Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/3MaLIKkKpqxdQtifcbgPXuhnF9c.roa
File: 3MaLIKkKpqxdQtifcbgPXuhnF9c.roa (raw, json)
Hash identifier: Q/neA5bk82IEpu0c19TxGD05oTezc1MD3sjNL0RQ8z4=
Subject key identifier: DC:C6:8B:20:A9:0A:A6:AC:5D:42:D8:9F:71:B8:0F:5E:E8:67:17:D7
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 018533EBBF212C6442762EB93063DDD66480
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/3MaLIKkKpqxdQtifcbgPXuhnF9c.roa
Signing time: Wed 21 Dec 2022 09:02:45 +0000
ROA not before: Wed 21 Dec 2022 09:02:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15828
IP address blocks: 46.148.38.0/24 maxlen: 24
46.148.40.0/24 maxlen: 24
46.148.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:33:eb:bf:21:2c:64:42:76:2e:b9:30:63:dd:d6:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Dec 21 09:02:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcc68b20a90aa6ac5d42d89f71b80f5ee86717d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:ec:32:12:4f:de:72:3b:01:ca:b1:e5:fa:
18:62:ba:0e:7b:9b:12:a1:8a:27:bb:8c:f9:14:7f:
b5:ad:92:9a:52:14:df:97:28:e7:63:40:29:6c:23:
14:e9:19:a1:87:6c:c4:84:66:72:59:c2:0a:32:3c:
4a:e3:23:06:1b:75:fc:a5:8a:c9:69:6b:72:b1:3c:
38:55:a3:9e:5a:02:3c:62:05:0d:36:f6:5a:b7:f6:
62:22:fa:4d:61:1c:25:fd:8d:49:03:67:88:92:cf:
63:74:ca:d8:83:6e:da:db:b8:18:68:7b:df:f4:cc:
e3:35:10:6f:58:97:9b:c1:91:0b:6e:72:c5:c6:03:
a2:b8:77:e6:96:0d:a3:bc:41:9a:ee:b9:f9:93:c7:
e1:d4:51:32:9a:8c:64:db:22:70:3b:d8:01:dd:8b:
19:f0:99:66:4b:ce:37:de:67:fa:1d:a1:10:44:ba:
af:ce:a1:88:5a:7b:70:76:e9:d4:01:b3:af:ca:0f:
92:96:d5:fc:00:69:06:cd:c9:65:fe:b6:e0:2c:ff:
c0:ab:64:3b:c3:07:3b:1d:f6:6d:84:88:28:f7:6e:
a1:2f:05:60:ed:6a:21:fb:b4:19:f0:45:43:67:b3:
75:bb:15:9b:20:ee:96:73:c5:87:33:da:20:b9:4f:
d7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C6:8B:20:A9:0A:A6:AC:5D:42:D8:9F:71:B8:0F:5E:E8:67:17:D7
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/3MaLIKkKpqxdQtifcbgPXuhnF9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.38.0/24
46.148.40.0/23
Signature Algorithm: sha256WithRSAEncryption
38:6f:fc:6d:c7:8a:04:1c:ee:c3:0e:20:8d:be:9b:cf:ea:05:
95:28:1f:36:39:2c:bf:0f:a6:d4:29:1d:57:82:4e:84:79:bf:
d3:58:c6:36:ea:24:e7:1e:a9:34:31:bc:2b:eb:11:70:e4:b4:
9b:69:84:a2:95:f2:10:8a:45:f4:e0:62:9f:a8:e5:e9:4b:76:
f0:78:0a:47:36:36:06:3b:4e:d5:d8:e6:26:ba:6c:e8:97:34:
31:f5:d2:f8:d0:c7:c5:6e:eb:37:fc:d2:ba:0f:36:81:8e:2e:
9e:8c:18:c3:7e:7f:b9:c9:ec:c8:88:13:0f:eb:75:96:17:89:
82:94:5f:aa:0d:13:71:dd:ef:4f:d0:2e:02:2a:43:3f:a3:06:
87:25:02:88:03:b1:e2:c6:22:ea:4d:91:ae:c0:c1:4d:90:c1:
8c:3e:ac:a8:09:6d:df:39:48:a8:f2:c6:23:15:3e:d1:d9:9a:
08:71:7d:48:f8:b6:67:bb:b5:00:fa:da:27:6f:3c:7d:a0:d1:
1b:79:c3:d3:de:f6:2a:f7:fb:a5:a0:5c:73:1a:ee:69:f2:6d:
09:4a:b3:83:33:bb:b1:1d:2c:97:50:a1:5b:5a:68:72:72:d4:
0a:0e:6e:a4:45:1e:32:f1:57:4a:02:98:07:c8:41:96:1a:b7:
5e:45:96:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:21 2024 by rpki-client on console-fra.rpki-client.org