Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/qNX2bh0Qim1Z4m-4dYbKTIQq8K8.roa
File: qNX2bh0Qim1Z4m-4dYbKTIQq8K8.roa (raw, json)
Hash identifier: RafFBIqit5TjDfoo0rqV7mFRUXXceYDFCQ71huJLgDQ=
Subject key identifier: A8:D5:F6:6E:1D:10:8A:6D:59:E2:6F:B8:75:86:CA:4C:84:2A:F0:AF
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 03B63302
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/qNX2bh0Qim1Z4m-4dYbKTIQq8K8.roa
Signing time: Sat 01 Jan 2022 16:03:29 +0000
ROA not before: Sat 01 Jan 2022 16:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51788
IP address blocks: 46.148.32.0/24 maxlen: 24
46.148.37.0/24 maxlen: 24
46.148.33.0/24 maxlen: 24
46.148.34.0/24 maxlen: 24
46.148.42.0/24 maxlen: 24
46.148.40.0/24 maxlen: 24
46.148.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62272258 (0x3b63302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Jan 1 16:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8d5f66e1d108a6d59e26fb87586ca4c842af0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:74:5d:f6:b2:8b:06:69:d5:70:b4:b5:53:1c:
e7:57:8d:66:83:d6:2f:68:7a:52:1b:3a:58:52:d0:
f9:fe:67:9d:de:f3:da:1c:71:e2:c8:06:1f:54:91:
1d:f0:62:c5:04:bd:2d:33:e8:a5:60:ae:72:6d:5b:
cb:ee:d5:77:2a:a4:da:bb:9a:5f:9a:94:df:56:da:
30:8c:b3:a5:a4:ab:40:0b:5e:2e:8a:97:b0:ad:3a:
21:46:33:d4:28:d9:dc:8c:e4:91:bd:7d:ed:8f:ec:
7c:bd:49:b0:c8:1d:4d:42:6a:dd:11:84:1d:db:41:
df:65:41:ba:d1:be:07:fe:f7:43:8b:ea:ef:24:03:
da:63:68:10:ea:c7:60:f8:a0:f5:30:9e:38:67:d7:
32:b3:46:c3:b2:e0:e9:b9:0d:4e:93:6d:28:9c:d2:
27:81:96:78:28:f2:10:9c:e2:5d:f8:ed:eb:85:42:
9c:da:4a:ef:18:6c:bb:2a:c9:b9:48:d4:e7:d3:32:
c8:3d:48:89:0c:6b:c3:e7:0b:a4:b7:64:ab:f5:7a:
be:c6:a6:88:41:7f:30:71:34:b5:e2:c4:34:b9:5d:
ea:08:43:7a:86:1d:a5:ff:a7:72:cc:6b:8e:65:bc:
4f:b2:00:dd:ea:f9:94:e2:bc:29:b6:48:fc:06:00:
5d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D5:F6:6E:1D:10:8A:6D:59:E2:6F:B8:75:86:CA:4C:84:2A:F0:AF
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/qNX2bh0Qim1Z4m-4dYbKTIQq8K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.32.0-46.148.34.255
46.148.37.0/24
46.148.40.0/24
46.148.42.0/24
46.148.47.0/24
Signature Algorithm: sha256WithRSAEncryption
69:de:d9:0b:1f:48:36:fc:95:2c:03:c0:55:87:46:53:fe:ae:
c3:62:a4:37:0e:6d:7f:fc:46:f6:85:1d:03:99:af:b4:8f:d8:
50:fb:80:97:9d:c3:5a:f6:75:5a:5a:33:d2:11:c5:38:f0:36:
50:4a:c7:55:cf:93:99:0c:45:6f:b1:da:c8:49:d0:58:3b:46:
6f:bb:30:18:1d:5b:8a:57:62:a6:13:60:c5:75:1a:10:15:74:
d2:c9:9c:4e:76:f1:89:3f:3e:e8:54:65:ce:ed:b7:73:ac:30:
3e:05:0e:c9:62:c6:19:db:f0:50:4b:d2:89:23:85:3f:08:d1:
8f:97:23:a4:ac:13:5b:ae:68:f3:6e:e0:b5:82:a3:0b:66:2d:
f4:6e:69:f5:f5:e1:59:43:24:a3:8f:91:07:db:80:bf:fb:d3:
d1:59:c9:81:fb:bc:fc:a9:8e:ff:b1:1b:8f:56:5d:87:a0:65:
d0:e2:5d:f7:a5:99:e2:4f:76:22:2f:9b:45:6d:f7:ee:db:a1:
e1:d5:69:8f:47:3f:9f:ba:a8:d1:c4:f8:45:b4:ff:9e:f8:c3:
8b:aa:c3:93:31:af:b1:2e:9d:2a:51:50:cc:9f:d8:86:5f:c2:
ed:6b:de:87:73:92:5d:f9:44:5e:ba:d5:11:fb:1a:93:0c:93:
49:a9:68:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:21 2024 by rpki-client on console-fra.rpki-client.org