Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ZoDLgXWVSP20qKf119r3EF0E8sg.roa
File: ZoDLgXWVSP20qKf119r3EF0E8sg.roa (raw, json)
Hash identifier: goFUgF5hE7CrNBjri2SHXTETOfXxJEG8Urw9ckw9/IU=
Subject key identifier: 66:80:CB:81:75:95:48:FD:B4:A8:A7:F5:D7:DA:F7:10:5D:04:F2:C8
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0958B1C5
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ZoDLgXWVSP20qKf119r3EF0E8sg.roa
Signing time: Fri 01 Apr 2022 08:53:31 +0000
ROA not before: Fri 01 Apr 2022 08:53:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399587
IP address blocks: 46.3.80.0/21 maxlen: 22
46.3.208.0/21 maxlen: 21
46.3.216.0/21 maxlen: 22
46.3.224.0/21 maxlen: 22
46.3.120.0/21 maxlen: 22
46.3.32.0/19 maxlen: 22
46.3.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156807621 (0x958b1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Apr 1 08:53:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6680cb81759548fdb4a8a7f5d7daf7105d04f2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:94:e0:ae:32:88:41:44:df:fb:0d:e9:2a:
ee:2d:f3:08:9c:00:7f:cc:07:6a:6e:c3:8f:33:2c:
97:3a:f9:33:6d:88:32:1c:b7:3e:a9:7a:12:06:74:
1c:a0:f0:78:c6:72:6d:2d:84:0f:94:6d:1c:31:6e:
1a:41:3f:f0:4d:59:84:73:57:63:49:0a:69:8d:86:
e7:77:bb:a9:19:a2:7f:4e:9d:24:c8:1d:f0:a7:9a:
c5:7f:54:a2:dc:d1:33:06:56:5b:04:44:7c:1e:c8:
53:fe:e4:70:22:52:17:80:98:16:2b:6d:38:9d:9a:
37:e1:ce:78:0a:51:4d:d9:e6:b7:c4:d4:9b:c0:13:
01:05:9a:5e:5b:11:4e:de:46:1f:ff:3a:d8:2a:22:
74:c0:88:30:df:33:ec:d9:0b:5d:ee:6b:af:d2:f7:
18:c2:3d:ae:c5:af:a0:e7:f7:b5:8b:59:82:8f:e6:
56:3b:e0:45:f2:f0:c0:ff:a1:5f:c2:cc:09:b7:01:
a9:ac:34:65:66:59:2b:56:d0:38:54:7c:d9:f6:56:
a9:6f:3b:fb:1f:2e:a9:14:ac:6b:02:4d:2a:33:cd:
84:c3:98:6e:50:20:84:e8:b1:2b:9f:06:b5:3c:90:
cb:03:a1:3b:30:8f:48:b8:c7:bc:cf:11:05:5e:ef:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:80:CB:81:75:95:48:FD:B4:A8:A7:F5:D7:DA:F7:10:5D:04:F2:C8
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ZoDLgXWVSP20qKf119r3EF0E8sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.32.0/19
46.3.80.0/21
46.3.120.0/21
46.3.208.0-46.3.231.255
Signature Algorithm: sha256WithRSAEncryption
3a:68:42:c8:07:e2:33:6e:f7:72:f8:6a:65:d4:f8:d5:5f:a5:
24:de:3a:92:6e:51:8c:4d:23:80:3e:c8:9a:d3:58:b4:6e:d8:
e9:83:af:7d:a2:fa:65:53:84:35:dc:64:8e:05:03:1a:f8:f5:
15:45:d2:25:05:66:bf:f8:83:13:cd:1e:80:6a:8d:21:59:8b:
70:b0:ff:5b:9d:15:1f:3a:15:0a:a5:f5:94:5d:9c:24:31:eb:
b9:51:ab:bc:ea:2f:3b:a2:b2:fd:ca:0f:d5:84:87:7e:6e:a9:
08:eb:04:3f:a9:6b:b1:5c:95:eb:9f:1c:9c:da:91:3f:4d:73:
63:2e:60:6b:0a:c9:14:9e:87:b4:60:44:21:1b:09:88:7c:44:
a7:78:fb:4e:b3:03:4d:60:54:93:74:97:39:69:ed:25:36:78:
b1:a3:b5:62:e2:88:f0:09:f5:2d:6d:37:95:56:42:93:2f:4a:
fb:4a:6c:71:3a:11:a1:87:82:80:16:47:f8:73:17:64:bb:43:
53:f8:65:b5:d6:d4:3a:74:b9:32:58:da:44:6c:e6:89:54:39:
fe:ef:f1:ca:df:9e:98:e1:82:69:72:a3:01:07:bc:cc:24:5c:
a1:0d:2d:e8:63:2a:cb:ac:79:22:0d:11:35:aa:e1:c6:27:73:
53:24:d6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org