Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/eKx0_1oryukUsghGY6puHIvLNTU.roa
File: eKx0_1oryukUsghGY6puHIvLNTU.roa (raw, json)
Hash identifier: K8w1IruATlDLjURH2+2rWg5lM8zSF5B0cY3tc4/y4NQ=
Subject key identifier: 78:AC:74:FF:5A:2B:CA:E9:14:B2:08:46:63:AA:6E:1C:8B:CB:35:35
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 34C9E4FB
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/eKx0_1oryukUsghGY6puHIvLNTU.roa
Signing time: Sun 13 Feb 2022 15:43:03 +0000
ROA not before: Sun 13 Feb 2022 15:43:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 46.32.181.0/24 maxlen: 24
46.32.180.0/24 maxlen: 24
46.32.186.0/24 maxlen: 24
46.32.185.0/24 maxlen: 24
46.32.183.0/24 maxlen: 24
46.32.182.0/24 maxlen: 24
46.32.184.0/24 maxlen: 24
46.32.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 885646587 (0x34c9e4fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Feb 13 15:43:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78ac74ff5a2bcae914b2084663aa6e1c8bcb3535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:c5:a2:b0:06:f1:b2:4b:cf:79:1f:cc:80:
fe:e6:92:f2:60:b9:e6:c6:ea:9a:a4:33:34:40:84:
0c:6c:b5:f4:b9:bb:e6:45:89:a2:9c:f6:a1:f2:c2:
88:53:53:62:bf:b1:98:a7:90:bc:a2:3e:45:56:c6:
d5:f3:94:c0:2e:a0:17:78:cc:33:fe:21:eb:69:99:
0b:7e:9c:1f:b8:ef:c2:35:df:bc:7b:1c:cf:e3:cf:
00:df:41:df:e1:ae:3f:1d:0e:a4:04:ed:b0:bf:7b:
d8:ff:64:bc:cd:85:98:2c:5f:2b:30:bb:e7:9b:8f:
c4:06:9e:2a:31:24:59:0f:fd:69:85:9f:d5:c6:c5:
38:e1:19:28:77:ff:d5:80:25:63:60:00:ae:55:b6:
c8:d7:61:21:bb:6e:74:55:db:71:cf:19:df:5d:47:
7a:62:54:d5:6b:2c:c9:00:62:82:8f:78:fd:71:11:
c8:a3:8c:2a:c3:a7:a5:6f:18:a0:80:1a:55:32:65:
dc:a4:dd:9a:89:68:32:e0:28:b0:c3:ef:f1:d0:4a:
ae:c2:fe:8e:ed:32:44:9f:4f:38:23:fb:57:11:03:
cb:d7:5b:9e:55:87:97:d5:bf:e3:4f:e0:66:86:67:
55:ca:5c:6a:91:db:17:32:8f:bd:4a:8e:33:a8:78:
36:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AC:74:FF:5A:2B:CA:E9:14:B2:08:46:63:AA:6E:1C:8B:CB:35:35
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/eKx0_1oryukUsghGY6puHIvLNTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.180.0-46.32.187.255
Signature Algorithm: sha256WithRSAEncryption
3b:2e:5f:32:f3:68:81:16:21:91:25:25:31:22:e6:43:47:06:
b2:fa:12:83:cf:1d:99:b8:aa:b3:0a:e4:61:00:c1:f7:31:2e:
1f:a6:43:8d:d9:e0:6d:67:37:7e:ef:33:9b:e9:67:bd:b2:c7:
ac:0a:f6:a7:13:d0:31:f6:32:da:0f:44:50:01:78:4b:0b:6c:
a2:42:8d:c4:b6:90:d3:44:f8:28:03:bf:52:25:8a:08:24:34:
8d:ec:28:a0:0f:79:c4:a0:18:a7:61:d1:40:eb:38:6e:d8:56:
b6:bd:7a:b1:2f:de:47:68:86:14:8e:73:06:54:99:39:6e:b8:
a2:ff:b5:ca:bb:1c:76:3c:25:97:7c:31:6c:5a:40:39:e9:15:
0a:3b:2a:d5:2e:bd:db:81:cb:35:96:be:f8:84:cb:80:4a:8c:
a2:b9:8b:d9:61:f6:0c:8a:32:22:03:ae:da:14:ac:89:29:56:
06:98:92:df:f1:d3:04:49:33:b4:22:38:9c:74:9d:28:15:86:
3b:bf:0f:d3:f2:6f:db:75:0c:14:31:dd:48:32:9c:c0:13:0d:
5a:4a:dc:b9:97:92:04:d5:7a:60:52:51:d3:33:f5:cf:fb:df:
57:b0:d9:c3:96:26:8a:40:8d:a6:3e:43:85:1e:93:ad:76:78:
24:9c:74:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:45 2023 by rpki-client on console-fra.rpki-client.org