Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/eMfV36by4dQWTrETMRNfka3YDt4.roa
File: eMfV36by4dQWTrETMRNfka3YDt4.roa (raw, json)
Hash identifier: lTA49oD801jOrZquiCi539VrOv9y/99zYL1HPgPMaWg=
Subject key identifier: 78:C7:D5:DF:A6:F2:E1:D4:16:4E:B1:13:31:13:5F:91:AD:D8:0E:DE
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 0183E0FF13A77CA28EF7051A455140298C7E
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/eMfV36by4dQWTrETMRNfka3YDt4.roa
Signing time: Sun 16 Oct 2022 13:32:36 +0000
ROA not before: Sun 16 Oct 2022 13:32:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43395
IP address blocks: 46.148.35.0/24 maxlen: 24
46.148.36.0/24 maxlen: 24
46.148.38.0/24 maxlen: 24
46.148.43.0/24 maxlen: 24
46.148.41.0/24 maxlen: 24
46.148.45.0/24 maxlen: 24
46.148.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e0:ff:13:a7:7c:a2:8e:f7:05:1a:45:51:40:29:8c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Oct 16 13:32:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78c7d5dfa6f2e1d4164eb11331135f91add80ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:3e:6d:b8:2e:17:db:ab:aa:c1:fd:39:68:
e1:10:45:d4:06:37:96:ec:e2:3f:a0:58:53:54:86:
59:12:af:58:18:f6:98:c7:a3:59:1e:b9:f1:af:56:
96:83:18:8c:24:4a:da:49:b7:ea:80:49:e4:3f:66:
36:98:7c:8f:10:d9:1e:b3:f4:13:28:8b:49:34:e0:
67:74:6f:46:2c:50:94:13:a4:e7:b9:83:14:f6:55:
41:36:1a:13:f7:82:26:5c:9e:f7:88:8f:21:ed:b5:
86:3d:aa:cc:93:fb:19:1c:49:5e:aa:77:45:36:a2:
20:f9:ef:b2:da:53:99:58:14:e4:27:92:26:1b:cf:
c2:2f:76:fa:91:5f:ed:62:5a:47:4a:02:93:3f:a1:
48:3a:0b:e4:93:0f:ae:e0:fd:e7:7b:8a:2c:e4:00:
eb:a6:b9:79:cf:13:ee:cc:5b:1e:94:12:a1:cf:88:
a2:71:92:dc:3e:7b:44:10:69:6e:cd:ba:3e:8d:41:
b4:e1:7c:fe:52:7c:cf:ea:2d:2a:5e:af:1f:f4:41:
78:33:ca:d8:91:10:7a:bb:af:e5:14:ef:c2:e6:8e:
68:87:0b:9b:cb:36:52:a5:ba:00:d1:94:29:8e:bc:
64:41:c2:af:be:b5:7e:24:9b:32:70:a2:a8:61:0f:
57:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C7:D5:DF:A6:F2:E1:D4:16:4E:B1:13:31:13:5F:91:AD:D8:0E:DE
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/eMfV36by4dQWTrETMRNfka3YDt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.35.0-46.148.36.255
46.148.38.0/24
46.148.41.0/24
46.148.43.0/24
46.148.45.0-46.148.46.255
Signature Algorithm: sha256WithRSAEncryption
07:6c:35:6f:95:82:80:f8:82:a9:c5:8b:da:cd:22:61:a5:77:
38:60:1b:f1:eb:d2:58:2c:f0:60:77:a2:bf:8f:4e:52:ca:29:
8a:a5:a5:e1:27:da:bc:f8:aa:1d:55:3f:5d:04:d0:c6:ce:52:
c1:e0:9c:45:21:0f:01:6b:91:90:9e:a2:58:cb:87:31:eb:50:
1e:3d:0d:5e:c5:c9:f9:af:ef:29:82:6d:24:eb:41:b4:eb:47:
b3:6c:7c:df:01:9b:b1:aa:05:62:33:fd:29:4a:8a:31:bb:a3:
4e:d2:b3:28:7e:29:f8:bf:29:4a:f7:fd:1c:ac:92:c0:86:80:
e6:97:c1:28:38:49:d5:cc:f3:c5:49:ae:29:bc:82:04:e8:7c:
88:14:40:9f:7f:6a:94:a3:1f:d5:2f:56:86:af:f2:ee:55:a0:
4c:a1:fb:b5:76:e8:86:68:27:f0:f4:e6:8c:75:da:94:dc:3c:
75:13:e4:80:ac:42:6f:ce:2e:df:11:52:b2:cf:1d:7f:ef:09:
7a:c5:cf:c4:b0:01:eb:d3:f2:4b:13:4a:28:c3:ab:dd:6e:ac:
dc:e1:a4:9a:b2:94:6a:02:2c:ec:96:0b:f0:7b:8d:c3:55:40:
57:50:ce:c9:76:a7:3b:25:69:d4:56:e6:02:c9:e5:a5:37:a6:
91:7d:a0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:21 2024 by rpki-client on console-fra.rpki-client.org