Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TmMM0Ptnj8ggvAu_CltDbsVeEuA.roa
File: TmMM0Ptnj8ggvAu_CltDbsVeEuA.roa (raw, json)
Hash identifier: QBF0/ajYGvO0mWcVbiwG01qS4oHbpjCP/iJfl5DUcW8=
Subject key identifier: 4E:63:0C:D0:FB:67:8F:C8:20:BC:0B:BF:0A:5B:43:6E:C5:5E:12:E0
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0189F42F0028CF5161973A77A9F8DE17C20E
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TmMM0Ptnj8ggvAu_CltDbsVeEuA.roa
Signing time: Mon 14 Aug 2023 13:14:28 +0000
ROA not before: Mon 14 Aug 2023 13:14:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48024
IP address blocks: 46.232.56.0/21 maxlen: 24
46.3.96.0/22 maxlen: 24
46.3.100.0/24 maxlen: 24
46.3.102.0/24 maxlen: 24
46.3.104.0/22 maxlen: 24
46.3.103.0/24 maxlen: 24
46.3.0.0/22 maxlen: 24
46.3.108.0/22 maxlen: 24
46.232.48.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:2f:00:28:cf:51:61:97:3a:77:a9:f8:de:17:c2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Aug 14 13:14:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e630cd0fb678fc820bc0bbf0a5b436ec55e12e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:7c:3a:b2:c1:af:cc:9c:ed:f1:ae:98:99:
84:92:35:14:c9:04:48:e5:25:b5:1a:5c:1b:0b:b1:
ea:c2:bb:f6:52:0c:e9:87:62:77:57:aa:c9:d3:8b:
3d:ed:41:39:75:a4:09:84:01:f1:08:ad:c0:cf:0d:
19:a1:64:bd:67:89:83:e7:9c:72:e5:f8:a5:64:38:
90:e8:a8:45:15:f3:de:4f:d9:88:16:47:49:ca:88:
c4:4c:46:8c:70:46:3d:b9:33:6c:d1:12:90:af:06:
35:f5:ba:4a:f5:d6:5d:06:5a:7e:8e:4c:8c:64:1e:
b3:5e:95:63:d2:da:04:3e:31:ac:e6:77:99:d2:0c:
ed:77:62:76:64:30:18:f0:cf:16:42:f0:07:db:11:
bc:2f:42:e4:54:92:2b:07:c9:76:02:2c:fd:29:c8:
a0:8f:b1:c3:ae:4d:33:e7:46:57:af:b9:16:e7:7e:
08:a6:99:c9:2b:45:e6:f5:52:87:7d:cd:fb:aa:cd:
4f:cd:9a:0b:74:c6:3a:69:db:0a:c0:8d:6f:16:56:
ee:5d:77:09:ac:c4:e1:7f:12:e4:c1:a4:69:e8:8e:
50:e6:8d:99:e2:31:a1:99:1b:5e:88:2e:ff:af:04:
46:61:4c:c9:6f:e1:c1:8c:5a:a0:2c:c6:de:cb:92:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:63:0C:D0:FB:67:8F:C8:20:BC:0B:BF:0A:5B:43:6E:C5:5E:12:E0
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TmMM0Ptnj8ggvAu_CltDbsVeEuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/22
46.3.96.0-46.3.100.255
46.3.102.0-46.3.111.255
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
26:7b:6f:77:1a:34:a7:47:93:c7:76:5b:93:ed:8a:f3:b9:48:
f0:ed:03:be:2a:d3:d9:7c:ed:5b:8a:1e:15:bd:10:20:e1:3d:
b3:ac:8c:73:98:5d:33:92:db:3d:bb:af:d9:41:57:1d:5c:0e:
cf:2a:27:b5:93:b4:83:1c:04:24:8e:4d:af:03:4e:73:57:9b:
4c:75:bd:7f:31:00:c5:b9:23:17:3f:cf:b5:db:50:b2:41:62:
0e:0b:d1:c8:d9:8b:ef:74:67:51:11:09:1e:dc:91:6d:a9:9d:
2d:b5:8b:b1:66:ec:59:bf:35:12:75:43:4a:96:3d:5d:5e:39:
78:a7:b2:3b:3d:d6:24:30:6b:e6:6c:4f:8a:c9:5a:fa:de:90:
a6:20:71:b8:92:3e:ce:82:4f:b0:57:b6:cf:af:1b:a1:17:75:
95:18:bc:c3:79:c2:d7:9b:7f:bf:94:9b:c4:c2:b3:3d:bf:54:
e7:f6:6b:5e:12:98:4d:4f:86:c8:91:59:49:d6:92:24:cd:f4:
c2:3c:6d:b6:cf:81:82:58:64:a7:93:a4:d1:4a:d5:43:d3:4b:
3b:93:b3:56:c0:3a:2e:2a:fe:3a:12:ae:f6:81:e4:32:1e:a3:
65:a4:0d:71:67:8c:ea:1e:ad:4a:97:0e:4b:05:68:1a:3b:15:
bb:25:e1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:03 2025 by rpki-client