Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/pvj8HKSHQ3ypY-ComICdqxrteC8.roa
File: pvj8HKSHQ3ypY-ComICdqxrteC8.roa (raw, json)
Hash identifier: p9SMeM+MmSAE4Mt9lwN2VOal5wC5znZV6/+Q7XZmz3A=
Subject key identifier: A6:F8:FC:1C:A4:87:43:7C:A9:63:E0:A8:98:80:9D:AB:1A:ED:78:2F
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 0183DD2B75B646BEBAF530FF245C59C0E86E
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/pvj8HKSHQ3ypY-ComICdqxrteC8.roa
Signing time: Sat 15 Oct 2022 19:42:36 +0000
ROA not before: Sat 15 Oct 2022 19:42:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39650
IP address blocks: 46.148.41.0/24 maxlen: 24
46.148.43.0/24 maxlen: 24
46.148.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:dd:2b:75:b6:46:be:ba:f5:30:ff:24:5c:59:c0:e8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Oct 15 19:42:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6f8fc1ca487437ca963e0a898809dab1aed782f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:59:0d:cc:13:06:17:60:5e:06:c7:74:be:5f:
2f:98:bc:b0:f9:c9:ca:9a:91:1c:f1:15:77:37:c3:
e9:2a:6e:d9:cb:5e:dc:04:57:52:ab:e6:50:0f:d2:
88:95:53:1d:2d:ab:cc:ad:4e:d2:d7:70:1b:dc:7b:
d9:de:10:01:d7:07:50:7e:9f:34:e4:86:e8:b5:22:
f6:9c:b2:2b:d9:81:45:89:88:39:c8:14:14:30:ea:
b9:9b:06:68:f5:f6:e6:0e:73:7f:f3:d8:a3:ee:2c:
86:b7:19:88:6b:4e:ed:48:4b:88:05:95:dd:ea:61:
22:6b:82:e1:c4:c5:d3:76:ce:eb:0b:97:a8:a0:e4:
61:67:f2:41:a4:5b:db:5a:39:34:e0:e9:f3:68:23:
6d:30:01:d1:22:34:0a:5b:68:1a:e2:8e:b0:ce:40:
54:b3:bf:33:da:79:98:bc:75:b3:4f:ec:49:84:bb:
ab:26:09:5a:ea:e7:cd:ae:dd:70:60:90:b3:0b:23:
1f:68:2b:f3:ea:85:0f:c6:e4:89:85:b7:a0:6a:55:
f2:d7:a6:de:10:30:bd:46:e7:5a:7e:f2:42:f9:55:
c6:48:f0:90:3f:0a:ca:3c:da:cf:95:3b:18:cb:a6:
2f:c1:9b:5d:a9:c7:3c:73:b1:72:f6:17:59:11:18:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F8:FC:1C:A4:87:43:7C:A9:63:E0:A8:98:80:9D:AB:1A:ED:78:2F
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/pvj8HKSHQ3ypY-ComICdqxrteC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.41.0/24
46.148.43.0-46.148.44.255
Signature Algorithm: sha256WithRSAEncryption
3f:6f:d8:c6:a7:7c:43:19:42:02:c9:d0:ba:7c:f1:33:1a:10:
e8:2e:f1:28:ed:00:bb:bb:e8:75:e2:38:31:2e:8a:bf:c0:85:
ef:12:34:dd:84:df:09:d4:e4:cf:cb:dc:e4:e8:cb:e1:1d:11:
9a:68:e7:97:43:98:c1:cd:9a:9c:54:eb:77:1a:4e:cf:55:c9:
11:7c:74:2c:42:97:a8:19:d7:03:51:43:ab:2d:4b:23:53:71:
c9:2f:87:f9:41:c9:9c:36:0e:22:21:e8:c9:4e:f4:83:0a:f1:
61:d9:c3:f4:ff:07:5f:35:05:68:90:bf:a2:00:0b:ee:d6:ae:
d5:ef:0c:61:62:8a:f9:6a:50:f3:f1:e0:b0:58:3e:07:ce:f2:
84:c2:8b:f3:3f:ae:a3:b7:42:da:da:1a:52:7f:0f:65:fd:ca:
84:bd:5d:79:d2:28:cc:9d:53:c2:24:23:ea:21:23:e1:d5:bb:
0f:29:07:bb:63:e4:4d:89:04:53:a1:94:f0:d2:1a:b7:39:f6:
82:27:d1:c1:2e:c2:78:2f:23:6b:05:44:29:21:08:b4:3c:b6:
12:60:fb:b3:80:14:c6:e4:e5:1d:4b:9f:df:e0:8c:e1:fc:f9:
ee:9b:51:bb:1a:e5:62:aa:75:f7:73:c2:df:bc:7a:c8:23:c9:
98:b2:21:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:47 2024 by rpki-client on console-ams.rpki-client.org