Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/EAlimZ-MqO-632w2tJqgWwZWXDw.roa
File: EAlimZ-MqO-632w2tJqgWwZWXDw.roa (raw, json)
Hash identifier: RSczzgvZPicmNTEq7SY4zT8zNtoozhE12MrhM03SUMs=
Subject key identifier: 10:09:62:99:9F:8C:A8:EF:BA:DF:6C:36:B4:9A:A0:5B:06:56:5C:3C
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 34C4F676
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/EAlimZ-MqO-632w2tJqgWwZWXDw.roa
Signing time: Fri 11 Feb 2022 23:20:33 +0000
ROA not before: Fri 11 Feb 2022 23:20:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 46.32.168.0/24 maxlen: 24
46.32.181.0/24 maxlen: 24
46.32.180.0/24 maxlen: 24
46.32.186.0/24 maxlen: 24
46.32.185.0/24 maxlen: 24
46.32.183.0/24 maxlen: 24
46.32.182.0/24 maxlen: 24
46.32.184.0/24 maxlen: 24
46.32.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 885323382 (0x34c4f676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Feb 11 23:20:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=100962999f8ca8efbadf6c36b49aa05b06565c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:ce:89:f9:92:38:cf:bb:98:95:ef:22:34:
d0:70:b9:a3:ef:25:17:0f:fb:cb:22:8c:04:93:c2:
db:bc:0c:7f:c8:8c:0b:c2:50:ab:ec:40:a2:49:a7:
29:46:ea:6c:4a:13:fc:59:14:60:12:30:06:46:22:
97:fa:2f:07:a1:c9:d1:37:b7:79:7d:00:04:43:cd:
79:b3:fd:a6:05:42:7e:c0:06:7d:a3:da:c8:a4:75:
c9:c8:2a:08:2f:28:a8:c4:97:1d:53:f1:47:dd:c7:
da:e0:05:2b:60:d8:0c:7a:c2:4e:12:82:7f:1e:aa:
85:cb:2a:5b:68:70:fa:5b:66:4f:88:e3:06:d7:a9:
00:3a:a1:1d:70:82:63:ff:48:e2:56:d2:e2:47:55:
4b:9a:37:92:f6:81:27:79:5f:4c:ab:33:93:23:77:
4e:ae:f1:68:5b:6a:d8:f6:54:0d:7d:c2:fb:84:ea:
bb:13:f0:9d:3c:41:5b:6c:1c:cf:04:67:3a:01:de:
62:53:aa:9d:d0:f5:78:81:29:75:64:44:0a:90:89:
d1:ad:8b:89:af:a4:3d:de:08:07:65:5b:9f:96:32:
76:9c:e7:6c:6c:d9:48:f5:aa:f1:ac:2f:23:77:bf:
e2:e9:2c:b0:eb:d6:63:13:87:6d:de:e8:50:4f:96:
b0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:09:62:99:9F:8C:A8:EF:BA:DF:6C:36:B4:9A:A0:5B:06:56:5C:3C
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/EAlimZ-MqO-632w2tJqgWwZWXDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.168.0/24
46.32.180.0-46.32.187.255
Signature Algorithm: sha256WithRSAEncryption
25:b4:ff:9a:4b:e3:34:23:95:e5:f1:52:98:75:4f:65:d2:99:
d6:8a:e5:07:86:26:c1:09:dc:3b:5e:da:e5:fe:97:af:38:e2:
2b:28:e7:65:57:66:0e:26:5c:6e:eb:fa:89:da:18:c0:55:99:
3c:ce:94:01:eb:3f:87:24:69:5b:87:59:7d:c9:c4:27:aa:e2:
5c:64:a1:b8:e9:37:d4:5e:21:50:6b:18:f3:7d:53:04:07:5c:
a5:ec:c8:95:92:b2:69:bb:4d:de:9f:21:e3:f2:49:be:48:53:
1f:3e:ed:0e:aa:d0:3c:cb:b2:12:13:c5:5e:c6:24:4a:e0:19:
ee:c3:dd:0e:55:29:2f:94:3c:58:a7:b0:21:c4:00:b8:82:dd:
c6:e1:02:51:ee:a7:1f:d7:e8:3f:cf:50:05:79:5f:60:fa:d3:
e4:4a:c3:15:49:ee:11:6a:2d:34:2d:4b:64:da:fc:ac:38:50:
df:c5:82:cf:98:ee:c4:8e:de:c4:0b:14:2e:24:a8:d9:3e:7d:
ec:de:99:06:e0:82:88:4a:e1:70:f4:3d:91:58:44:5e:9b:e7:
4b:a6:f4:89:9e:cc:68:1e:91:e4:bf:cd:60:ef:73:fd:d9:60:
2a:3c:5c:e5:fe:87:99:c4:0f:6c:8f:55:bb:64:64:80:74:a5:
c9:75:c4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:45 2023 by rpki-client on console-fra.rpki-client.org