Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/arGKuhaf6dNncH0iBqSlzMJIqKg.roa
File: arGKuhaf6dNncH0iBqSlzMJIqKg.roa (raw, json)
Hash identifier: WVCisvQ7XCpIafq7pIsnv1p1ERcm15/d7DieS/OCb9c=
Subject key identifier: 6A:B1:8A:BA:16:9F:E9:D3:67:70:7D:22:06:A4:A5:CC:C2:48:A8:A8
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 09626B5C
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/arGKuhaf6dNncH0iBqSlzMJIqKg.roa
Signing time: Mon 04 Apr 2022 10:50:26 +0000
ROA not before: Mon 04 Apr 2022 10:50:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41255
IP address blocks: 46.232.120.0/22 maxlen: 24
46.3.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157444956 (0x9626b5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Apr 4 10:50:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ab18aba169fe9d367707d2206a4a5ccc248a8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:b3:94:87:bb:4d:35:68:99:51:d0:a6:5d:
63:d5:1b:90:5d:9b:6e:c7:3c:22:90:9f:4d:79:ee:
41:8d:18:4e:59:ad:8d:72:80:97:e9:f4:10:e4:e2:
e3:18:04:21:9e:27:fb:47:66:59:2b:c0:d0:ce:21:
e7:ad:3f:61:e8:99:62:0d:24:dd:68:7a:3e:ae:76:
fd:34:76:78:f1:91:08:64:12:9c:08:e2:a4:cc:cc:
0e:6d:c4:de:7e:0d:04:91:cb:7e:43:67:24:44:98:
7b:67:d4:96:5d:29:c4:b1:f2:1c:29:ed:7b:3e:c5:
55:3b:b9:9c:0a:82:ac:b4:3d:c5:d6:67:2c:ba:15:
02:0b:8a:a0:a7:5d:7f:c9:6b:33:fb:ff:da:4c:11:
98:97:01:21:ce:47:26:44:cc:49:4b:cf:81:59:c0:
00:9e:84:45:91:25:39:7a:68:b6:64:20:62:81:4a:
1e:b6:20:c3:ce:d0:06:20:b8:64:7a:1c:af:c3:8b:
e3:ac:3f:13:b3:89:39:33:df:58:87:40:c9:20:46:
de:d2:3e:d1:b5:6b:80:aa:02:d2:d0:f5:15:fc:3e:
be:8a:5c:04:89:7f:3e:23:1d:89:ab:13:c8:6e:c8:
f8:f0:e2:f8:d9:20:35:22:46:74:c4:b0:5f:e3:53:
c9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B1:8A:BA:16:9F:E9:D3:67:70:7D:22:06:A4:A5:CC:C2:48:A8:A8
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/arGKuhaf6dNncH0iBqSlzMJIqKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.240.0/22
46.232.120.0/22
Signature Algorithm: sha256WithRSAEncryption
77:0b:93:ab:e5:cc:b1:b9:39:cd:2a:f3:86:37:5a:49:9d:ee:
59:51:23:72:6e:e1:e7:2e:bd:87:40:00:d5:56:48:6e:de:af:
1e:ab:4c:af:c0:bd:52:4b:97:a1:3c:ed:34:0a:ad:2a:b9:e2:
e4:f6:f0:0a:42:ef:ec:c7:c5:f9:ac:96:5c:d9:9b:14:fb:9e:
7b:b8:b6:ec:9b:36:57:3b:86:c5:d6:7b:da:5e:27:02:0d:a2:
3c:78:00:60:7c:fa:61:ac:eb:07:95:71:ae:f1:d1:e2:8a:a2:
09:e6:da:98:97:e8:f8:3c:9b:62:52:b0:a5:71:1e:53:84:cd:
a3:3d:94:b6:ab:94:c4:3c:34:0d:e5:f8:bd:e3:83:5c:78:f2:
1a:b3:46:1a:51:91:c9:01:f8:44:84:66:2c:8c:f3:51:05:0b:
f5:d3:b7:99:85:d0:02:0f:a4:20:f3:c0:3c:09:f1:e6:79:71:
27:a4:e8:7c:f4:07:6a:8f:26:86:12:b5:84:53:fa:d9:cb:ef:
bb:c0:ee:0f:87:25:24:72:b0:3b:1d:02:22:da:81:69:21:95:
39:66:ae:33:16:1d:28:39:fe:1b:58:71:38:1d:6c:87:b7:56:
c5:9d:ca:3f:33:3f:7a:68:e7:1c:47:ce:1c:44:f6:d1:63:17:
cf:27:cb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org