Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ANqbwLiS-TmfU-dIn6A4jpA1yhg.roa
File: ANqbwLiS-TmfU-dIn6A4jpA1yhg.roa (raw, json)
Hash identifier: 6rklQasJyuQ95HSW9ILqDAxWlzp22cN3J9c8hQe0ROc=
Subject key identifier: 00:DA:9B:C0:B8:92:F9:39:9F:53:E7:48:9F:A0:38:8E:90:35:CA:18
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0184E6EBC18A9931A4B42CA6D4CDA2FCD497
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ANqbwLiS-TmfU-dIn6A4jpA1yhg.roa
Signing time: Tue 06 Dec 2022 10:12:00 +0000
ROA not before: Tue 06 Dec 2022 10:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208046
IP address blocks: 46.23.110.0/24 maxlen: 24
109.205.211.0/24 maxlen: 24
109.205.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:eb:c1:8a:99:31:a4:b4:2c:a6:d4:cd:a2:fc:d4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Dec 6 10:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00da9bc0b892f9399f53e7489fa0388e9035ca18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:02:3d:22:ed:e6:56:38:fb:93:11:50:ca:aa:
76:70:14:99:60:15:5a:28:0b:ef:44:ae:a6:85:13:
3d:4a:73:2f:5b:6d:36:e2:4d:6a:fb:a2:56:69:a8:
bd:a7:ac:1f:a1:4c:8a:10:6e:4a:4e:09:ca:5b:84:
6f:09:b3:59:54:cf:5b:00:33:d2:7f:95:18:1e:93:
24:41:1d:fa:c8:f2:b7:42:7c:ce:f4:7d:7a:05:ba:
a2:92:28:68:58:d5:47:56:95:2d:7b:08:14:5b:cf:
89:df:a3:38:8c:1f:7c:3f:da:ba:23:23:48:91:22:
dd:b9:0a:66:76:d6:2a:fd:95:be:ba:6b:28:54:62:
90:f6:f2:97:aa:49:9f:d1:85:e8:bc:74:88:9f:17:
48:fc:b7:d4:10:8f:2a:eb:c8:cb:eb:94:6a:9e:0e:
7f:94:08:23:3f:e4:8e:96:b4:d7:3f:08:4a:f0:1a:
94:2a:92:40:f6:84:3b:8f:c8:43:4b:ca:ff:73:aa:
32:85:62:45:5e:ce:41:76:d2:35:cf:6a:8d:60:c0:
c8:34:78:f6:b7:84:99:d9:cb:7d:07:11:59:f2:57:
60:b9:63:1f:74:24:48:82:66:37:2d:1d:19:3c:37:
69:b5:b6:e8:90:c3:05:2c:c9:de:5e:a9:30:63:c2:
49:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DA:9B:C0:B8:92:F9:39:9F:53:E7:48:9F:A0:38:8E:90:35:CA:18
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ANqbwLiS-TmfU-dIn6A4jpA1yhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.110.0/24
109.205.211.0/24
109.205.214.0/24
Signature Algorithm: sha256WithRSAEncryption
24:f2:a1:e9:28:6f:c8:64:60:3e:e0:c0:c2:58:82:68:d7:dd:
29:47:67:2b:0c:fa:dd:55:9d:ec:73:ad:47:32:0d:c6:5b:a6:
24:5e:67:32:9a:fe:3d:28:8d:1b:c1:f3:ec:a7:b1:43:db:db:
af:11:52:d7:b7:4b:0c:9a:4e:22:10:d2:50:84:86:2f:52:f9:
0b:8f:67:33:3b:33:9d:55:06:7d:be:20:3e:cf:0b:53:88:10:
60:a2:aa:ae:c2:2f:35:83:9e:ad:33:31:a8:2a:c8:aa:f3:61:
a7:c9:5e:a3:ee:1d:97:b0:f7:ca:0c:35:52:1b:30:8a:98:6c:
ff:89:5b:5b:db:fe:f5:6a:ed:77:d9:6f:d1:5e:af:b1:9f:7f:
19:e6:8b:16:39:66:e2:91:2c:db:14:c4:5d:f7:57:d9:92:0f:
49:35:4a:00:0f:cd:bb:1d:bc:29:d3:7e:23:8f:cb:84:0c:87:
3d:c6:47:0a:e3:2a:ff:e2:a8:f5:e5:95:65:7a:04:a4:51:d5:
5c:c2:6c:ba:e5:d4:5f:d7:f6:07:36:b0:a4:3d:fb:15:0e:b0:
2b:14:7e:42:ba:b9:5c:83:d9:be:e1:fd:63:4f:98:5f:e0:c6:
12:ed:65:9f:6b:9b:34:f1:62:51:19:52:87:6e:81:99:11:97:
66:5b:59:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org