Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/NohtYadsz1HDN0NNCLzEolOvUto.roa
File: NohtYadsz1HDN0NNCLzEolOvUto.roa (raw, json)
Hash identifier: 0iAnwgLZOeIoarggpt8D2usOl/+cFl3G3zVy6J8rEWg=
Subject key identifier: 36:88:6D:61:A7:6C:CF:51:C3:37:43:4D:08:BC:C4:A2:53:AF:52:DA
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 08FF2A2E
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/NohtYadsz1HDN0NNCLzEolOvUto.roa
Signing time: Sat 26 Feb 2022 04:39:00 +0000
ROA not before: Sat 26 Feb 2022 04:39:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399587
IP address blocks: 46.3.72.0/21 maxlen: 21
46.3.208.0/21 maxlen: 21
46.3.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150940206 (0x8ff2a2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Feb 26 04:39:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36886d61a76ccf51c337434d08bcc4a253af52da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:c8:3f:ef:a5:c0:6e:e8:37:1d:06:37:6d:
91:42:49:cb:27:b0:ef:c1:32:89:5a:74:44:92:c6:
dc:62:5a:fb:d6:1f:e3:27:f5:0f:0b:bc:71:8b:45:
7a:ed:75:eb:ae:54:f2:b6:e9:56:fb:8d:f1:94:0f:
bf:b7:76:96:fb:4e:94:f5:31:fd:c1:b8:57:84:60:
6f:3e:bc:be:06:3b:b5:06:2f:8f:93:5c:2f:69:27:
3a:e3:6f:cf:fd:4c:09:b6:ac:81:fc:92:8c:33:19:
0a:29:98:4d:78:ba:ca:f2:ab:bb:62:37:bb:fe:4c:
03:c9:e4:10:1d:df:dd:e9:5b:67:12:e1:28:c0:ff:
bc:54:5d:4e:9e:d1:b0:34:34:df:c3:7a:c6:9b:cf:
88:d5:a2:b7:22:27:16:ff:68:e6:76:fd:33:28:2b:
38:ed:32:0f:ca:80:b1:a2:75:b7:f4:96:50:fa:c5:
de:fd:8f:1d:78:22:d7:9b:ee:db:37:1a:18:0f:26:
ec:22:d6:29:3e:27:b7:91:60:ed:4a:2c:e0:91:fb:
12:f3:2c:cb:00:36:d5:33:c0:28:66:d2:1f:4c:94:
0a:75:d7:be:de:bc:d9:25:7e:d0:da:d1:c8:94:be:
39:48:14:bc:92:7e:be:63:35:e8:59:78:f4:45:03:
21:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:88:6D:61:A7:6C:CF:51:C3:37:43:4D:08:BC:C4:A2:53:AF:52:DA
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/NohtYadsz1HDN0NNCLzEolOvUto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.32.0/20
46.3.72.0/21
46.3.208.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:88:00:61:db:60:4b:70:a4:dc:ec:72:bf:cd:f0:70:3f:7b:
66:d8:af:f6:af:56:71:89:b8:40:18:7d:b0:59:62:9f:b1:91:
1d:6c:6a:26:15:d7:d4:29:46:07:38:ea:02:aa:d7:c8:f0:73:
e7:60:75:85:7e:c6:0e:0e:2d:cb:b3:ea:5e:a4:0a:86:da:2d:
81:a0:aa:67:95:ed:52:3d:1d:60:d9:7e:eb:0a:45:aa:cd:80:
89:60:f7:e9:52:1e:91:cc:75:6b:02:17:64:ce:c7:a8:e5:2a:
97:b9:fb:b9:40:5b:d1:ec:7a:53:30:49:49:58:ab:80:e3:35:
d6:cf:9d:3b:3c:72:1f:f4:28:a3:25:69:1f:54:94:8b:51:5f:
de:37:7d:ca:8f:b9:be:3c:31:0f:da:d9:34:36:da:9c:7a:c8:
e1:9e:59:90:d0:6a:91:1c:65:9b:3f:27:ec:07:0d:e7:4d:1a:
ab:84:ff:4b:df:bd:8f:f0:a1:24:af:54:ba:ea:c8:c4:74:1b:
57:21:c6:1f:f2:57:bf:b6:2a:90:70:ce:c9:af:4d:f9:38:64:
87:b7:56:e1:83:0d:43:95:d1:22:75:9c:a5:58:de:3f:94:47:
ec:0b:be:36:b0:26:e9:7b:1c:1e:8f:e8:51:01:9c:ec:a8:b0:
6f:dc:cc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org