Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/3jcCtcBQgBBjFIjx4GV0AyJqjgU.roa
File: 3jcCtcBQgBBjFIjx4GV0AyJqjgU.roa (raw, json)
Hash identifier: UOw4mGuwYIRphVWrd9CKLa2V/p0Q+TuyDSQdwgaUI7A=
Subject key identifier: DE:37:02:B5:C0:50:80:10:63:14:88:F1:E0:65:74:03:22:6A:8E:05
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 34D58C47
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/3jcCtcBQgBBjFIjx4GV0AyJqjgU.roa
Signing time: Sat 01 Jan 2022 05:52:28 +0000
ROA not before: Sat 01 Jan 2022 05:52:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49463
IP address blocks: 46.21.112.0/24 maxlen: 24
46.21.114.0/24 maxlen: 24
46.21.116.0/24 maxlen: 24
46.21.112.0/20 maxlen: 24
46.21.127.0/24 maxlen: 24
185.7.160.0/22 maxlen: 24
31.216.16.0/20 maxlen: 24
5.179.120.0/21 maxlen: 24
2a02:27d0::/32 maxlen: 48
2a02:27d0:1671::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886410311 (0x34d58c47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Jan 1 05:52:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de3702b5c0508010631488f1e0657403226a8e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b8:45:6c:a9:0e:76:bc:ae:39:de:31:01:62:
d1:ed:1b:15:d9:7c:3c:30:6b:ac:e9:90:39:f6:e4:
d2:2d:88:e1:e2:01:e5:f7:42:fe:33:0d:92:e4:04:
0f:b9:35:65:03:9c:54:20:39:3a:e4:9d:5f:5c:64:
fe:f6:2b:52:93:e0:87:64:5b:62:4c:cf:ec:6a:03:
54:8a:46:d2:cc:f7:cd:fc:ff:9f:43:ba:ec:fc:67:
ea:de:d9:70:f9:73:fc:ab:ef:6c:66:c7:7d:26:85:
1a:56:9f:b0:f1:46:63:ff:77:d3:e7:63:f3:5c:49:
22:ef:14:a3:6d:d0:4a:04:e7:75:9b:bc:c5:92:f4:
a1:3b:b5:b6:e4:93:de:b1:f3:db:7f:b7:ad:25:f4:
62:1a:27:f6:ec:51:1f:7c:ff:c9:b2:88:ef:58:93:
13:70:21:2d:95:4b:55:cf:87:83:56:59:2e:3d:fa:
d8:59:4d:c8:de:b4:4f:49:4c:f5:aa:53:a8:4b:a8:
93:80:96:46:13:e4:3c:d7:96:d6:19:2a:58:db:cc:
98:89:12:b0:1b:05:45:cd:51:e8:30:cb:35:eb:b0:
3c:ce:2b:10:d4:ab:dc:47:4f:9f:69:2d:b7:93:05:
ea:4a:ed:38:97:8b:c0:51:20:56:fd:e1:5b:6e:37:
d8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:37:02:B5:C0:50:80:10:63:14:88:F1:E0:65:74:03:22:6A:8E:05
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/3jcCtcBQgBBjFIjx4GV0AyJqjgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.179.120.0/21
31.216.16.0/20
46.21.112.0/20
185.7.160.0/22
IPv6:
2a02:27d0::/32
Signature Algorithm: sha256WithRSAEncryption
50:a5:f3:3e:bd:02:7c:0e:4c:0b:4c:a0:e9:88:ab:8f:ea:a3:
d9:92:6b:90:d7:7f:36:de:c4:1f:29:4e:34:93:c9:f4:b2:6b:
16:ef:d4:5c:88:b9:13:a1:36:68:c4:c0:c3:02:47:2e:1a:2e:
2e:e9:6b:01:af:59:ea:37:c2:c0:c6:d5:6f:13:f7:01:42:20:
e8:b4:76:fa:c1:83:a4:a7:8a:e0:88:dc:32:18:58:d6:ad:a4:
4f:c5:a6:4e:79:a1:82:31:74:f8:2d:7a:aa:13:09:89:17:1c:
b2:3f:36:9c:52:56:d1:aa:01:52:50:0f:73:f5:fe:fe:f8:b9:
99:ca:5a:51:ce:79:22:b0:57:ae:ac:1f:85:46:55:42:5a:c3:
32:db:75:d8:c6:3e:3f:1a:db:f2:79:a5:52:82:6f:a6:b5:b8:
be:de:ad:c9:cb:15:d4:67:93:52:d7:cb:4e:7c:b7:94:70:17:
a3:08:de:9a:5c:12:ef:dc:e6:ea:3d:75:c4:1b:b5:a3:0a:11:
04:c2:3f:ce:97:21:a0:fb:cc:5f:ea:a5:4e:ce:18:06:51:e6:
b7:8b:97:58:2c:ed:6f:b1:1c:3e:b6:1a:f7:c7:92:f4:ee:6b:
a4:46:6a:a1:00:4a:42:75:62:b2:09:5a:94:62:10:a0:e8:49:
d5:03:71:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:36 2024 by rpki-client on console-fra.rpki-client.org