Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/2PdWRtO_NUi5YEwJhe6kAW9sLp4.roa
File: 2PdWRtO_NUi5YEwJhe6kAW9sLp4.roa (raw, json)
Hash identifier: i6VRiKtVXLT24LA9E4IJNMZV1UsucY0/oZU0AUKI/gc=
Subject key identifier: D8:F7:56:46:D3:BF:35:48:B9:60:4C:09:85:EE:A4:01:6F:6C:2E:9E
Certificate issuer: /CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Certificate serial: 14644095
Authority key identifier: 52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/2PdWRtO_NUi5YEwJhe6kAW9sLp4.roa
Signing time: Sat 01 Jan 2022 14:08:00 +0000
ROA not before: Sat 01 Jan 2022 14:08:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42525
IP address blocks: 46.32.128.0/20 maxlen: 20
46.32.128.0/24 maxlen: 24
46.32.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342114453 (0x14644095)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Validity
Not Before: Jan 1 14:08:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8f75646d3bf3548b9604c0985eea4016f6c2e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:89:e0:a4:5f:63:4b:e6:68:05:eb:91:41:
de:79:f6:0c:dc:67:c9:a9:b7:04:06:f9:b8:e8:eb:
d8:07:87:d0:0d:0e:94:25:9c:0c:0a:eb:9c:40:76:
16:d3:ef:f3:aa:1e:59:16:c2:17:65:70:6d:49:1b:
60:da:16:7d:f0:cc:16:b7:6f:e8:f5:94:f9:51:9d:
87:83:09:68:a1:e6:00:4b:2d:ff:dd:35:82:90:12:
a1:ed:c1:e9:d0:b4:a9:de:36:0e:9b:c3:9e:2d:01:
ab:d2:35:0a:ec:74:29:da:45:6b:3a:4c:ea:69:8b:
50:e0:6e:ca:7d:c8:b1:55:c7:1c:42:30:d8:86:8f:
24:55:4e:bb:c4:6a:58:7f:b6:6d:ee:cf:bc:a7:5e:
a6:c6:2e:e3:bd:8b:c7:5c:61:da:c6:8d:98:d2:a1:
d5:d0:25:84:29:c1:9f:21:43:9b:5e:67:a9:c1:46:
d3:a4:65:3d:6f:46:30:c4:09:c4:04:bb:36:62:6a:
e8:f5:18:a3:ef:ed:9e:ec:a0:f6:ee:4d:66:13:31:
ec:e9:a7:b3:f7:95:14:66:6b:15:42:9e:be:36:eb:
26:fd:aa:f6:fa:85:0c:e4:ec:27:ff:00:a5:9a:a6:
c1:b4:ae:4e:11:ca:bf:61:5f:78:09:5f:59:80:52:
0c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F7:56:46:D3:BF:35:48:B9:60:4C:09:85:EE:A4:01:6F:6C:2E:9E
X509v3 Authority Key Identifier:
keyid:52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/2PdWRtO_NUi5YEwJhe6kAW9sLp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.128.0/20
Signature Algorithm: sha256WithRSAEncryption
18:8d:f5:34:c1:70:b3:8c:0b:a6:33:92:a1:2e:60:95:c8:89:
92:c0:9d:ce:19:44:56:2c:73:d0:61:d2:e0:20:a8:60:a8:e8:
94:d0:aa:78:3f:39:c4:1e:03:9a:08:71:0e:1f:fe:5e:fc:dc:
62:2f:a5:f8:26:90:8b:35:59:f5:ae:8e:fb:5a:f6:1e:6c:b8:
2b:fa:a6:69:92:50:0d:8c:b6:de:46:3e:6b:ea:f8:2e:ca:7d:
12:ed:35:17:d6:a7:79:ee:63:b5:c4:a2:aa:af:63:13:43:3c:
ff:dd:f0:ae:53:b0:1d:0a:fb:56:7d:c1:39:40:ee:62:3e:e6:
73:74:3a:0d:de:86:b8:0e:09:d3:17:a4:ed:ff:ac:05:d4:5b:
f0:4e:47:15:7e:4c:3c:a9:08:a8:d7:5e:00:70:8e:df:27:21:
d7:62:d3:bb:59:ff:b9:e9:3a:b7:c9:0b:e4:91:9d:9b:5e:ab:
5f:77:94:de:43:b2:55:bd:de:b8:3b:66:9a:fd:79:4c:4e:11:
b6:a3:9f:2f:ef:c6:89:38:4e:0a:65:f2:84:b1:2f:0a:75:43:
b9:fe:d9:cc:18:a8:de:09:f2:cf:e9:21:dc:8e:9d:5a:ae:33:
5f:10:5a:e6:ed:34:cf:d5:c2:c3:6f:74:be:e9:59:fb:6b:76:
bc:f3:86:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:54 2023 by rpki-client on console.sobornost.net