Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Lkceh-GyakMuB69XnS18xOp0OE8.roa
File: Lkceh-GyakMuB69XnS18xOp0OE8.roa (raw, json)
Hash identifier: 1mff07Bj+XoLuP6Uv1o2jImRl/xorMUHAhCf2ty/EJo=
Subject key identifier: 2E:47:1E:87:E1:B2:6A:43:2E:07:AF:57:9D:2D:7C:C4:EA:74:38:4F
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0184CE945EF502E2992C3FC2FF8733A3BD88
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Lkceh-GyakMuB69XnS18xOp0OE8.roa
Signing time: Thu 01 Dec 2022 16:45:40 +0000
ROA not before: Thu 01 Dec 2022 16:45:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 46.3.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:94:5e:f5:02:e2:99:2c:3f:c2:ff:87:33:a3:bd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Dec 1 16:45:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e471e87e1b26a432e07af579d2d7cc4ea74384f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:40:18:73:07:97:e6:2c:ff:f6:02:f6:9f:58:
ea:03:d9:29:73:d3:19:47:ca:67:4d:1b:f9:74:4b:
88:cf:30:ec:9e:85:4f:c4:f0:16:d3:aa:91:8e:49:
47:ee:90:62:93:31:7f:86:1a:34:b2:38:cc:c1:92:
7a:df:03:20:da:24:55:44:34:31:97:98:b4:b7:21:
d2:03:73:8d:67:1a:85:7e:8d:b3:8c:de:0a:61:73:
94:84:e6:c6:dd:13:d1:77:3c:72:18:11:b0:84:c8:
8b:a6:b5:de:d3:9b:6b:f3:8d:89:50:20:1c:f0:e3:
b3:39:18:27:f6:8c:9e:c5:e5:18:04:ac:b9:1d:5a:
6c:b0:e9:d8:92:0c:05:bb:ab:be:0a:49:f7:cf:53:
88:d1:e0:47:df:d3:dd:06:59:1d:8b:9a:fb:33:09:
7b:86:a7:bc:bd:21:6f:8d:f0:d3:78:7a:04:60:05:
e5:1d:5f:67:f3:32:c7:47:70:df:d1:f6:51:00:93:
9a:1e:bc:1f:a2:2b:84:c3:8b:0d:b0:72:4b:df:11:
c5:ee:36:42:f5:54:64:47:6e:ed:9f:3b:3c:c5:a8:
15:b4:cf:92:f8:0f:ec:2c:94:64:5b:94:e6:d7:e9:
21:32:ff:c4:71:fe:5d:23:70:4a:e5:89:4a:3c:77:
f0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:47:1E:87:E1:B2:6A:43:2E:07:AF:57:9D:2D:7C:C4:EA:74:38:4F
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Lkceh-GyakMuB69XnS18xOp0OE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.238.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d3:ff:86:fb:9e:ed:01:4e:b4:79:9e:0b:a0:8d:a3:fc:0a:
d5:87:01:1e:cf:1b:0a:a4:dd:47:7c:fb:a6:05:1d:13:3f:11:
61:5f:1a:c3:7c:61:52:cc:61:9c:39:73:de:3e:64:fa:05:c0:
f0:f1:bc:42:17:a8:47:a6:51:f4:88:93:fd:27:49:20:c2:cb:
b4:2f:94:f5:66:cf:d3:b1:b8:8b:97:7e:29:38:42:f4:d0:82:
fc:8a:d2:e5:69:80:9d:ed:58:61:04:c6:e0:cc:19:6c:81:58:
76:11:12:46:d8:6a:c5:80:01:32:99:dc:c3:32:d2:ce:06:cf:
19:20:54:2e:34:61:75:3b:0c:48:be:9f:ba:81:b0:67:32:61:
9e:ba:8f:61:7c:3e:60:47:7a:64:8b:ad:f1:9a:90:d2:68:ae:
2e:b1:0d:83:99:ac:01:8a:e3:2f:9d:30:30:e9:c4:c4:f2:a7:
e7:a3:e6:01:f2:a5:a5:da:82:0c:94:a4:c5:0d:6c:20:bd:d4:
47:5e:ea:0b:36:12:8c:1c:2e:76:7a:35:10:8b:41:c2:69:3d:
56:ef:33:86:a8:ca:4c:7d:54:f9:7a:f2:c0:0c:f1:d1:74:00:
d6:ab:99:90:59:3d:9a:dd:99:16:a6:d4:b9:b4:e0:c9:fb:1f:
10:36:49:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org