Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/whI5Ioe3cAFuyu5m3XgVY_7UqhY.roa
File: whI5Ioe3cAFuyu5m3XgVY_7UqhY.roa (raw, json)
Hash identifier: FvfMTseAHXYBIsNU3b4HQQ3bhZ+ZomZbNPoxPLGckxw=
Subject key identifier: C2:12:39:22:87:B7:70:01:6E:CA:EE:66:DD:78:15:63:FE:D4:AA:16
Certificate issuer: /CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Certificate serial: 03B50AF8
Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/whI5Ioe3cAFuyu5m3XgVY_7UqhY.roa
Signing time: Sat 01 Jan 2022 06:02:57 +0000
ROA not before: Sat 01 Jan 2022 06:02:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51764
IP address blocks: 46.235.49.0/24 maxlen: 24
46.235.50.0/24 maxlen: 24
46.235.51.0/24 maxlen: 24
46.235.48.0/24 maxlen: 24
46.235.54.0/24 maxlen: 24
46.235.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62196472 (0x3b50af8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Validity
Not Before: Jan 1 06:02:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c212392287b770016ecaee66dd781563fed4aa16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:54:d3:29:e1:03:5e:a6:a3:8c:b5:b9:87:46:
2e:c3:94:cc:ba:9b:8d:70:58:69:3c:d1:40:66:e4:
c8:84:05:4a:c8:84:90:ea:99:19:cc:2a:a4:69:2e:
72:e4:34:c6:fb:ff:54:9b:ad:d3:35:a1:41:1f:a0:
75:f1:d9:ee:e5:f8:fd:95:57:95:c3:0b:b2:bc:28:
76:45:3e:0f:d4:da:ba:d5:d2:ef:10:2b:04:3c:bb:
b5:69:0e:75:75:53:45:2b:87:1e:96:da:7d:54:b8:
99:22:92:db:61:31:26:c2:1c:a4:dd:ca:19:8b:81:
8f:36:ab:65:c9:b0:4c:1d:6f:c8:8d:1f:1b:21:9a:
0e:d8:48:e0:9d:95:a9:e6:0c:e9:b9:aa:7e:ef:21:
78:4a:f0:41:2e:6d:1d:89:1b:e0:86:84:0b:ac:4f:
a4:f7:e8:48:b5:ec:cc:28:58:07:7e:f7:52:07:1e:
dc:6f:1a:43:c1:94:79:06:fc:37:92:9c:da:a8:21:
d6:61:9c:3f:a3:34:d0:40:ef:8e:a3:08:8d:32:92:
70:22:7b:98:f2:ff:15:6f:35:b9:e6:83:7a:c2:7b:
7c:1d:77:6d:04:73:99:a7:bc:5a:0d:05:5f:89:72:
47:fb:cc:6e:0e:c7:52:dc:dd:53:58:69:a3:e6:ce:
7f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:12:39:22:87:B7:70:01:6E:CA:EE:66:DD:78:15:63:FE:D4:AA:16
X509v3 Authority Key Identifier:
keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/whI5Ioe3cAFuyu5m3XgVY_7UqhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.48.0/22
46.235.54.0/23
Signature Algorithm: sha256WithRSAEncryption
23:1b:83:f0:8d:81:52:45:01:25:14:d4:80:37:c3:42:94:cf:
94:2b:87:f7:e1:45:65:f6:0d:ad:27:cc:bc:43:27:5d:a7:b8:
9d:f7:4c:9a:1b:9a:93:00:6d:93:46:ff:16:99:a1:f7:70:b5:
75:a3:5f:11:09:3d:b2:9b:21:fe:3a:1d:82:74:0b:d5:c3:2b:
05:c6:b5:a6:a9:05:55:7d:18:29:e3:f8:66:e4:3f:be:b9:91:
cb:8a:5a:ad:b8:e6:70:f2:ca:e0:e6:77:25:96:1f:7a:d0:b5:
47:a1:ae:99:26:e9:9e:85:70:ed:e6:9c:d2:b4:56:d5:b6:75:
ed:02:6e:40:6a:c0:94:84:cb:61:f5:44:bb:9f:be:d2:aa:f0:
a4:81:1f:85:57:15:18:6d:ba:f2:2e:a6:a9:a2:d9:de:5b:e3:
47:74:21:b4:14:a9:6b:a1:f2:6a:5a:9e:a2:61:46:22:e5:86:
c9:82:3d:ad:2c:ba:db:8f:a4:66:5c:e9:20:f4:83:20:6f:88:
45:00:33:19:15:6f:08:96:67:b7:0e:49:be:87:e0:82:94:2a:
d5:25:1f:91:3e:e5:ca:53:52:1a:60:66:e0:1e:39:eb:4b:ab:
5f:f2:1f:55:c5:16:08:08:66:76:ed:01:c9:25:cd:7c:52:6f:
a7:ab:d9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:03 2024 by rpki-client on console-fra.rpki-client.org