Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/fhniJ7c1vRTJRj_Xumkj6eWmsxE.roa
File: fhniJ7c1vRTJRj_Xumkj6eWmsxE.roa (raw, json)
Hash identifier: lnv74JhMBjBXHXFlRE5tpDjJr3zluRA67TRrm9opYPo=
Subject key identifier: 7E:19:E2:27:B7:35:BD:14:C9:46:3F:D7:BA:69:23:E9:E5:A6:B3:11
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 01856F94BB4F65EA642B009DE8EA41E561A5
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/fhniJ7c1vRTJRj_Xumkj6eWmsxE.roa
Signing time: Sun 01 Jan 2023 23:04:56 +0000
ROA not before: Sun 01 Jan 2023 23:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213402
IP address blocks: 46.32.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:bb:4f:65:ea:64:2b:00:9d:e8:ea:41:e5:61:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 1 23:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e19e227b735bd14c9463fd7ba6923e9e5a6b311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9a:da:18:96:ed:30:7a:f8:e8:08:13:c2:25:
bf:1e:b7:07:bd:df:ef:4b:86:ab:33:25:e0:bb:5b:
ff:c1:00:40:70:76:9d:54:b6:89:3a:37:9a:f2:4b:
0e:86:b2:b6:34:4f:21:48:31:8c:0c:48:82:1d:17:
65:ce:59:65:3c:08:c8:31:e0:d6:d6:2d:48:85:87:
5b:55:27:17:51:cb:aa:56:1d:2b:cc:14:a5:e6:75:
9e:83:8d:9e:ec:3a:62:ee:52:75:dd:b4:8e:fd:ea:
db:1f:5c:98:41:c0:6a:67:cc:08:13:0d:08:28:ae:
0c:ff:70:58:a2:15:0d:cc:10:86:d1:8a:a5:d8:f7:
9b:fa:49:8b:73:40:06:55:92:22:b8:0d:6c:93:f9:
0a:50:52:e7:e7:02:bc:35:d0:37:b0:a0:02:69:e1:
5b:5c:ac:80:28:c2:30:b9:24:7e:b3:b0:72:63:a3:
06:2b:34:c3:10:35:42:18:e6:4d:dd:50:c1:e9:16:
bf:f1:54:dc:e5:73:29:f2:27:05:a7:ed:77:30:e6:
cd:0b:8e:02:66:6e:e1:0d:11:07:01:9f:fe:26:83:
3f:0e:e2:94:62:1a:55:63:ef:53:1a:99:4d:6a:a1:
a6:9a:8d:ae:cf:08:33:0b:18:6f:bf:09:4f:b4:77:
df:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:19:E2:27:B7:35:BD:14:C9:46:3F:D7:BA:69:23:E9:E5:A6:B3:11
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/fhniJ7c1vRTJRj_Xumkj6eWmsxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.172.0/24
Signature Algorithm: sha256WithRSAEncryption
93:b2:4d:6e:d3:e1:fb:15:42:b5:1d:28:50:55:bc:8b:98:f2:
9b:9a:c8:87:44:4a:79:49:54:2c:ad:e1:32:8f:54:3e:60:18:
a9:aa:3f:11:6a:60:7a:04:68:ef:6d:3c:7d:76:35:1c:85:13:
50:a0:35:5d:01:89:f7:7e:05:de:18:e9:94:08:5f:6d:96:39:
c8:5a:c6:94:45:fa:29:f4:ad:60:a8:cf:58:56:08:c4:0e:19:
01:05:00:52:b0:77:df:79:08:a5:3a:b1:b0:e9:0b:c4:b0:8b:
4c:90:90:bf:97:d5:57:7b:72:58:7f:f8:16:e1:dc:da:13:0c:
49:6d:40:bd:af:c4:1f:a9:fb:cb:1c:2e:1d:35:e3:23:ad:80:
0b:c2:c3:33:88:53:e2:c8:65:1d:6c:90:38:30:dd:5d:ba:4d:
10:f9:2a:8b:63:be:69:7c:29:51:74:c7:fa:e7:52:f7:91:26:
11:c9:c8:a4:4d:fa:37:98:1e:5e:24:1e:6c:70:e4:15:0d:a1:
21:67:d5:aa:9f:23:6f:3e:3a:e5:0b:63:20:07:98:b6:13:60:
2a:8c:45:1b:04:1c:d4:34:1d:c6:ef:1d:ed:71:50:86:5c:dd:
a3:a6:7a:12:c8:65:50:07:3d:cb:d8:ae:03:88:c8:4c:3d:70:
71:96:41:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:16 2025 by rpki-client