Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/lHm6mJK4xJNRNrlzCvdQ2EXU-BU.roa
File: lHm6mJK4xJNRNrlzCvdQ2EXU-BU.roa (raw, json)
Hash identifier: 28opD7H70fQc6d/ZR4mFxxnAXeAut0p/YvgqSqd+gqo=
Subject key identifier: 94:79:BA:98:92:B8:C4:93:51:36:B9:73:0A:F7:50:D8:45:D4:F8:15
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 387D475F
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/lHm6mJK4xJNRNrlzCvdQ2EXU-BU.roa
Signing time: Sat 01 Jan 2022 05:54:16 +0000
ROA not before: Sat 01 Jan 2022 05:54:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 46.19.201.0/24 maxlen: 24
46.19.207.0/24 maxlen: 24
185.176.116.0/24 maxlen: 24
185.176.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947734367 (0x387d475f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 05:54:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9479ba9892b8c4935136b9730af750d845d4f815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:76:56:f8:8f:3a:13:19:5c:9e:d4:d0:13:
24:68:e1:07:27:14:aa:a3:c0:5e:3a:45:cd:7e:8e:
7f:7e:57:79:4a:04:1f:5c:a8:05:5c:85:d7:cc:c2:
b8:9f:81:51:56:2d:7c:b0:1a:df:29:2f:d9:8c:ee:
7f:10:8a:35:e7:dd:c9:a0:b2:15:51:00:0a:27:22:
fb:3f:38:58:6f:4c:93:c0:d0:ec:c9:f2:68:7a:4d:
81:7c:65:ad:35:db:2a:41:4e:e4:3a:fa:fa:b0:34:
eb:a8:44:9b:90:8b:b5:c0:2f:e9:c4:1d:57:c8:b8:
ef:04:cd:60:10:17:c2:ac:3b:95:5c:85:78:35:a2:
90:1b:0f:88:42:bf:d9:44:70:25:8a:b4:aa:50:b1:
66:31:c2:0f:33:28:35:b4:53:27:94:9f:f7:6f:2c:
d1:46:3f:85:af:e3:ac:b3:51:1f:3a:95:33:93:cf:
80:c7:80:af:ba:53:2c:ed:39:a5:ed:51:62:99:a6:
4e:00:78:fe:af:58:a6:ec:30:c7:fb:87:ac:ff:7b:
2d:db:8f:87:b7:86:5f:12:08:7f:12:50:25:7f:d4:
df:56:fd:c8:3b:52:ee:ad:b5:ab:50:47:a5:61:fa:
4d:76:4a:04:98:50:0c:1c:e7:8f:f1:f9:78:e7:61:
bd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:79:BA:98:92:B8:C4:93:51:36:B9:73:0A:F7:50:D8:45:D4:F8:15
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/lHm6mJK4xJNRNrlzCvdQ2EXU-BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.201.0/24
46.19.207.0/24
185.176.116.0/24
185.176.119.0/24
Signature Algorithm: sha256WithRSAEncryption
92:7c:ec:c5:81:24:b4:44:6d:f5:6a:89:9c:87:a6:d7:02:6e:
22:e1:79:84:72:1a:76:97:1f:a8:33:24:90:6d:a5:39:af:5e:
5f:53:8c:ad:61:5e:74:ab:73:60:b5:62:bf:24:21:82:c5:b7:
8d:b6:2e:b0:c2:db:e3:0d:82:df:31:02:ce:ed:8d:3b:99:6f:
8c:2a:90:97:d9:46:1b:bb:08:86:f4:98:21:80:01:7e:90:4b:
44:59:8e:3f:7e:8b:7a:60:d8:d8:37:98:bf:a6:11:27:81:d2:
6d:e8:3e:56:aa:4f:b4:4e:2f:3c:87:14:62:c5:73:05:9f:bb:
03:be:13:8e:17:f8:d8:ef:4e:e6:9b:1e:af:6b:8d:35:e6:55:
93:c4:14:42:c0:d1:ed:e5:25:75:f8:0b:41:81:b0:1b:27:d3:
f3:c5:fc:52:59:49:97:86:cb:ac:b9:70:7b:c1:f7:64:f3:0e:
5d:b6:ff:3a:0d:7f:3a:44:f1:fc:0d:fd:13:42:f3:57:af:d5:
9e:73:69:8c:7a:47:16:46:e4:87:c2:9c:7e:bf:36:45:bf:c1:
8a:c6:70:a0:14:4e:0e:ee:82:8d:f9:b7:c0:b4:6f:7b:31:96:
33:00:61:f8:4b:91:0f:42:e7:a5:17:b1:86:54:56:59:1d:2e:
82:99:33:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:46 2023 by rpki-client on console-fra.rpki-client.org