Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/oDS-z2QxK509bwOFOnI34eb7e2I.roa
File: oDS-z2QxK509bwOFOnI34eb7e2I.roa (raw, json)
Hash identifier: YhekqbRIj4rq+erAHv9UPM6NU/JmVU4i3MOJqs6NEcM=
Subject key identifier: A0:34:BE:CF:64:31:2B:9D:3D:6F:03:85:3A:72:37:E1:E6:FB:7B:62
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 09556CBA
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/oDS-z2QxK509bwOFOnI34eb7e2I.roa
Signing time: Fri 01 Apr 2022 08:11:42 +0000
ROA not before: Fri 01 Apr 2022 08:11:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399989
IP address blocks: 46.3.80.0/21 maxlen: 21
46.3.216.0/21 maxlen: 21
46.3.224.0/21 maxlen: 21
46.3.120.0/21 maxlen: 21
46.3.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156593338 (0x9556cba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Apr 1 08:11:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a034becf64312b9d3d6f03853a7237e1e6fb7b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:c9:da:ae:ee:2c:6c:9c:55:e4:8a:20:cd:
e5:61:83:31:af:6d:18:e0:a4:c2:17:1f:d6:91:47:
5a:48:22:ab:73:ba:0d:e1:80:af:f9:af:a5:b2:81:
fb:9a:b9:e3:2f:e9:60:bd:33:f4:6f:9f:44:69:96:
5b:25:88:82:c0:b7:ea:be:f5:1a:26:89:3a:18:d2:
c2:26:33:f4:cc:bd:9f:55:e4:36:cc:7e:a0:34:eb:
86:3d:27:96:90:b1:cc:b7:82:87:36:ba:8b:17:ca:
7c:5a:c6:70:82:3d:be:1e:44:8d:75:7a:db:08:79:
13:04:40:9a:de:93:94:07:cd:f2:b4:c5:1c:41:01:
6a:96:9e:d7:93:81:e2:23:e8:a5:a2:18:af:a6:b0:
2c:b2:d4:42:6e:b6:fd:17:75:f0:f2:b0:12:4f:6a:
a6:ac:4a:33:68:43:70:c1:eb:ad:2e:6f:58:d3:1c:
de:7b:42:87:fc:5b:dd:af:6d:2b:29:b5:89:3b:d8:
60:f7:2e:98:58:53:eb:e1:3c:50:93:2c:7e:2a:cc:
a2:2c:f7:e9:5a:85:06:1b:b4:03:15:a7:8c:e8:8b:
5e:7f:dc:6f:3d:17:12:52:5b:b8:0f:92:d1:38:da:
cc:4f:78:2b:a7:5c:25:11:f5:af:95:77:c8:c9:7e:
e4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:34:BE:CF:64:31:2B:9D:3D:6F:03:85:3A:72:37:E1:E6:FB:7B:62
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/oDS-z2QxK509bwOFOnI34eb7e2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.32.0/19
46.3.80.0/21
46.3.120.0/21
46.3.216.0-46.3.231.255
Signature Algorithm: sha256WithRSAEncryption
8f:bb:ae:0c:85:6f:11:4b:04:d9:7c:aa:24:53:4a:45:b1:58:
b1:66:fa:a6:74:ed:40:18:a5:f5:6d:c7:ec:81:2a:0d:5d:5d:
62:ac:b7:d8:3d:b3:3d:a2:58:8b:22:da:d9:1e:79:78:7b:df:
63:5f:36:53:91:9d:d9:77:50:08:44:33:34:33:39:bd:53:fd:
b7:45:56:ad:f5:66:0d:05:94:90:1b:1c:cb:82:d6:90:b9:44:
fd:1b:d7:98:61:ff:39:f3:cd:a5:fd:e8:0d:2f:70:a1:5d:d5:
40:0a:ed:9d:c0:6d:2c:5b:77:d4:81:c3:da:db:0e:ab:b9:f4:
4b:43:1e:fb:1f:5d:46:60:71:4e:4f:d1:f6:38:ce:68:b6:7e:
b1:d5:5e:72:14:e1:6b:3b:7d:26:7e:02:85:9f:df:2b:86:26:
f7:0e:32:da:21:eb:81:da:70:23:01:8b:a3:ba:8e:1f:82:61:
d4:ed:63:c5:82:9f:3b:94:be:01:3c:74:a5:a7:bb:38:fa:77:
9e:2d:ee:f9:71:d7:18:e6:b0:a2:f3:cd:34:7d:46:a0:59:e5:
82:be:5d:43:eb:77:ae:77:ab:95:7e:c2:34:aa:05:b0:11:b7:
25:16:e7:5f:f5:31:bf:23:f6:71:c3:df:ce:99:95:b8:ff:52:
8f:2c:41:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org