Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/S30-GZ3Z0j4HU2pfyGRb5FpfsvI.roa
File: S30-GZ3Z0j4HU2pfyGRb5FpfsvI.roa (raw, json)
Hash identifier: 0ECjlx85NHbDwnm3Zvn8VtgryZQIzUklQpYqsBCH17M=
Subject key identifier: 4B:7D:3E:19:9D:D9:D2:3E:07:53:6A:5F:C8:64:5B:E4:5A:5F:B2:F2
Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial: 3811A436
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/S30-GZ3Z0j4HU2pfyGRb5FpfsvI.roa
Signing time: Fri 11 Mar 2022 19:11:57 +0000
ROA not before: Fri 11 Mar 2022 19:11:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60261
IP address blocks: 178.79.216.0/23 maxlen: 23
46.183.90.0/24 maxlen: 24
2a02:3d0:a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940680246 (0x3811a436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
Validity
Not Before: Mar 11 19:11:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b7d3e199dd9d23e07536a5fc8645be45a5fb2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:ce:49:82:ae:bc:32:d7:75:4a:5b:42:2d:
ac:07:70:ab:bb:51:5a:dd:80:77:19:aa:cd:19:a3:
4b:a6:46:f8:66:76:de:04:c2:40:b7:97:99:b0:69:
a4:65:32:8e:8d:df:9e:ac:af:b0:ff:ae:ad:62:0d:
f5:3c:38:8f:9d:5f:71:6a:83:dc:98:bd:85:1f:ab:
e0:de:4e:e3:52:0b:63:29:28:95:d3:b2:af:cc:05:
e4:b6:cc:0d:d1:b2:97:22:15:5e:50:66:93:17:a6:
98:80:3a:ea:0b:7c:45:23:c4:3a:0e:ee:18:2d:a5:
47:d1:80:22:a3:2c:d7:f7:f8:81:c1:dd:96:ec:d5:
df:0a:50:d8:7d:40:33:9d:71:d7:56:c2:03:ce:c2:
ea:cc:97:62:cc:56:f3:ae:64:b1:4f:99:75:39:7c:
8a:36:ac:85:b5:f2:e5:f9:4a:d1:46:14:80:74:ba:
91:2d:da:a7:55:50:25:be:22:27:a1:1b:45:43:60:
f5:7f:f6:37:58:c8:2b:c8:57:a9:8b:ef:d4:9c:f0:
ac:33:60:96:1f:9b:9a:68:58:b8:b9:76:65:0a:9a:
8f:63:fa:c9:33:73:bc:0f:97:e5:35:18:20:1a:7d:
48:74:7d:a8:24:b0:0b:1a:63:39:41:4e:f8:40:23:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7D:3E:19:9D:D9:D2:3E:07:53:6A:5F:C8:64:5B:E4:5A:5F:B2:F2
X509v3 Authority Key Identifier:
keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/S30-GZ3Z0j4HU2pfyGRb5FpfsvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.90.0/24
178.79.216.0/23
IPv6:
2a02:3d0:a::/48
Signature Algorithm: sha256WithRSAEncryption
8c:97:a1:9e:f6:e3:c6:39:e4:4f:cb:f0:6d:19:de:08:fa:7e:
82:11:32:3e:c4:76:14:db:a9:62:57:10:86:59:4e:d6:b6:5b:
92:dc:a9:9c:e9:de:de:f8:c7:05:82:59:10:0b:c4:8a:b9:2e:
19:7c:88:32:fb:ed:83:2b:3c:7c:20:4c:41:19:b3:e0:3f:fa:
3e:77:3c:2a:19:09:c0:23:dd:55:d0:04:78:8e:3e:37:a6:f9:
a6:1a:75:a4:05:25:07:ac:7c:c6:76:d8:76:03:5a:da:4d:d6:
e2:3e:71:d9:54:41:27:95:4d:ae:d1:ca:8b:38:ca:b2:e5:b2:
a0:f3:e4:64:9a:15:3e:93:02:13:73:d5:88:f6:73:49:9a:7a:
6d:45:62:de:03:07:f6:17:03:56:65:b6:e2:ec:55:9d:31:eb:
b4:13:fa:b3:9d:fe:6b:c2:42:60:df:2b:18:3b:6e:84:c0:0a:
d9:53:b4:2a:2a:a4:56:ec:f6:56:4b:30:9c:83:65:c6:f5:05:
69:e8:bd:12:f9:f0:7f:d5:e8:f2:f8:d3:2a:60:14:92:13:96:
a0:79:da:06:c7:76:77:d1:7c:95:5b:72:47:ba:4d:68:8b:63:
26:1a:28:88:0c:55:75:b1:73:c9:c7:fd:0e:1a:b4:40:47:60:
bb:ba:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:18 2024 by rpki-client on console-fra.rpki-client.org