Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/PIfhYvv5ZUOvC6aZICR6uMNr-V4.roa
File: PIfhYvv5ZUOvC6aZICR6uMNr-V4.roa (raw, json)
Hash identifier: /xXDexJV0DALvKcY52dRW6JD9kR882um8r9r49lVX+w=
Subject key identifier: 3C:87:E1:62:FB:F9:65:43:AF:0B:A6:99:20:24:7A:B8:C3:6B:F9:5E
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01844DA9961216A3AB049368D119E800EF55
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/PIfhYvv5ZUOvC6aZICR6uMNr-V4.roa
Signing time: Sun 06 Nov 2022 15:57:50 +0000
ROA not before: Sun 06 Nov 2022 15:57:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54197
IP address blocks: 46.3.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:4d:a9:96:12:16:a3:ab:04:93:68:d1:19:e8:00:ef:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Nov 6 15:57:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c87e162fbf96543af0ba69920247ab8c36bf95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:44:24:ff:fa:df:d7:22:ed:25:9c:f1:79:08:
25:64:28:31:20:85:f8:14:2a:06:68:fa:9a:00:f2:
b5:e6:6a:12:7e:86:7f:04:ad:fd:74:6d:8e:70:be:
56:5d:4f:05:0b:79:5c:da:1c:dc:4b:21:34:06:43:
aa:a3:04:b5:31:47:a7:4e:ba:b6:67:c2:e1:6a:43:
2e:cf:36:1c:88:5a:76:1a:5c:c6:1e:0c:58:06:b3:
4a:99:62:d5:4d:53:b1:0e:00:90:a3:fe:c4:48:45:
e6:36:76:05:e1:c7:67:e2:e9:60:77:30:9d:5d:7f:
71:4e:f6:95:35:14:46:2a:fd:11:8f:65:73:86:38:
25:d9:13:65:39:0c:5d:07:9e:f8:d5:4d:da:96:66:
35:f9:7b:3c:40:d0:0a:ab:4e:3a:cb:49:83:fc:0b:
b6:69:0a:2a:33:65:c1:d5:ae:4b:c2:06:6d:68:e5:
64:8e:c1:9b:e3:e4:37:da:fa:48:6b:22:1b:a2:49:
dd:5c:4a:f5:24:9b:fd:cc:cd:5a:ef:05:1f:ad:a8:
6d:35:06:e5:40:aa:e8:a7:ae:c3:4f:1b:a4:fd:b8:
6f:5a:e2:cd:46:62:17:d6:28:a9:07:7c:b8:4e:d3:
ec:57:37:a0:92:80:ff:bc:42:bc:68:a3:64:6b:fa:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:87:E1:62:FB:F9:65:43:AF:0B:A6:99:20:24:7A:B8:C3:6B:F9:5E
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/PIfhYvv5ZUOvC6aZICR6uMNr-V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.80.0/22
Signature Algorithm: sha256WithRSAEncryption
91:a8:d5:12:3b:47:f7:07:31:99:a7:8c:f9:69:3a:5a:83:ad:
c3:11:b8:8e:0c:a5:c6:82:10:87:9e:73:b7:9f:6e:a0:7b:01:
20:ea:4b:7c:f4:0c:c1:9f:dc:ad:fb:58:6c:d8:4e:e5:5d:b1:
7c:97:18:cb:34:00:aa:7f:0c:8d:26:43:88:4b:e5:40:5f:15:
2b:3d:97:65:1d:18:e4:e7:c4:7d:a1:56:fb:69:f0:0e:c4:c0:
e5:9d:14:21:d4:1c:4d:a7:d0:8e:91:d4:a6:58:c9:fd:57:7c:
6b:00:43:f2:6b:28:72:71:7b:42:a5:66:3c:19:d4:4d:89:16:
c1:27:33:e1:3e:87:45:57:68:b4:be:54:f2:a8:77:b0:d1:1d:
1c:ef:8b:0a:fe:dc:69:4e:b5:95:bd:6a:d1:4a:c4:26:f0:b1:
63:6c:65:b7:c4:f8:c5:98:f5:a1:a9:55:e9:b0:8b:5d:eb:c8:
bb:1e:53:2d:66:72:12:a3:71:0b:71:b4:6e:10:e6:de:6b:30:
79:9b:41:14:b3:40:49:6b:07:d8:e5:6a:6c:d4:42:cb:fa:fb:
b4:2f:d3:90:e8:11:51:1b:5d:78:fe:2f:3f:a8:c7:77:b8:67:
42:0f:a5:6b:0c:e7:ed:d9:26:e6:c3:2f:06:6b:83:07:40:8f:
2a:0a:51:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRNqZYSFqOrBJNo0RnoAO9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjIxMTA2MTU1NzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzg3ZTE2MmZiZjk2NTQzYWYwYmE2OTkyMDI0N2FiOGMzNmJmOTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEQk//rf1yLtJZzxeQglZCgxIIX4
FCoGaPqaAPK15moSfoZ/BK39dG2OcL5WXU8FC3lc2hzcSyE0BkOqowS1MUenTrq2
Z8LhakMuzzYciFp2GlzGHgxYBrNKmWLVTVOxDgCQo/7ESEXmNnYF4cdn4ulgdzCd
XX9xTvaVNRRGKv0Rj2Vzhjgl2RNlOQxdB5741U3almY1+Xs8QNAKq046y0mD/Au2
aQoqM2XB1a5LwgZtaOVkjsGb4+Q32vpIayIbokndXEr1JJv9zM1a7wUfrahtNQbl
QKrop67DTxuk/bhvWuLNRmIX1iipB3y4TtPsVzegkoD/vEK8aKNka/o7KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDyH4WL7+WVDrwummSAkerjDa/leMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvUElmaFl2djVaVU92QzZhWklDUjZ1TU5yLVY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLgNQMA0G
CSqGSIb3DQEBCwUAA4IBAQCRqNUSO0f3BzGZp4z5aTpag63DEbiODKXGghCHnnO3
n26gewEg6kt89AzBn9yt+1hs2E7lXbF8lxjLNACqfwyNJkOIS+VAXxUrPZdlHRjk
58R9oVb7afAOxMDlnRQh1BxNp9COkdSmWMn9V3xrAEPyayhycXtCpWY8GdRNiRbB
JzPhPodFV2i0vlTyqHew0R0c74sK/txpTrWVvWrRSsQm8LFjbGW3xPjFmPWhqVXp
sItd68i7HlMtZnISo3ELcbRuEObeazB5m0EUs0BJawfY5Wps1ELL+vu0L9OQ6BFR
G114/i8/qMd3uGdCD6VrDOft2Sbmwy8Ga4MHQI8qClH/
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org