Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/OnlenPdxPijHEkYGYkkeFeVAVkw.roa
File: OnlenPdxPijHEkYGYkkeFeVAVkw.roa (raw, json)
Hash identifier: 2dwRDLtR27lZEi3DKjnfzIOez7UqdXTOH1/n/+Mj08s=
Subject key identifier: 3A:79:5E:9C:F7:71:3E:28:C7:12:46:06:62:49:1E:15:E5:40:56:4C
Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial: 09DC4660
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/OnlenPdxPijHEkYGYkkeFeVAVkw.roa
Signing time: Sat 01 Jan 2022 13:07:31 +0000
ROA not before: Sat 01 Jan 2022 13:07:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50297
IP address blocks: 46.148.16.0/24 maxlen: 24
46.148.17.0/24 maxlen: 24
46.148.22.0/24 maxlen: 24
46.148.19.0/24 maxlen: 24
46.148.20.0/24 maxlen: 24
46.148.21.0/24 maxlen: 24
46.148.18.0/24 maxlen: 24
46.148.26.0/24 maxlen: 24
46.148.27.0/24 maxlen: 24
46.148.28.0/24 maxlen: 24
193.106.28.0/22 maxlen: 22
2001:67c:28f8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165430880 (0x9dc4660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Validity
Not Before: Jan 1 13:07:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a795e9cf7713e28c712460662491e15e540564c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:c8:3a:32:75:85:c5:a1:84:a0:98:00:a0:
70:96:80:ec:a9:9a:87:b9:6b:aa:b4:17:59:bc:6d:
16:ba:b3:7b:2a:d1:bf:4b:64:55:5d:d7:7e:d5:f7:
3c:c5:53:12:99:61:0b:b7:91:f4:39:55:22:11:a0:
44:a0:81:49:b6:69:43:dd:a2:25:d8:8e:af:98:13:
1e:a3:17:7c:b5:c8:ad:23:25:29:88:b3:ba:5e:6a:
a0:9d:4f:da:48:5a:b1:7a:6a:a5:a4:40:71:95:ea:
84:e2:62:34:c2:bb:84:12:f8:ba:e4:d0:85:43:74:
0f:19:5d:16:b9:7e:ea:0c:df:44:bd:ee:be:31:6c:
4c:bc:4f:b0:3b:99:59:f0:7a:1c:62:dc:3d:fc:64:
20:ad:ee:6e:7e:51:35:17:5d:3e:2f:aa:8a:a3:f3:
70:ba:29:3c:49:0a:82:b4:d9:ae:57:f6:cb:81:5c:
f7:f7:b1:f9:32:87:fd:3e:36:e4:6f:5f:9d:aa:05:
d1:06:84:96:83:c0:69:3e:44:44:ac:97:7a:06:66:
d8:09:9f:26:c5:4d:a6:08:81:ad:b7:1c:42:0b:e9:
fb:1d:de:d2:4c:72:15:55:b1:3b:45:b0:40:59:9b:
ba:0a:9f:27:d9:6e:74:af:e3:f4:6b:d7:cd:5b:5c:
77:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:79:5E:9C:F7:71:3E:28:C7:12:46:06:62:49:1E:15:E5:40:56:4C
X509v3 Authority Key Identifier:
keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/OnlenPdxPijHEkYGYkkeFeVAVkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.16.0-46.148.22.255
46.148.26.0-46.148.28.255
193.106.28.0/22
IPv6:
2001:67c:28f8::/48
Signature Algorithm: sha256WithRSAEncryption
13:e1:95:c0:4d:d1:a2:40:b6:58:7f:d5:b4:55:70:02:31:bb:
0f:cc:0b:72:de:af:b1:34:63:23:9a:af:e7:1e:51:b3:45:8d:
9f:d8:1d:a1:6f:34:af:ba:bd:ec:53:31:0e:78:80:61:79:8e:
21:13:61:24:82:3d:67:49:57:2f:14:42:a6:79:e7:93:f7:1f:
39:b4:0d:34:ef:53:b2:ab:c9:bd:59:08:f0:de:a7:0c:9b:00:
63:4f:ab:26:b8:cb:7f:8b:6c:fe:0d:04:12:dd:39:96:ae:b1:
98:cc:93:0e:21:59:94:4d:0a:7f:b1:fe:a5:a0:1b:fe:f7:30:
42:4d:9c:e2:26:ec:5e:fa:78:e5:db:1e:4a:0c:ce:d2:02:89:
ab:06:1e:d0:56:44:74:23:48:3c:ef:8a:15:1b:41:29:e8:da:
aa:d1:f6:22:d9:14:0b:2e:42:db:37:9f:f1:8f:b3:e4:a3:95:
da:9b:8b:1e:55:e0:8a:c5:54:60:2e:09:0d:37:24:24:61:68:
a7:f6:13:9f:95:9d:6b:c0:3b:45:44:52:ed:78:dc:e1:36:c7:
91:3d:1a:4e:de:73:bb:c7:0c:ba:dd:3b:a4:0b:98:b1:d4:39:
14:2c:9f:87:ef:dc:b1:df:6a:2e:62:7a:56:93:8c:0f:db:f4:
0e:01:cc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:19 2024 by rpki-client on console-ams.rpki-client.org