Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/f1OLUmkCev_fsKhqXqrnNYAeGrc.roa
File: f1OLUmkCev_fsKhqXqrnNYAeGrc.roa (raw, json)
Hash identifier: sJPXd+HuqkfoJ9Widigfk6iyCSAwFyrgsOYmAZUJupY=
Subject key identifier: 7F:53:8B:52:69:02:7A:FF:DF:B0:A8:6A:5E:AA:E7:35:80:1E:1A:B7
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 35AEFA0B
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/f1OLUmkCev_fsKhqXqrnNYAeGrc.roa
Signing time: Wed 11 May 2022 21:52:04 +0000
ROA not before: Wed 11 May 2022 21:52:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205547
IP address blocks: 46.32.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900659723 (0x35aefa0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: May 11 21:52:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f538b5269027affdfb0a86a5eaae735801e1ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:c9:34:65:44:e6:f5:34:2b:8e:50:77:6e:
b7:f6:cb:38:a3:46:e6:b4:96:1a:6f:b4:72:c1:96:
dc:8c:3f:77:c7:d2:ea:bc:fc:2a:8a:ac:76:a5:c5:
e2:d8:e3:f6:42:9e:61:40:bf:f3:a4:56:c5:1e:ae:
27:e4:bd:c0:3c:10:c0:dc:3b:f6:31:49:2e:33:3c:
5f:15:92:c3:b6:72:04:db:6a:2e:0c:f0:e0:29:7d:
9d:3b:9d:5f:57:2a:1d:33:a3:a1:e5:62:02:37:ae:
7f:74:33:99:c6:32:24:4e:02:32:3a:02:c5:03:d4:
05:66:f1:f3:17:9b:54:b1:ee:b6:46:7a:cb:ee:bc:
76:68:3b:e4:33:a2:2e:a0:a6:fa:0c:ee:a3:cb:57:
cb:c6:b2:e8:50:97:8a:62:45:a9:94:81:54:aa:1c:
03:58:f3:02:17:58:d2:95:e7:7c:37:ae:4e:17:7e:
c9:66:d4:2d:f6:98:b5:32:e1:93:76:54:32:3a:e1:
48:b6:78:6d:f8:83:03:84:db:8c:99:65:2e:bb:3b:
56:bd:b4:ed:7b:7c:5f:3f:5a:4b:27:63:b2:d6:ae:
31:78:26:16:76:80:bf:63:b9:c4:eb:62:d5:38:f1:
61:8e:04:dc:6e:5f:f9:be:52:7e:c6:53:77:8c:b5:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:53:8B:52:69:02:7A:FF:DF:B0:A8:6A:5E:AA:E7:35:80:1E:1A:B7
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/f1OLUmkCev_fsKhqXqrnNYAeGrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.174.0/24
Signature Algorithm: sha256WithRSAEncryption
09:14:1c:72:6b:b4:cf:dd:2a:ac:21:94:91:25:cc:57:45:c4:
67:3a:40:f0:82:1e:37:bd:36:27:39:96:35:70:36:03:1f:34:
b6:fc:96:28:0d:ee:b1:ab:b6:22:e8:49:d7:21:35:96:0a:d5:
39:df:85:d4:ef:93:4a:53:ff:c2:e6:d6:af:39:11:4d:82:06:
6c:9f:de:04:96:4c:8a:25:3e:9f:81:6f:35:31:83:87:db:17:
2b:1d:f1:76:d4:f6:49:dc:a6:d2:fa:f0:49:6d:c4:7a:2e:38:
45:ea:1b:ab:f2:dd:ea:aa:0f:51:cb:7a:93:10:2d:8f:46:80:
2e:11:4f:ad:42:03:e4:95:49:e5:e3:ee:35:b1:88:2c:c5:c5:
d3:54:7b:3b:30:15:60:e3:21:80:3e:16:bc:ea:52:3d:9a:5b:
9f:01:2c:e9:de:44:02:e5:76:4f:d1:54:af:5a:71:93:b8:c0:
3b:64:0b:56:ba:88:10:9d:fa:86:72:60:0f:73:79:01:03:0f:
5c:71:b8:6b:17:0a:36:ce:60:0c:dc:9e:4d:01:89:df:8b:b3:
95:54:73:ba:08:b0:3a:e0:cb:50:a0:3e:c4:02:1a:37:6b:d1:
8a:28:34:72:28:ba:d5:e4:25:b8:17:e7:41:0b:e4:a4:25:6f:
a6:ed:c5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:45 2023 by rpki-client on console-fra.rpki-client.org