Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/2gr-F4sz7kgBmYKRc5yEG7NTFqM.roa
File: 2gr-F4sz7kgBmYKRc5yEG7NTFqM.roa (raw, json)
Hash identifier: qfMY0j5UDI+IvKK0pxAW6H7h/0WkcgP36fBzrDOh2Bc=
Subject key identifier: DA:0A:FE:17:8B:33:EE:48:01:99:82:91:73:9C:84:1B:B3:53:16:A3
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 092843B7
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/2gr-F4sz7kgBmYKRc5yEG7NTFqM.roa
Signing time: Tue 15 Mar 2022 14:47:21 +0000
ROA not before: Tue 15 Mar 2022 14:47:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35251
IP address blocks: 46.3.114.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153633719 (0x92843b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 15 14:47:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da0afe178b33ee4801998291739c841bb35316a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:ca:0b:c8:fb:8a:9e:f3:88:c0:d4:7a:a2:
64:12:b4:99:0f:2a:02:e7:a2:cf:1f:d1:96:5d:d3:
24:94:57:49:e6:f1:7c:cd:02:31:6b:20:c0:5d:f8:
68:53:f7:85:71:52:fe:cb:e2:56:f4:b1:b7:0d:57:
6c:56:b0:ad:8c:9b:24:79:de:d5:5d:c5:18:fc:f4:
c1:d3:37:d1:07:32:01:b5:9e:7f:63:8b:06:9f:f5:
05:26:92:9b:b4:6f:d9:5c:2e:46:00:db:98:6f:4c:
78:72:7c:f7:76:04:6f:37:0f:70:da:e9:d5:fa:18:
ae:48:0f:21:84:f5:b5:4e:7c:92:38:24:8a:52:3e:
58:df:2a:bb:7c:e9:fa:ce:96:fb:93:be:87:94:e1:
7f:ed:88:18:92:a7:54:dd:62:d4:7d:88:44:97:7c:
f5:3f:dd:6d:16:bf:8a:ad:f3:0b:ec:0b:ab:69:c9:
4e:0d:67:d6:6d:53:a1:6f:17:d8:3f:82:3d:ce:c7:
6c:8d:5e:73:15:f5:62:5e:9f:4c:77:60:d0:91:92:
8e:f3:f0:51:c1:b7:a8:a4:d3:c2:bd:3b:68:76:61:
05:63:22:7a:35:6f:58:19:8f:24:94:dd:83:6b:67:
18:89:94:6f:4d:e0:8d:1a:e6:21:26:ee:22:e1:42:
51:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0A:FE:17:8B:33:EE:48:01:99:82:91:73:9C:84:1B:B3:53:16:A3
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/2gr-F4sz7kgBmYKRc5yEG7NTFqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.114.0/23
Signature Algorithm: sha256WithRSAEncryption
93:e7:51:fc:39:3f:74:59:da:05:53:7e:a2:34:40:6a:e6:9a:
c2:29:8b:55:b9:dd:6c:6b:9a:22:8b:8f:b8:01:b3:89:08:39:
4b:84:f8:71:ef:22:15:8d:6d:2f:25:8b:15:0d:0b:4d:d6:ab:
77:75:a7:e0:7e:75:20:ad:7c:dd:64:bf:79:2f:05:82:34:40:
f7:af:ad:0c:f2:25:e3:11:de:98:3c:a3:3b:f5:cd:66:b8:cc:
90:2b:3a:91:46:fc:01:20:2c:d1:46:fb:b2:36:40:fb:d0:8b:
07:f4:e6:51:05:d8:46:6c:88:8e:51:f4:a4:d3:41:c8:8f:4c:
e1:f8:e9:5e:08:de:95:6c:d8:f6:55:81:53:fd:9d:ce:65:6a:
ca:02:99:ee:8c:cf:ca:cc:23:3f:84:a8:fb:59:46:6e:35:e0:
6f:35:02:ea:a4:e2:23:ae:22:4c:5b:21:85:ec:60:e7:35:90:
4c:8f:cc:4f:67:a7:b9:2d:12:63:3e:1b:48:59:90:4d:ab:0f:
69:e7:cb:96:3f:e7:f6:17:3a:45:ac:c0:45:5f:59:1e:53:08:
73:97:16:06:9f:7a:1b:4f:4d:89:15:99:04:5b:b8:98:4a:55:
d6:e4:bf:e2:b1:d9:07:62:2a:92:46:f5:1b:fd:d5:db:2b:72:
c2:b9:8e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org