Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/noQe2bokBi6isr5FtBvnDAepwe4.roa
File: noQe2bokBi6isr5FtBvnDAepwe4.roa (raw, json)
Hash identifier: 9W6bPSZYc9s2afg5FXJfpw2CWbUMy0K+y5qZmLe681g=
Subject key identifier: 9E:84:1E:D9:BA:24:06:2E:A2:B2:BE:45:B4:1B:E7:0C:07:A9:C1:EE
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 0A346D48
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/noQe2bokBi6isr5FtBvnDAepwe4.roa
Signing time: Sat 01 Jan 2022 06:58:23 +0000
ROA not before: Sat 01 Jan 2022 06:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58053
IP address blocks: 46.28.78.0/24 maxlen: 24
46.28.78.0/23 maxlen: 23
46.28.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171208008 (0xa346d48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 1 06:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e841ed9ba24062ea2b2be45b41be70c07a9c1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:fc:b8:ba:bb:b8:41:22:35:9f:35:1d:6c:
66:23:2d:68:57:83:a2:d8:b3:51:26:14:9c:c7:39:
54:68:79:7e:e7:40:4a:0a:24:cb:a3:b2:63:3c:90:
20:24:1b:19:11:a1:c3:e0:af:70:9d:f5:02:19:71:
ea:7f:3e:79:3d:7a:b7:50:07:86:5d:31:c2:7d:22:
8c:1d:17:27:47:8f:2a:80:bd:8c:96:06:c2:19:f4:
25:fb:b4:c4:1d:49:d4:8b:2a:ae:6f:a5:95:e7:94:
f4:10:9b:df:4c:e5:f2:d3:bf:68:27:c0:5f:cc:9c:
df:3b:c1:cf:bc:56:7a:89:df:95:da:51:e7:76:7a:
99:7c:52:05:9b:39:08:9e:36:e8:96:d1:a1:e2:c8:
be:fa:4a:59:44:3e:8a:25:90:e8:8d:a1:4e:6c:f8:
ca:40:eb:15:04:38:5b:e1:c1:9a:21:d6:d6:51:08:
e1:6b:3b:ff:df:b5:80:e8:e7:73:1e:f1:32:5f:4a:
03:8c:3d:f7:e7:e5:68:ab:2d:5e:02:35:25:3f:f3:
f1:77:ac:7b:05:dd:15:33:e6:f7:a6:5b:e2:f2:ef:
3b:e2:1e:a7:35:1b:07:b9:82:4c:ca:89:20:37:1d:
d7:4e:80:0e:e5:f7:72:4a:49:a4:9a:a3:4d:b2:8f:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:84:1E:D9:BA:24:06:2E:A2:B2:BE:45:B4:1B:E7:0C:07:A9:C1:EE
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/noQe2bokBi6isr5FtBvnDAepwe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.78.0/23
Signature Algorithm: sha256WithRSAEncryption
78:2c:91:0d:ca:8a:68:f4:bd:da:67:70:73:30:68:52:91:8e:
23:f6:55:14:42:1b:ff:33:f3:1e:72:7c:4a:f3:35:f0:a4:38:
4d:85:5a:d0:64:89:35:d1:b4:c9:db:49:52:7a:af:87:07:cc:
db:ff:bb:2a:dd:3d:f5:64:0b:e5:9c:d3:37:bf:ac:f0:6e:40:
28:e7:81:7a:ff:68:72:e7:49:1b:55:ac:12:eb:f3:c2:fb:0b:
d7:24:89:9f:dc:c8:a8:f8:60:a1:e2:4b:23:72:bf:94:e4:9d:
d2:96:00:4e:ed:db:57:24:8a:0a:0e:30:17:1e:e0:22:d5:eb:
59:07:50:ed:0b:24:c6:de:10:9d:38:09:26:ea:56:0f:f3:0e:
9b:87:e1:cc:5f:8c:05:b3:14:5a:47:e7:b6:ad:35:96:49:a0:
c4:98:50:f2:d7:65:07:4d:65:df:b7:39:69:26:5d:b1:6a:2c:
88:c4:4d:d9:52:80:0c:39:cc:2b:08:71:e1:e3:54:7f:1d:fa:
9d:4f:46:6d:2a:9e:b4:69:4a:38:b6:d8:0e:52:f9:90:89:0e:
08:3e:a6:78:ae:26:1b:ec:60:34:1c:77:18:d6:03:31:e0:32:
c1:ca:0c:46:d5:36:4c:99:04:29:f1:bd:54:83:52:32:c1:73:
5d:65:7b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:49 2023 by rpki-client on console-ams.rpki-client.org