Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Kpq94jA8jHPOuctkVVerQtoJup8.roa
File: Kpq94jA8jHPOuctkVVerQtoJup8.roa (raw, json)
Hash identifier: cPvFYpdbRd9PSnnP8qYnLrDvx/0LOs+0NwSkqaQnhgE=
Subject key identifier: 2A:9A:BD:E2:30:3C:8C:73:CE:B9:CB:64:55:57:AB:42:DA:09:BA:9F
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 096B9F5B
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Kpq94jA8jHPOuctkVVerQtoJup8.roa
Signing time: Wed 06 Apr 2022 16:50:03 +0000
ROA not before: Wed 06 Apr 2022 16:50:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 46.232.72.0/21 maxlen: 24
46.232.80.0/20 maxlen: 22
46.232.96.0/20 maxlen: 24
46.3.208.0/21 maxlen: 21
46.232.112.0/20 maxlen: 22
149.126.192.0/18 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158048091 (0x96b9f5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Apr 6 16:50:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a9abde2303c8c73ceb9cb645557ab42da09ba9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:46:25:bf:ba:39:85:27:1f:7e:fe:67:47:23:
ba:28:5d:4c:e8:db:8a:58:25:3d:95:ca:15:d2:ef:
80:11:fc:d0:da:27:63:40:33:7b:aa:f6:09:fa:26:
b7:f3:00:1c:ed:01:d6:81:97:62:cf:f5:e0:1c:d9:
d6:94:e7:d9:f3:93:f8:58:ce:09:2f:c0:5a:98:9d:
26:c1:89:de:6b:45:6b:4d:d4:3a:bd:a7:40:57:33:
42:00:a7:f3:70:2c:84:32:f4:e5:65:60:08:14:02:
50:bb:75:ae:da:af:3d:82:9c:3a:cf:22:9e:60:1f:
c0:10:3e:a6:ef:3b:f0:16:4f:e2:5a:ff:2d:bc:a0:
21:9a:7d:2f:82:e4:3c:d2:da:3e:13:62:bb:4b:3d:
b0:4e:1a:59:8a:91:b2:1e:c1:e4:ea:05:5e:d2:a1:
dd:19:ad:8d:94:41:9d:7f:75:f5:43:00:a7:20:cc:
19:6b:c1:6f:cc:fa:d5:b9:db:87:fa:3f:35:d7:79:
56:38:60:1a:85:70:b4:cb:a4:e5:fd:1a:2d:e3:f7:
4e:ca:6f:d6:b6:b7:eb:52:5d:1f:5b:26:49:fe:74:
56:e8:ed:eb:03:9c:40:e3:58:4a:6d:27:d2:09:b8:
74:ab:ee:76:f9:60:e6:50:52:ef:e7:2f:d5:6b:9c:
ac:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9A:BD:E2:30:3C:8C:73:CE:B9:CB:64:55:57:AB:42:DA:09:BA:9F
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Kpq94jA8jHPOuctkVVerQtoJup8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.208.0/21
46.232.72.0-46.232.127.255
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
81:b7:ff:05:78:d8:b3:af:62:d1:74:51:a8:7d:ec:d2:b0:78:
86:aa:3d:1e:4d:50:18:78:aa:6e:79:23:16:ab:8f:61:52:48:
93:5a:47:dc:dd:e7:4d:e8:df:aa:01:9a:ab:e2:52:8a:6d:13:
97:72:20:9a:51:1f:d9:e9:ca:ed:2d:fd:d0:cf:9c:78:67:be:
59:6b:f1:9e:42:ac:f0:33:19:2c:66:b7:96:c0:a8:8f:ae:ff:
72:30:4b:9e:ad:27:53:61:56:b5:9a:64:e5:b0:61:12:01:c7:
fc:4c:77:e8:17:b9:8d:7c:0e:41:05:ac:b1:8a:85:db:11:1b:
aa:d9:2c:d5:a0:8d:5a:d3:42:30:fe:f1:a6:8c:55:b0:c7:30:
cb:97:ca:1c:ac:8e:07:75:93:ed:02:47:6e:8c:0c:bb:e9:e1:
e2:e0:2f:65:90:e9:6b:8f:20:5e:ab:42:03:fc:33:56:fb:6d:
d2:08:32:5e:6d:97:17:8a:e8:da:7b:61:5d:ec:56:21:37:fa:
d4:15:34:b6:41:ba:d6:98:6e:56:13:32:87:e5:55:06:ea:f0:
2f:3d:2c:27:6c:29:78:e3:09:1d:da:7e:8b:9f:a3:62:e2:30:
bc:61:f8:74:0a:1f:fa:41:c6:17:37:f3:d3:be:dd:ed:d0:84:
4e:cb:0c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:43 2025 by rpki-client