Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VkfefL0X373DpjZNm_n6UiN-Kmw.roa
File: VkfefL0X373DpjZNm_n6UiN-Kmw.roa (raw, json)
Hash identifier: PJ9bsr1iep1+f1JupQoC3xhREM+Bpfb5mBeXF5Silsg=
Subject key identifier: 56:47:DE:7C:BD:17:DF:BD:C3:A6:36:4D:9B:F9:FA:52:23:7E:2A:6C
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0184C836BACF6DCB2B4D9B181C73C4FF4FED
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VkfefL0X373DpjZNm_n6UiN-Kmw.roa
Signing time: Wed 30 Nov 2022 11:05:40 +0000
ROA not before: Wed 30 Nov 2022 11:05:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 46.3.158.0/24 maxlen: 24
46.3.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:36:ba:cf:6d:cb:2b:4d:9b:18:1c:73:c4:ff:4f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Nov 30 11:05:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5647de7cbd17dfbdc3a6364d9bf9fa52237e2a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:49:98:a5:e2:49:51:31:a6:e6:c1:81:b3:f4:
57:c9:b5:fe:49:3b:4a:4d:39:a6:60:f7:d1:b9:d8:
01:bb:97:2f:ba:d6:5e:f4:63:5f:4e:e0:3d:b0:63:
8e:89:9c:88:25:f1:17:e5:24:01:88:ad:52:67:fe:
a5:b8:a0:d1:15:24:64:8b:8e:d4:72:61:ac:89:98:
5b:ce:a2:39:4b:5a:be:3a:c2:02:57:c7:12:6e:18:
b5:e7:24:3e:61:21:44:51:c5:7c:8c:c6:e1:da:c5:
1e:06:c7:e5:0c:b5:5d:4f:36:f6:66:98:84:41:c6:
bf:64:ce:a5:5c:3f:b0:53:d9:38:7b:7b:11:84:b6:
e0:b9:38:d5:7a:7c:e5:72:e9:fd:ca:02:dc:a3:f3:
68:fa:57:3d:75:28:e9:2c:f7:87:a3:1b:8b:bb:b7:
d8:9d:dd:d6:5c:6a:35:6b:0b:c4:21:a8:e8:c4:2d:
16:25:a8:d9:09:d3:9d:7d:14:cc:8f:d7:12:e3:45:
b1:a5:f6:93:74:7e:3a:be:8a:41:0c:00:f1:92:81:
ff:98:fe:ad:19:5b:50:ee:fd:5a:79:11:2c:0a:89:
dd:da:cc:d7:8f:0e:15:69:06:9b:c1:01:63:95:45:
41:00:3d:e2:db:19:de:ca:a8:3a:ac:bf:d2:4b:fc:
ff:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:47:DE:7C:BD:17:DF:BD:C3:A6:36:4D:9B:F9:FA:52:23:7E:2A:6C
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VkfefL0X373DpjZNm_n6UiN-Kmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.158.0/24
46.3.238.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b6:99:1f:7f:f9:f3:a6:a4:84:eb:ba:9a:7e:4d:b1:c8:f4:
da:e3:b2:e5:81:1b:73:87:cd:27:f9:b0:ad:4c:92:6d:8e:07:
36:7e:35:ae:26:3d:65:d7:f2:12:5b:f5:c9:ef:a0:5d:cd:a3:
4c:f0:95:6c:dc:b8:2b:5f:36:21:66:51:ea:5b:f1:87:78:c3:
1a:64:15:e5:e0:7b:e2:de:2a:9a:fd:23:f9:5c:ee:aa:51:a4:
d3:f6:f4:55:a0:2d:de:b7:8c:e5:9f:36:64:ce:99:0e:d7:24:
e1:57:1b:82:4f:4f:19:a7:92:34:e2:11:41:b9:0c:51:50:c8:
04:54:69:ce:e9:ca:65:f3:f4:86:4c:ee:d4:b2:0f:37:95:2d:
0c:95:c7:4b:54:31:17:73:af:c9:6b:4d:b1:c4:89:a9:c7:1a:
3c:13:6b:cf:3f:00:0f:a6:4c:34:f8:98:15:e8:d2:00:c1:3d:
94:a6:05:20:ae:02:f9:96:05:da:ee:34:53:23:9a:1e:63:44:
37:c8:f9:07:46:29:2d:1e:46:48:fd:77:d7:51:44:2c:8f:18:
08:8c:4b:0f:60:52:13:f2:94:56:b2:24:b2:75:bd:1b:1c:29:
6e:1c:0d:67:f1:98:b9:4a:9e:7b:91:65:a9:d2:cc:be:9f:c8:
bb:be:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org