Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/pB7C_Ky1IkWFJHdaJc-NOq1LZD0.roa
File: pB7C_Ky1IkWFJHdaJc-NOq1LZD0.roa (raw, json)
Hash identifier: 1HQvcPczt0wUy1BbCdixPIvjbAY1UGNl3YEFQvTVPL8=
Subject key identifier: A4:1E:C2:FC:AC:B5:22:45:85:24:77:5A:25:CF:8D:3A:AD:4B:64:3D
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 358A28AA
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/pB7C_Ky1IkWFJHdaJc-NOq1LZD0.roa
Signing time: Wed 27 Apr 2022 09:31:58 +0000
ROA not before: Wed 27 Apr 2022 09:31:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210654
IP address blocks: 46.32.183.0/24 maxlen: 24
46.32.182.0/24 maxlen: 24
46.32.181.0/24 maxlen: 24
46.32.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898246826 (0x358a28aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Apr 27 09:31:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a41ec2fcacb522458524775a25cf8d3aad4b643d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:42:5f:5e:d5:95:b8:d1:79:f0:a4:2a:7b:54:
29:f6:c6:95:7e:53:ba:be:54:00:bf:9c:c8:a8:d6:
36:60:4b:1a:3c:c8:b7:34:32:f7:ea:47:f7:5a:7c:
05:81:02:2f:36:e6:e6:37:94:5f:3c:5a:9a:55:a6:
d6:37:66:2f:68:20:79:d1:65:64:50:b3:39:e5:16:
e3:ad:4e:18:cd:63:7d:c8:3a:68:5c:63:3b:07:3e:
dd:88:5f:34:05:5d:58:2b:66:06:2b:03:2a:de:65:
5f:ca:c5:a6:3d:51:23:63:ba:f7:bc:1e:34:0d:cd:
8e:4e:ad:50:ac:f4:b0:c5:a9:d5:d5:61:e1:e3:ad:
1d:7d:78:e5:34:17:be:b5:16:0b:0b:7d:e7:b2:94:
c8:27:fb:76:fc:eb:75:29:08:1a:af:9d:54:92:76:
e7:fa:de:f9:c0:03:02:ce:58:da:a6:3a:02:59:d3:
1d:ab:94:fb:a3:97:ec:ef:af:0c:60:80:4b:64:7e:
b3:78:43:2e:bc:37:cc:31:b2:c2:1f:04:dd:53:65:
dd:b5:8a:99:34:2b:f1:06:ed:de:db:09:4d:9b:d9:
a3:7b:49:b7:e2:e1:00:ed:c0:53:c8:5d:cf:bb:14:
d4:8d:5d:cc:bf:8c:df:dd:eb:85:5f:b3:19:95:a7:
cc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1E:C2:FC:AC:B5:22:45:85:24:77:5A:25:CF:8D:3A:AD:4B:64:3D
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/pB7C_Ky1IkWFJHdaJc-NOq1LZD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.180.0/22
Signature Algorithm: sha256WithRSAEncryption
74:be:3f:5f:39:56:e6:72:14:3d:29:72:65:a3:78:a4:6a:09:
82:c6:a3:01:09:dc:93:f3:2f:cc:6f:40:68:f4:15:43:26:5b:
fa:ff:2b:b2:85:03:17:aa:57:83:89:b0:cb:62:d9:96:f8:f1:
b3:5e:5e:08:f8:5a:10:2b:30:d8:cd:a5:1c:06:93:e8:30:ba:
3d:a8:e1:ab:09:cf:c5:41:47:63:65:d7:ef:49:2a:ff:56:c4:
a2:95:32:87:91:c2:b2:36:8c:d3:6f:58:d7:82:02:63:35:33:
7c:4e:c9:5d:45:fe:31:7e:96:da:58:b8:08:bd:ba:2c:5c:3c:
80:8c:7b:4f:ce:8a:ec:e8:a1:9b:09:0b:9a:d2:b3:24:52:0a:
94:08:9d:5c:87:55:7a:5b:88:1f:b8:56:f5:f3:9f:45:a9:00:
4d:6e:ab:ec:39:cc:ad:d8:85:73:3d:0a:59:ec:60:c6:5b:0d:
82:ab:7d:8f:dc:ec:e1:5d:81:84:dd:3b:26:49:4f:11:22:c8:
a4:c6:1d:ba:5a:ae:b5:ce:05:43:ec:01:53:96:52:16:3a:a3:
7d:26:94:b8:dc:7e:f0:03:0d:26:53:a8:bc:95:52:4e:b1:36:
d1:e0:f2:d3:7f:f7:58:81:1b:87:ae:17:3b:78:ed:11:ba:ad:
58:25:0c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:22 2024 by rpki-client on console-ams.rpki-client.org