbCWnTfgAYfBU0NjgqIb9yWlx0.roa
Signing time: Tue 06 Sep 2022 22:01:43 +0000
ROA not before: Tue 06 Sep 2022 22:01:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42926
IP address blocks: 46.8.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:14:d2:ce:a3:c4:26:d5:02:41:76:93:6a:55:9d:49:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Sep 6 22:01:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d696c25a74df80061f054d0d8e0a886fdc96971d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:91:fc:90:5d:dc:b8:14:f0:67:56:66:95:33:
8d:44:e8:5b:07:c7:f2:3b:2e:01:6b:f1:31:41:28:
cc:a2:0b:90:fd:c8:79:1f:44:ab:bb:af:97:8a:b6:
9a:54:d9:d3:d7:80:bc:90:e6:ec:0f:dd:cb:f9:dd:
07:47:49:c9:ee:2f:05:35:9d:29:8b:92:59:c1:f2:
b7:dd:f7:56:3d:29:d0:7f:7e:2d:62:2a:41:67:3d:
61:ce:de:51:fd:7b:11:61:c9:05:94:cc:bf:b1:11:
74:79:72:c1:53:a2:2d:07:f8:da:8e:f9:ea:31:e3:
ad:7a:75:ee:7d:f1:bf:6b:b1:a5:29:8c:e2:0b:0f:
09:03:e9:ef:2a:60:5a:ff:ee:ba:a9:1d:dd:00:cc:
02:b8:c4:02:c3:02:8e:03:c3:42:8f:49:04:4c:f5:
b0:1d:76:c5:4c:7c:73:84:94:40:a4:07:87:2c:64:
d7:8b:02:8d:53:34:9c:22:f3:db:34:76:f5:df:bc:
9e:80:61:48:64:f6:5c:31:2b:ca:2f:55:ab:cc:9a:
43:09:3a:d7:84:a7:9f:a7:e1:02:ef:e4:66:a3:77:
54:7b:33:8d:b6:b5:8a:ee:6d:f3:2a:81:49:58:5e:
e4:c9:9e:62:5d:44:42:a5:35:e1:f6:7c:eb:15:96:
19:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:96:C2:5A:74:DF:80:06:1F:05:4D:0D:8E:0A:88:6F:DC:96:97:1D
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1pbCWnTfgAYfBU0NjgqIb9yWlx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.194.0/24
Signature Algorithm: sha256WithRSAEncryption
54:88:33:83:3e:5d:5d:20:fb:ee:00:bc:23:45:68:2d:88:59:
7d:e4:27:10:4e:e8:02:38:44:fa:33:73:3d:97:be:d0:03:ae:
0f:67:1b:a0:f1:02:fe:9c:e4:61:b5:ca:9f:85:77:33:4a:2d:
c7:25:2f:71:e4:f5:15:72:53:0e:70:07:57:94:9c:f5:b3:c5:
0c:39:29:5f:6c:63:7b:cf:29:41:79:64:5d:d5:c0:c8:db:73:
2e:78:a7:11:54:d5:f3:e6:e5:8c:8e:f0:10:e8:0f:af:21:b2:
07:0f:89:1f:ea:e9:83:f8:3f:5c:14:7e:e7:f0:94:72:75:52:
34:56:9e:8f:3a:64:0d:c8:43:3e:cb:87:cd:65:96:28:ce:7a:
90:27:5f:c5:72:bd:19:8c:79:d5:6f:a9:e1:db:fc:1f:80:b9:
1d:2b:49:5d:29:64:07:af:4f:22:8d:a3:e3:c5:cc:fe:f0:d8:
58:ef:19:e9:8f:97:83:a2:83:ae:82:04:e9:e4:97:8b:fe:81:
fa:63:5f:01:ee:12:5c:73:b7:2c:ab:2a:c4:74:9b:58:4c:7c:
6a:67:17:c8:d8:16:7b:d8:52:c9:20:c8:c9:d0:89:71:f5:06:
4a:3a:60:3a:30:8b:10:05:d1:c0:93:63:a5:3e:fa:5f:2c:71:
57:80:fa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:24 2023 by rpki-client on console-ams.rpki-client.org