Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_FwwiOPICBSZnEIfr-Vgcr1Leeo.roa
File: _FwwiOPICBSZnEIfr-Vgcr1Leeo.roa (raw, json)
Hash identifier: +anIiZNDmtp1dXn6te11MLj53Vjj8YkE5DrRVYXYrNQ=
Subject key identifier: FC:5C:30:88:E3:C8:08:14:99:9C:42:1F:AF:E5:60:72:BD:4B:79:EA
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 48740701
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_FwwiOPICBSZnEIfr-Vgcr1Leeo.roa
Signing time: Sat 01 Jan 2022 03:00:34 +0000
ROA not before: Sat 01 Jan 2022 03:00:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62282
IP address blocks: 46.161.56.0/24 maxlen: 24
46.161.57.0/24 maxlen: 24
46.161.58.0/24 maxlen: 24
46.161.63.0/24 maxlen: 24
46.161.62.0/24 maxlen: 24
46.161.60.0/24 maxlen: 24
46.161.61.0/24 maxlen: 24
46.161.59.0/24 maxlen: 24
146.185.200.0/24 maxlen: 24
146.185.206.0/24 maxlen: 24
146.185.204.0/24 maxlen: 24
146.185.205.0/24 maxlen: 24
146.185.202.0/24 maxlen: 24
146.185.203.0/24 maxlen: 24
146.185.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215563521 (0x48740701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc5c3088e3c80814999c421fafe56072bd4b79ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:31:9e:23:89:cf:ee:ab:6f:cb:f0:8e:42:5f:
a1:40:a8:6e:bd:0a:8c:51:67:f9:2a:01:7d:a8:97:
3f:3e:90:24:4c:eb:68:55:22:51:0e:8d:25:51:ce:
de:9c:a0:48:0b:d8:e7:1c:75:35:27:5b:c4:01:2f:
aa:6c:9e:72:fc:3d:cd:45:09:8d:0d:d9:fd:db:a1:
ee:6c:fc:28:cd:2e:21:86:5c:10:34:5f:04:69:54:
d0:37:05:80:e4:a4:c0:b4:fa:f1:19:94:03:56:e9:
c4:ab:44:a5:5f:24:1c:06:f9:d1:b4:5d:6e:fd:6a:
dd:00:48:1e:58:fc:dd:bf:8a:53:7a:2f:04:b4:86:
2d:ab:92:e5:26:be:79:bf:de:bf:5d:f1:ad:0b:5c:
5c:ab:e5:15:cb:81:26:6a:ab:6b:92:19:11:10:a1:
00:29:12:81:3d:68:92:2e:10:95:65:c9:63:5b:ca:
87:d5:e4:96:e9:f3:8b:39:4e:36:6f:17:07:11:7e:
ef:0c:2f:28:8d:27:14:55:fb:a3:62:f2:1e:ac:bf:
0d:f1:fd:cc:16:e4:f7:c8:b7:22:1a:73:ad:32:cd:
cf:65:c5:9c:61:e1:be:c9:3a:57:e2:75:bc:98:03:
90:90:5e:c9:8b:f1:42:04:04:43:4d:7e:02:4f:6a:
3d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5C:30:88:E3:C8:08:14:99:9C:42:1F:AF:E5:60:72:BD:4B:79:EA
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_FwwiOPICBSZnEIfr-Vgcr1Leeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.56.0/21
146.185.200.0-146.185.206.255
Signature Algorithm: sha256WithRSAEncryption
75:51:d4:cc:fb:e2:30:09:c7:18:63:a2:a7:d1:95:de:f4:f8:
52:fb:f2:4a:ad:53:60:a4:e4:a9:5f:63:e5:f6:4b:57:45:79:
10:b8:0d:2c:ad:80:06:34:32:f5:9d:f4:a1:9f:20:a2:72:f7:
5a:93:cc:23:7a:09:73:fc:f8:11:7d:00:04:c5:e9:d1:60:e9:
6b:d7:6f:9b:fc:4c:e2:86:bc:c3:63:6d:fd:f6:32:df:1a:eb:
38:38:5e:15:73:80:ad:98:ee:83:d0:d8:27:b7:f9:07:7f:95:
f6:ac:73:f2:d7:55:97:9f:0f:9c:3c:54:81:8a:14:e3:9b:f1:
e5:cc:13:6c:fe:40:6c:c6:c6:46:d2:d0:3c:25:37:10:e6:de:
73:b1:bd:6f:e9:95:b5:f2:ec:ee:72:28:af:6c:7d:ad:07:63:
4b:c8:4e:06:6e:c3:35:81:23:63:6d:35:82:85:91:e4:bf:58:
2a:a6:6f:ac:17:14:a6:d0:0e:87:26:ae:20:0b:5a:54:72:db:
08:26:40:e3:50:1b:d3:5c:0b:31:17:ef:20:4c:e0:63:d0:5c:
63:14:7a:c6:81:ce:08:f9:46:5c:fc:e1:73:5d:5d:f4:de:ae:
53:dc:f0:25:e0:fd:95:7a:91:dc:84:5b:9c:c5:c3:1f:1a:aa:
94:18:95:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org