Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/vujTYZBs8cLlF_40D5XZAcg44ps.roa
File: vujTYZBs8cLlF_40D5XZAcg44ps.roa (raw, json)
Hash identifier: 9ZjtisPSJCYgCxraS5t0Il0i/CtE1OD/JpjqIE6M9Gc=
Subject key identifier: BE:E8:D3:61:90:6C:F1:C2:E5:17:FE:34:0F:95:D9:01:C8:38:E2:9B
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 08EBE724
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/vujTYZBs8cLlF_40D5XZAcg44ps.roa
Signing time: Fri 18 Feb 2022 16:56:24 +0000
ROA not before: Fri 18 Feb 2022 16:56:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40065
IP address blocks: 46.232.112.0/21 maxlen: 24
46.232.124.0/22 maxlen: 24
46.232.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149677860 (0x8ebe724)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Feb 18 16:56:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bee8d361906cf1c2e517fe340f95d901c838e29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:71:59:93:11:f1:b1:1a:48:b1:93:73:4c:
be:c8:89:b9:b3:47:d1:3a:a0:e0:8c:af:d9:da:a4:
60:51:4b:ba:f2:bf:2d:68:b7:63:41:4e:a6:eb:b6:
22:16:5b:49:55:40:f2:b6:9f:b4:46:df:60:e5:ee:
1e:cf:ed:18:b2:fa:2a:21:47:da:1b:37:aa:65:a9:
fe:12:f6:63:8e:1a:04:d3:1d:fa:95:8c:5d:80:c4:
00:42:f7:48:d8:59:9e:51:43:08:1e:d1:6e:b8:d3:
a2:a6:1f:5c:12:1a:b3:bc:20:43:43:d1:53:c7:a8:
1a:b1:e7:72:cd:38:cc:f2:9e:3f:79:4a:fb:7c:9e:
19:84:dc:f8:05:24:0f:6d:5c:b6:b9:5e:34:e0:53:
04:6c:41:97:21:d2:5a:f7:83:33:f2:15:b0:3a:9a:
61:96:c2:43:39:8e:dd:bf:a2:80:21:86:ab:52:96:
d9:a7:d8:1f:26:4e:94:94:0f:c7:71:85:30:a2:83:
a6:c9:6d:26:58:76:90:c6:cb:1a:e6:f5:f6:6e:50:
64:60:7a:37:ff:d8:62:dd:7a:b4:94:b0:58:8a:a8:
68:1a:dd:ed:5d:f9:ed:42:66:d2:48:74:3e:24:93:
22:6e:80:8b:a2:6d:a0:fd:ce:84:c3:c1:94:fd:f2:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E8:D3:61:90:6C:F1:C2:E5:17:FE:34:0F:95:D9:01:C8:38:E2:9B
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/vujTYZBs8cLlF_40D5XZAcg44ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.16.0/22
46.232.112.0/21
46.232.124.0/22
Signature Algorithm: sha256WithRSAEncryption
08:6e:54:c2:74:25:b6:81:1c:29:33:40:4b:44:28:3e:b4:61:
99:7b:78:a8:d9:a0:52:12:db:00:52:23:c6:8f:8f:f7:f3:b5:
c2:fe:36:8b:1e:f5:85:91:df:20:ef:27:30:f8:fd:5b:1f:f7:
02:e8:aa:2c:0e:3f:3e:1b:42:8a:94:93:07:b4:6a:a6:bd:ca:
01:0c:b0:ed:4f:2e:aa:45:34:c9:b5:12:91:09:f0:ab:91:3e:
9d:a4:b1:7f:4b:4c:38:b4:fd:53:3f:92:e9:cc:c9:3c:b3:46:
77:5c:78:78:82:bc:5b:9d:1d:b7:90:e6:10:f5:f3:45:61:d0:
4b:e9:03:80:12:93:95:7d:44:67:3b:43:fc:14:97:a7:02:ea:
ad:fe:13:5f:06:e6:82:67:2a:ef:a6:ec:56:16:0e:9c:3a:f3:
20:04:a1:cc:03:e7:1a:87:9e:f2:1a:31:6f:d3:9a:37:60:98:
56:26:f3:52:e7:f5:8d:c9:db:1c:d2:a4:ba:1d:37:84:96:b1:
cc:b3:3d:81:48:02:77:1c:f9:f2:63:d9:e4:d4:13:ad:58:6a:
ad:53:03:1c:06:93:40:00:ac:ad:07:28:70:23:2f:59:c0:dd:
96:40:b4:91:2b:ba:96:35:8f:90:4d:eb:ed:7a:4c:e5:d5:ae:
40:df:b8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:29 2025 by rpki-client