Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/zqDJTl7ORTiGG60iffnwoPpfCKE.roa
File: zqDJTl7ORTiGG60iffnwoPpfCKE.roa (raw, json)
Hash identifier: xUtaL4uWuKRnw7EiFTNjni1J2gyEfRbLzCbZghG1DcI=
Subject key identifier: CE:A0:C9:4E:5E:CE:45:38:86:1B:AD:22:7D:F9:F0:A0:FA:5F:08:A1
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018571955C3578EF84880C23BF192704C54F
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/zqDJTl7ORTiGG60iffnwoPpfCKE.roa
Signing time: Mon 02 Jan 2023 08:24:51 +0000
ROA not before: Mon 02 Jan 2023 08:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47553
IP address blocks: 46.232.56.0/21 maxlen: 24
46.232.48.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:5c:35:78:ef:84:88:0c:23:bf:19:27:04:c5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cea0c94e5ece4538861bad227df9f0a0fa5f08a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:ad:15:89:1d:7d:38:9f:a1:f3:61:7d:0f:
22:98:22:a7:28:5e:41:56:84:87:2d:1d:63:12:a0:
3c:18:c2:a0:73:18:a3:d9:60:ca:68:2c:8c:86:ac:
b6:cb:d2:e7:dd:1f:53:53:42:9b:f2:9c:84:2c:af:
17:7b:87:97:64:4b:24:b3:aa:df:24:be:0d:01:25:
ef:28:87:2b:29:59:50:6f:d2:6f:ee:01:cb:6c:e2:
d8:2e:fc:35:02:12:dd:37:9f:9b:98:e1:ad:0f:f2:
1e:73:ba:f9:b3:27:e8:3d:c2:88:95:32:57:91:ba:
f6:a3:80:c3:2b:4a:4f:85:7b:78:c7:33:53:48:21:
6c:aa:0a:e1:9c:5f:7f:d1:b5:93:56:f2:83:48:23:
47:b2:b2:03:2c:98:d5:18:80:a0:57:b8:ba:aa:b2:
9c:36:4a:4c:e0:fc:80:c2:d5:2f:d0:39:3f:c4:44:
36:19:14:65:3f:be:38:ad:47:f6:0a:94:50:29:ea:
96:05:36:57:42:49:94:2d:89:45:b1:4d:e9:81:6e:
18:52:8d:44:1b:52:d5:90:d2:e1:17:78:70:c8:23:
fb:ac:d1:ac:bc:b3:21:54:bd:52:2d:4b:b6:0c:d7:
82:21:0c:81:14:3e:1f:a4:99:c0:18:90:d4:dc:8b:
7c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A0:C9:4E:5E:CE:45:38:86:1B:AD:22:7D:F9:F0:A0:FA:5F:08:A1
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/zqDJTl7ORTiGG60iffnwoPpfCKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:8f:57:20:40:80:f8:93:4d:ac:e5:d8:0c:59:83:7b:21:53:
8d:28:b4:1f:45:36:8b:a6:2d:47:af:a8:cd:89:28:2b:48:1c:
70:61:36:93:7c:b5:bd:ee:11:47:ad:d1:82:f0:ac:ad:6d:47:
95:20:fd:ba:bd:56:d6:3a:68:1f:14:fc:c3:16:f4:3d:9d:10:
79:1b:e4:23:db:3a:9d:d9:94:80:fd:69:ba:51:68:07:df:03:
ea:98:c8:8e:e6:9d:92:6f:b5:9b:77:7d:5d:ff:dc:af:b3:8f:
6b:bf:16:66:2e:8f:9a:11:8b:06:c7:05:a2:fb:2b:cb:a5:33:
9d:9b:7c:41:3b:f3:4a:f2:ea:91:74:92:ff:53:9f:a3:4f:a9:
73:ef:40:02:2b:63:a9:a6:0d:e9:b1:e3:fa:2b:38:47:3d:4d:
39:ef:95:af:a4:c4:e1:43:f2:b2:01:4a:51:c6:79:b7:5f:05:
f8:f2:87:2d:78:7a:0c:bc:92:6c:3c:9e:46:be:b0:1a:a7:89:
54:ca:32:d8:6d:ef:d9:a2:bb:55:cf:45:11:24:b7:35:3b:df:
1f:f1:df:7b:8d:cb:cc:ee:08:4c:a6:99:72:52:96:e9:a2:c9:
48:4b:e5:64:ba:04:bc:4b:dd:32:71:89:4a:f8:cf:48:92:ed:
50:ed:59:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:03 2025 by rpki-client