Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/53_vfd4Ip37_OX73Eh-CQsBmMK8.roa
File: 53_vfd4Ip37_OX73Eh-CQsBmMK8.roa (raw, json)
Hash identifier: kP6esWc5BBfLL8gqc3rjxB+oj7RwOmmKgVnRNtpyuFY=
Subject key identifier: E7:7F:EF:7D:DE:08:A7:7E:FF:39:7E:F7:12:1F:82:42:C0:66:30:AF
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018413BE57CB094F308F05270BAE5EA06803
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/53_vfd4Ip37_OX73Eh-CQsBmMK8.roa
Signing time: Wed 26 Oct 2022 10:02:32 +0000
ROA not before: Wed 26 Oct 2022 10:02:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 46.23.98.0/24 maxlen: 24
46.23.96.0/24 maxlen: 24
46.23.99.0/24 maxlen: 24
164.215.103.0/24 maxlen: 24
46.23.111.0/24 maxlen: 24
46.23.108.0/24 maxlen: 24
88.151.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:be:57:cb:09:4f:30:8f:05:27:0b:ae:5e:a0:68:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Oct 26 10:02:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e77fef7dde08a77eff397ef7121f8242c06630af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:f7:24:3f:7b:d8:96:37:2b:3e:fc:a0:cb:
e1:7e:6c:4a:dc:e1:a8:fc:23:8e:95:d3:ab:bf:67:
57:95:06:1d:c3:85:d0:d9:e6:37:bd:a3:88:4c:b4:
ab:2a:05:d4:c9:eb:52:ad:0c:bb:c4:8e:62:b4:a9:
21:9c:4c:a1:1a:52:e9:18:93:5d:62:3f:5b:9e:b3:
c1:95:18:52:97:74:66:81:84:61:ef:47:88:20:e1:
ec:94:49:75:f8:5b:92:d5:2e:c4:e2:1b:32:51:e8:
62:a3:e9:b4:24:ba:2b:ac:fa:51:5a:a6:ad:e7:bb:
ac:1a:49:ab:a3:2f:48:0d:5a:fa:3e:2e:29:b1:c3:
06:07:db:25:fc:1c:36:f9:c2:93:ef:4a:b2:18:f7:
f1:20:ff:26:e7:20:76:0a:5b:18:9b:3d:20:45:ac:
ba:13:98:03:73:4e:5e:78:eb:32:07:48:af:1c:ac:
3f:e0:26:f6:30:36:39:58:8c:b6:5f:b4:10:fb:9c:
b8:59:a7:88:2c:e9:2c:9c:97:cc:80:c4:8d:e7:26:
dd:71:56:cc:19:10:aa:81:d1:6e:55:96:02:f1:94:
f0:0f:d1:b9:c4:78:e5:6f:50:60:46:c4:a9:af:94:
79:a2:0d:a4:c1:23:9d:45:00:16:e6:b6:d0:ea:54:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7F:EF:7D:DE:08:A7:7E:FF:39:7E:F7:12:1F:82:42:C0:66:30:AF
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/53_vfd4Ip37_OX73Eh-CQsBmMK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.96.0/24
46.23.98.0/23
46.23.108.0/24
46.23.111.0/24
88.151.195.0/24
164.215.103.0/24
Signature Algorithm: sha256WithRSAEncryption
92:50:d5:3a:53:50:f5:7d:bd:b6:0f:13:20:f1:96:fe:5e:ee:
42:6e:55:ff:25:37:e0:4b:fa:10:68:8a:bd:12:7a:18:49:56:
02:a0:4f:13:8d:94:3f:19:fd:28:aa:e0:87:92:b7:63:2c:f7:
5d:63:2e:db:b3:53:b3:e2:ce:69:40:8b:f6:0f:45:d5:ea:49:
cd:2e:0a:cb:af:05:73:b7:6b:4a:44:80:2c:e9:2b:b3:b2:63:
0b:b9:7a:85:82:a7:bd:ff:ca:b0:1e:68:ec:13:40:44:50:9c:
a4:ba:e1:0d:3f:b5:85:b2:fb:0a:db:19:aa:93:20:56:11:4f:
c2:38:3f:00:05:d3:de:61:b7:37:2f:86:a9:a0:57:25:b6:8c:
26:fb:67:37:d5:bd:cc:9c:ca:10:74:7a:12:f4:ad:48:b3:d9:
b6:03:81:4c:fc:a6:c9:f7:93:93:f2:a2:8a:a1:09:ff:74:ce:
15:07:5f:b3:3d:ac:41:03:a1:1c:4f:ee:1b:d5:93:dd:0a:79:
78:2d:2c:0b:34:8f:47:c5:2a:32:f9:67:52:97:a8:6c:c9:c4:
1c:14:ae:5c:0f:f8:8d:16:d4:be:b2:58:46:41:9e:40:ae:d0:
4e:b8:5f:29:1b:ff:0d:f4:28:f5:05:d0:ee:28:45:0a:7d:2a:
f8:73:e9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org