Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/_YEIa-J3kHEamNiPPzh7g8WDcPw.roa
File: _YEIa-J3kHEamNiPPzh7g8WDcPw.roa (raw, json)
Hash identifier: JH2hcOONfYgmWRPdEgWASTb6ML3nzmH9vmP7AHOMLrU=
Subject key identifier: FD:81:08:6B:E2:77:90:71:1A:98:D8:8F:3F:38:7B:83:C5:83:70:FC
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 03B4BAA7
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/_YEIa-J3kHEamNiPPzh7g8WDcPw.roa
Signing time: Sat 01 Jan 2022 16:03:28 +0000
ROA not before: Sat 01 Jan 2022 16:03:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43395
IP address blocks: 46.148.35.0/24 maxlen: 24
46.148.36.0/24 maxlen: 24
46.148.43.0/24 maxlen: 24
46.148.44.0/23 maxlen: 23
46.148.38.0/23 maxlen: 23
46.148.41.0/24 maxlen: 24
46.148.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62175911 (0x3b4baa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Jan 1 16:03:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd81086be27790711a98d88f3f387b83c58370fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:3b:b2:17:9d:3f:bd:e7:0d:90:52:fe:e1:
cc:03:ec:b5:53:5e:b3:99:a9:65:e0:a4:b3:7d:28:
bf:00:cc:88:39:78:37:bf:d3:85:63:5a:26:0a:3b:
2a:69:f1:83:53:92:6f:a6:1d:78:d5:98:64:8d:1e:
6b:30:87:86:4b:9a:2e:fe:cf:4b:8a:01:68:99:39:
7d:c9:5f:e5:d7:c9:19:8c:78:8b:fa:5b:ef:a7:c4:
ad:14:3e:50:a7:0b:b4:1f:cc:3f:b4:f1:6e:c2:5f:
1b:c6:26:f9:45:49:d6:19:e9:8b:71:f4:dc:a2:04:
c2:74:a3:29:2b:0b:65:05:f2:a0:76:5f:24:ae:84:
6b:e6:95:4b:e6:ad:1c:da:1f:ad:6d:c9:82:0f:b0:
47:31:50:f9:35:3d:5a:6e:ee:5f:b6:f7:0b:9a:a6:
4e:68:64:21:46:b3:6d:4c:15:8e:98:77:79:5c:a9:
3f:85:06:38:a0:c9:f5:d8:d4:34:6a:b9:a8:64:81:
aa:8f:0e:b5:7b:be:2d:81:51:ae:05:dd:25:e5:d8:
74:50:0b:9a:3d:e2:9a:96:ba:ee:60:df:cf:c0:92:
3a:0d:34:aa:59:6a:fc:a4:24:3b:f2:c9:ee:44:a4:
ea:5e:46:c2:18:e9:10:ce:84:94:45:51:19:4f:22:
3c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:81:08:6B:E2:77:90:71:1A:98:D8:8F:3F:38:7B:83:C5:83:70:FC
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/_YEIa-J3kHEamNiPPzh7g8WDcPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.35.0-46.148.36.255
46.148.38.0/23
46.148.41.0/24
46.148.43.0-46.148.46.255
Signature Algorithm: sha256WithRSAEncryption
b1:96:9c:ae:69:a9:19:65:2f:2a:10:1d:c0:a5:36:7a:67:23:
d4:69:c6:da:4e:d2:e2:fb:e8:7e:2c:80:a3:c6:47:a3:cc:70:
02:d3:2a:e4:80:25:e2:83:5a:d3:4c:bc:1b:7d:11:69:39:e1:
5d:25:69:00:f4:e3:dd:fb:0f:14:39:4e:92:d1:ee:a4:38:4f:
ec:36:33:e3:36:de:2a:90:a6:d6:bc:88:bc:ad:6e:1f:eb:f9:
d9:86:b7:8d:b2:6d:37:92:f5:cd:e8:a6:3f:69:84:87:f5:f6:
dd:9f:a9:c1:89:ff:64:76:e3:04:85:30:a9:50:9c:e2:32:63:
77:87:20:0b:81:8f:6d:2f:a2:01:7c:2d:89:6b:87:62:61:74:
5e:f0:e2:d2:e6:27:c5:b3:91:01:35:70:be:c1:13:82:2f:b6:
c4:2c:8e:94:ee:94:59:af:03:c7:70:97:c5:3a:bc:cf:c6:01:
66:dc:fa:37:cd:21:fc:d1:ce:4c:c1:ac:d6:13:76:e7:0f:cb:
26:09:ce:05:af:0b:dc:d6:38:87:9f:7b:79:4e:c4:94:bb:d1:
a8:16:b2:5f:1e:0f:bc:58:67:a0:16:05:ea:d4:8d:ce:48:ac:
26:60:d1:23:88:ce:d4:4f:56:f2:97:b5:77:0f:d3:95:a0:c3:
2e:60:af:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:21 2024 by rpki-client on console-fra.rpki-client.org