Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/scfte6EOfOBCHzagFytp9iFsukc.roa
File: scfte6EOfOBCHzagFytp9iFsukc.roa (raw, json)
Hash identifier: ALDc0vrwRauT7Sj9EAc9+FhPJWNN7O1DVLeSPe4aBOE=
Subject key identifier: B1:C7:ED:7B:A1:0E:7C:E0:42:1F:36:A0:17:2B:69:F6:21:6C:BA:47
Certificate issuer: /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Certificate serial: 018465EE8E87644CFA3B219C16B7294A6E7B
Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/scfte6EOfOBCHzagFytp9iFsukc.roa
Signing time: Fri 11 Nov 2022 09:04:03 +0000
ROA not before: Fri 11 Nov 2022 09:04:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 185.46.183.0/24 maxlen: 24
185.46.182.0/23 maxlen: 23
185.46.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:65:ee:8e:87:64:4c:fa:3b:21:9c:16:b7:29:4a:6e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Validity
Not Before: Nov 11 09:04:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1c7ed7ba10e7ce0421f36a0172b69f6216cba47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:ca:61:1e:ae:c2:e7:d4:4c:f2:33:19:96:
26:ad:fd:90:57:04:fd:b1:27:45:2f:3c:f2:78:8d:
17:c2:88:3f:a6:c3:56:1b:9c:db:32:37:00:d3:c6:
12:b7:db:91:06:ed:e5:65:67:16:94:5f:b1:05:94:
76:23:0f:8d:37:53:07:ab:15:50:45:c5:19:29:a0:
ce:20:41:13:9b:d6:00:33:d1:30:c7:bb:f7:59:04:
61:8a:c5:f7:23:23:ae:2c:85:e4:2d:0d:c0:35:c5:
69:0c:17:2b:0e:3e:3a:06:4e:6d:c8:e2:1c:6c:80:
c4:57:00:16:3f:74:8c:67:b3:d8:a9:18:b7:b6:72:
af:1c:de:85:df:12:c8:38:00:55:c4:77:58:3e:4c:
d7:f9:24:92:fb:2f:05:1c:f7:0b:af:8b:f8:13:29:
f4:6d:1e:b8:42:12:32:04:00:9a:c6:a5:29:04:2b:
8f:81:6e:70:17:75:0a:d4:b0:6c:c3:77:34:f8:83:
51:da:ce:fe:16:61:aa:28:2c:23:8b:c6:46:2a:17:
25:c3:63:14:55:8f:af:09:c6:23:0a:10:bb:03:82:
e9:29:5f:8f:ba:56:3e:f9:c6:14:f8:2d:e0:41:88:
92:a6:2e:80:a5:ee:a5:46:2a:ef:41:8d:2a:fa:75:
2b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C7:ED:7B:A1:0E:7C:E0:42:1F:36:A0:17:2B:69:F6:21:6C:BA:47
X509v3 Authority Key Identifier:
keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/scfte6EOfOBCHzagFytp9iFsukc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.182.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:45:f8:4b:fb:4f:a1:31:1e:dd:1e:e0:7a:34:76:53:44:97:
c1:7a:a1:5d:d9:bb:2c:08:e3:7a:a4:1a:65:ba:dc:6d:96:6f:
5b:bc:d5:e5:bc:48:33:94:6e:47:f4:59:34:a9:77:df:60:ba:
21:ff:a5:5c:84:16:4f:73:bd:12:bc:d4:3f:d1:90:18:20:02:
77:b7:9f:5a:12:ad:7b:d5:24:85:4f:34:41:59:6d:db:aa:52:
3e:de:7e:f3:ad:0d:25:59:df:ad:09:be:08:85:8c:f6:a5:ec:
91:d4:d3:b9:19:db:0e:42:ce:0a:66:df:e8:1d:16:2b:cf:eb:
98:23:90:03:68:02:2d:ac:6a:f2:01:ae:01:26:dc:5f:4e:d2:
2b:73:78:a0:67:e5:c0:a4:7d:9d:df:85:4e:4c:57:cb:4e:1c:
84:c8:87:0b:9b:f0:b6:ec:bb:22:9e:c8:2a:b5:f3:c6:ac:71:
06:ae:d8:77:45:ec:b8:ec:d1:f0:70:b2:a2:22:8a:40:df:b9:
7a:ae:c5:e7:13:42:25:ab:1e:ee:e0:98:2b:8f:59:94:41:43:
d9:4d:25:30:31:8e:b5:c0:8a:aa:1d:53:98:b6:4d:ee:8f:00:
5d:15:cb:30:03:8c:15:41:66:83:ca:9e:2c:f6:9d:72:d4:83:
de:ce:4f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:10 2024 by rpki-client on console-ams.rpki-client.org