Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/arBrXmDpHr79udPIeFs8y0era5w.roa
File: arBrXmDpHr79udPIeFs8y0era5w.roa (raw, json)
Hash identifier: cd+wEP2WjA2mEAqFiVzzMpf2wS2bty79al1cxW9DkGo=
Subject key identifier: 6A:B0:6B:5E:60:E9:1E:BE:FD:B9:D3:C8:78:5B:3C:CB:47:AB:6B:9C
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 071807A9
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/arBrXmDpHr79udPIeFs8y0era5w.roa
Signing time: Sat 01 Jan 2022 10:59:02 +0000
ROA not before: Sat 01 Jan 2022 10:59:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141167
IP address blocks: 46.8.112.0/23 maxlen: 24
46.8.114.0/23 maxlen: 24
46.8.116.0/23 maxlen: 24
46.8.118.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119015337 (0x71807a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 1 10:59:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ab06b5e60e91ebefdb9d3c8785b3ccb47ab6b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:ce:2e:62:7b:e7:ff:a0:b2:53:40:69:71:
96:3a:bf:91:12:2f:dd:f8:e4:7b:2a:09:85:c2:d5:
33:c5:94:eb:46:1f:91:e8:85:4e:4e:c9:0c:21:91:
d1:6b:c7:4f:85:f6:9d:73:15:96:cf:29:80:3f:ee:
28:3e:96:a7:42:23:d9:84:e9:42:90:cf:00:5f:34:
68:49:a7:ec:0d:3f:9d:48:aa:83:0c:40:ca:45:14:
6a:54:df:23:bc:6e:30:98:20:06:ec:fb:4d:44:a9:
78:ea:12:12:7c:24:e0:33:36:d3:60:68:46:f0:7c:
1e:72:2e:46:80:4d:66:33:0c:63:2d:4f:7b:87:d8:
b1:90:29:76:c0:dc:15:6c:1b:cc:7b:ab:30:b8:41:
0b:cf:be:fd:a7:cd:c5:7e:af:d0:9c:57:96:09:8b:
bf:ec:30:c5:19:42:d3:03:28:9a:29:bd:47:e9:04:
2d:c4:67:3d:29:af:73:87:73:9a:c7:67:fb:97:94:
c7:ac:42:0b:b7:58:1f:74:bb:70:f6:8f:31:71:6e:
a4:2b:18:d4:87:8d:6f:8a:a5:8c:78:9f:7a:cc:dd:
63:90:e6:b8:38:3d:f0:b3:3f:6a:a9:d1:ca:60:23:
eb:93:af:4e:65:39:f6:be:6c:82:4d:38:a6:cc:2e:
df:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B0:6B:5E:60:E9:1E:BE:FD:B9:D3:C8:78:5B:3C:CB:47:AB:6B:9C
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/arBrXmDpHr79udPIeFs8y0era5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.112.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:1e:a4:40:36:ed:f9:9b:ee:79:0e:f2:47:9d:f8:44:4d:b1:
e2:fc:a0:f0:c5:e4:40:97:d8:9a:20:2c:af:42:58:88:2c:cd:
fd:0c:ad:35:bf:9a:20:85:c4:7d:af:29:6a:ea:cf:40:13:d9:
10:a3:55:8b:3e:d5:5e:20:05:ba:84:7a:80:5f:cd:bf:d8:b1:
4d:ac:88:77:0a:3e:e1:17:64:f5:c6:0e:ba:e8:51:e3:6e:52:
57:72:9a:96:9b:e0:c1:98:d9:58:fa:da:17:4a:10:40:37:c1:
3c:74:08:4f:fa:04:90:6a:62:14:41:36:e0:1b:81:d0:cb:53:
f6:55:81:fc:54:3b:1b:33:8d:0a:1b:1d:43:45:62:cc:4e:bb:
b8:07:82:fd:c3:85:85:08:69:ae:9d:14:e7:ce:9a:48:50:00:
1d:a1:0c:1f:f3:b6:85:ba:41:54:2b:c1:89:30:cd:7d:13:1a:
35:7a:71:44:9d:34:1e:61:70:c1:5b:b6:4a:2a:42:f8:cb:2b:
05:2f:9a:a9:9c:1e:b6:a3:17:11:3d:ef:60:12:49:a7:51:bc:
71:06:57:d2:08:b8:d2:cd:e9:96:1f:27:20:6a:28:d6:5b:81:
bc:e0:00:f8:79:3b:21:8d:84:41:91:f7:c1:a9:3b:cc:93:8b:
e3:2b:68:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:38 2023 by rpki-client on console-fra.rpki-client.org