Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/M46yWd1779GhjXuhx1kph6LG1gE.roa
File: M46yWd1779GhjXuhx1kph6LG1gE.roa (raw, json)
Hash identifier: dzN4DvLb0ZZdIxuMeOPoyevtUfVRUdxDPmA4z0kzqaU=
Subject key identifier: 33:8E:B2:59:DD:7B:EF:D1:A1:8D:7B:A1:C7:59:29:87:A2:C6:D6:01
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0183F4D793CB9FA7A5113A919E9A2F1AB494
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/M46yWd1779GhjXuhx1kph6LG1gE.roa
Signing time: Thu 20 Oct 2022 10:01:52 +0000
ROA not before: Thu 20 Oct 2022 10:01:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142578
IP address blocks: 62.60.224.0/19 maxlen: 24
213.176.76.0/22 maxlen: 24
213.176.80.0/21 maxlen: 24
213.176.96.0/20 maxlen: 24
213.176.8.0/21 maxlen: 24
213.176.16.0/22 maxlen: 24
213.176.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:d7:93:cb:9f:a7:a5:11:3a:91:9e:9a:2f:1a:b4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 20 10:01:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=338eb259dd7befd1a18d7ba1c7592987a2c6d601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:e7:72:fb:b4:11:46:f3:9e:b1:02:08:0b:
c9:06:8c:b9:f6:55:b8:3b:a6:76:a0:4e:a0:8c:b1:
99:68:35:71:8b:b1:8b:62:22:0b:58:d9:bd:ca:44:
5a:19:8d:65:3d:cc:87:88:bc:90:01:c2:63:6a:57:
a6:66:b3:6c:dc:46:bd:36:01:fb:6b:8a:1e:d8:33:
55:c3:da:4c:5c:a6:0d:a8:2d:05:a7:2a:5a:a6:00:
82:d5:3a:f5:36:ee:86:05:71:50:27:d2:8f:6f:53:
bb:a7:41:01:7b:12:1f:2a:53:6d:78:c6:2a:9e:46:
43:ee:6b:a1:30:93:47:2f:1a:da:da:9c:e7:41:a8:
b7:0a:c5:a5:ad:67:66:1c:51:a2:3f:34:3c:50:96:
30:34:3b:73:c6:0e:01:ce:7e:f3:20:0a:be:74:23:
94:c9:95:91:26:f9:9d:e4:08:46:cd:ef:d9:33:cd:
e8:c6:ac:4f:03:0e:4d:db:3f:44:81:5c:7d:43:4e:
8b:f1:ae:b5:c4:8e:29:9e:fd:1f:91:a9:a2:ea:50:
48:87:05:76:75:f0:48:09:f3:97:b8:76:11:cf:0b:
c0:ff:5b:ce:12:47:5c:bd:77:27:15:10:23:c6:45:
04:ed:56:72:66:ec:46:19:5b:44:97:09:7f:de:29:
a5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8E:B2:59:DD:7B:EF:D1:A1:8D:7B:A1:C7:59:29:87:A2:C6:D6:01
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/M46yWd1779GhjXuhx1kph6LG1gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.224.0/19
213.176.8.0-213.176.19.255
213.176.32.0/19
213.176.76.0-213.176.87.255
213.176.96.0/20
Signature Algorithm: sha256WithRSAEncryption
09:12:01:9a:65:9a:3a:e4:22:ee:59:d3:10:2d:5d:15:c4:8f:
dd:eb:51:22:49:eb:b5:f8:2e:87:cb:38:f6:e8:a7:89:eb:af:
4f:34:33:2e:f4:bc:d2:6a:d9:f2:ad:5f:9c:6e:f5:bf:9d:0d:
36:19:b5:24:46:1e:b7:0d:f5:8e:11:31:14:c1:45:d1:68:46:
b7:a7:89:0a:44:ca:40:d9:1d:0a:ba:12:df:5d:3b:f0:aa:6d:
61:6c:2c:bd:3d:a9:95:3e:f2:6b:86:57:a4:93:c3:fb:92:8b:
a8:25:9c:28:71:09:ab:79:e5:91:6a:ef:e9:b5:24:64:72:3f:
f3:b6:6f:6e:fb:1d:09:08:cf:e4:b5:f8:fd:fe:dd:ad:92:5f:
11:9f:08:70:fe:ec:ce:1e:d4:e4:8e:04:96:13:6b:6a:aa:09:
c9:49:62:b6:2e:40:14:a4:cc:c3:de:4b:58:be:42:28:55:ff:
a8:b9:8b:51:7b:3f:8e:00:e3:7c:c8:4a:fc:ed:5e:62:67:61:
0d:74:b8:e0:73:f1:24:be:18:86:55:f7:e5:45:d8:61:94:22:
54:2e:2c:84:3e:a9:81:d0:c4:2c:4e:46:cc:67:ca:f6:ee:23:
0b:1a:59:e4:78:1f:1f:d3:d0:22:0c:77:2a:e6:8a:1f:02:c8:
01:46:77:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org