Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/IG6CdSjOX2utUu_bwiARg7z7fdE.roa
File: IG6CdSjOX2utUu_bwiARg7z7fdE.roa (raw, json)
Hash identifier: EBkDDv6Xnni6hdS1Zf2D5ZR8V/+nFYh6zYTBATG5KAc=
Subject key identifier: 20:6E:82:75:28:CE:5F:6B:AD:52:EF:DB:C2:20:11:83:BC:FB:7D:D1
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0181CFA5584EB1DE5D5E9C79023ABD65EA14
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/IG6CdSjOX2utUu_bwiARg7z7fdE.roa
Signing time: Tue 05 Jul 2022 18:35:28 +0000
ROA not before: Tue 05 Jul 2022 18:35:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 46.232.80.0/20 maxlen: 24
46.232.24.0/21 maxlen: 24
46.232.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:cf:a5:58:4e:b1:de:5d:5e:9c:79:02:3a:bd:65:ea:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 5 18:35:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=206e827528ce5f6bad52efdbc2201183bcfb7dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:bf:2a:9f:53:f9:d9:66:f5:6a:4f:8a:41:
44:ab:2b:2c:30:e5:57:d4:0f:81:b5:a5:47:3d:aa:
16:99:83:12:9c:c3:33:da:eb:f6:13:58:18:24:6f:
01:2c:a9:04:f1:d6:3c:47:f3:70:09:ab:56:e2:d4:
b8:27:80:6b:43:16:73:80:20:87:62:ab:af:7a:4f:
37:74:51:2e:6f:7c:f6:be:cf:f9:5a:6d:f7:64:49:
fc:9f:34:d4:fa:04:60:95:58:02:94:a0:31:ef:8e:
57:c0:87:d6:2c:dd:49:5d:04:bb:f4:83:1b:8b:d9:
d4:04:0b:5b:41:35:f0:77:c0:42:e8:9f:90:0c:0d:
e4:15:79:5a:f4:9b:ec:28:51:73:8a:5b:d1:86:b6:
43:57:ad:d6:5b:ef:90:26:67:29:32:35:a5:d5:c4:
a8:5f:fb:cd:72:8d:d4:54:a2:75:42:80:c4:fe:46:
06:1e:5f:78:de:ec:79:0b:60:82:aa:6d:47:69:8f:
f0:f7:c6:7d:42:93:0d:57:51:5b:87:94:89:21:52:
f2:21:a7:af:21:76:83:89:69:04:79:9e:c0:a6:be:
7f:f5:7d:d5:a4:8a:54:27:43:a1:a4:a9:47:3b:a3:
62:30:c3:57:61:55:ac:cf:00:72:c8:8b:fd:ee:89:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6E:82:75:28:CE:5F:6B:AD:52:EF:DB:C2:20:11:83:BC:FB:7D:D1
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/IG6CdSjOX2utUu_bwiARg7z7fdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.24.0-46.232.47.255
46.232.80.0/20
Signature Algorithm: sha256WithRSAEncryption
86:ad:a0:fe:0e:f2:d0:ed:de:64:29:76:07:32:fe:8e:7a:a7:
da:80:87:24:ad:68:a7:54:68:71:fd:86:9c:83:06:8e:68:bb:
1d:84:52:ee:75:a9:6b:9a:5d:66:79:eb:49:c7:0e:8d:34:8e:
aa:25:12:8d:da:34:ea:85:d8:fa:be:bd:e2:88:3d:09:cd:50:
fa:8f:a5:37:f6:63:76:b4:3b:12:af:f8:cc:a5:ba:8c:f2:e5:
7f:9c:29:ba:cc:f8:dc:07:84:0e:99:ac:2e:c9:ea:9b:42:b7:
bd:30:b0:6c:4c:e9:39:5d:3c:73:db:83:6e:04:96:f5:2a:1b:
fc:b4:40:fa:23:b1:a5:19:89:96:3d:48:46:79:64:dc:78:65:
4c:52:ba:53:9a:10:d4:96:f2:47:c7:a0:4e:fb:31:14:87:f6:
46:69:92:6b:54:56:23:98:b0:60:a1:c2:c4:36:e2:c4:09:68:
d6:20:8c:ee:f7:1c:83:e4:87:3c:13:8b:c4:d8:32:06:70:ac:
df:5b:14:12:0d:a2:bf:c3:6a:a0:43:08:92:88:39:6a:1a:9d:
f2:68:dc:6b:10:99:dc:3d:05:02:4c:56:67:60:15:57:2f:1d:
be:e8:d0:72:b9:7a:e5:b3:b8:15:16:a8:20:41:03:e5:f7:69:
2a:70:c3:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org