Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/aCMD364zj8O45druKBX6lG2WhA0.roa
File: aCMD364zj8O45druKBX6lG2WhA0.roa (raw, json)
Hash identifier: +KPscymZd0GzT6F99952/SSSDH5BkHgd4VSViNzvOGI=
Subject key identifier: 68:23:03:DF:AE:33:8F:C3:B8:E5:DA:EE:28:15:FA:94:6D:96:84:0D
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 07BBE3B3
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/aCMD364zj8O45druKBX6lG2WhA0.roa
Signing time: Sun 13 Mar 2022 14:17:11 +0000
ROA not before: Sun 13 Mar 2022 14:17:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60558
IP address blocks: 46.8.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129754035 (0x7bbe3b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Mar 13 14:17:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=682303dfae338fc3b8e5daee2815fa946d96840d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:52:7c:f4:d4:00:64:ac:d0:e7:83:b2:57:
70:7f:f7:9d:96:78:f1:4f:0a:d3:d8:6d:ad:cd:0f:
dc:f6:fa:f4:8d:c8:83:34:b6:d3:d0:ff:d1:42:9f:
97:53:44:6e:a4:3a:e8:1f:09:6e:1e:ae:19:4a:8f:
01:4a:30:e2:18:1e:f2:80:1d:96:05:e0:e6:81:c3:
15:43:e0:79:9b:3c:64:e1:b3:ee:aa:e4:75:cb:81:
c5:f3:20:fc:bf:54:0a:d7:27:5c:b2:88:b5:08:3f:
82:3d:71:53:37:b9:14:fe:18:64:4e:38:c3:29:36:
f5:27:e3:37:0b:9c:a3:be:59:97:15:9e:f0:28:98:
10:38:f1:18:94:03:f3:17:e5:7a:94:60:d9:50:ef:
15:c8:b3:ff:03:df:60:0f:d1:2e:75:8c:a8:46:f2:
8e:dd:af:35:08:ab:52:bc:62:42:42:8f:70:4b:ac:
6b:80:7a:49:72:20:c8:0e:18:7d:08:71:60:1c:5f:
36:28:2d:f6:2d:3a:57:76:d0:ee:b9:13:b8:07:87:
5b:2b:e7:57:99:40:6b:d8:a0:23:c1:ee:f0:98:c4:
0b:73:9e:ff:2c:57:e2:66:c0:97:65:45:fe:6d:19:
e1:73:c9:e5:3c:4b:d0:85:c0:5d:e4:8f:df:ce:80:
e3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:23:03:DF:AE:33:8F:C3:B8:E5:DA:EE:28:15:FA:94:6D:96:84:0D
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/aCMD364zj8O45druKBX6lG2WhA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
43:58:04:14:72:1d:23:3b:66:5a:ec:e4:a8:1a:b8:dc:53:f0:
26:d5:21:99:f4:d8:6a:bf:20:5f:c9:69:30:33:5c:ee:b7:d9:
c1:56:35:2f:cf:a2:6b:67:99:76:c7:8e:4e:b3:94:25:3b:46:
ef:1b:0a:24:9b:9d:7a:78:82:70:dd:53:64:86:71:e4:09:54:
7a:ef:eb:66:47:0b:93:4d:06:9f:d4:fc:99:81:54:32:aa:3f:
ac:1a:b3:e2:52:1d:41:20:75:42:27:d7:d2:35:01:c4:35:da:
a4:b1:a9:2a:75:69:cf:df:df:a4:91:c6:f1:2e:b6:0d:e4:3e:
c1:b0:20:e0:76:5d:67:63:4b:42:de:c6:4a:3a:95:cd:c0:8c:
5b:fb:0e:a8:d6:0c:4f:46:03:f8:1e:18:92:df:0f:da:c9:c0:
d9:78:61:59:c0:98:3a:3a:06:e6:b4:b9:48:b2:bd:ec:98:63:
a2:6c:3b:d1:a4:d4:8c:3e:b8:74:95:c1:9a:54:f7:82:b2:7a:
68:bf:af:5a:e2:46:1c:fb:6b:25:b1:e4:2c:a9:60:6e:aa:5a:
48:e0:c2:16:9e:d2:d1:79:c9:fc:5a:ac:4e:53:25:d5:bc:da:
ec:d9:50:22:99:01:0d:87:bb:2b:b3:ec:1b:0d:03:eb:1f:73:
fe:12:e7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:24 2023 by rpki-client on console-ams.rpki-client.org