Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/1-J49v13Gaw1wgvUkffOW3cc3nb0.roa
File: 1-J49v13Gaw1wgvUkffOW3cc3nb0.roa (raw, json)
Hash identifier: YiBs6Lk1NU1sC2QsvLK8ejMohuVCu+7kiyH9CbIZXEE=
Subject key identifier: F8:9E:3D:BF:5D:C6:6B:0D:70:82:F5:24:7D:F3:96:DD:C7:37:9D:BD
Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial: 02018114
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/1-J49v13Gaw1wgvUkffOW3cc3nb0.roa
Signing time: Sat 01 Jan 2022 03:59:42 +0000
ROA not before: Sat 01 Jan 2022 03:59:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48422
IP address blocks: 46.172.67.0/24 maxlen: 24
46.172.68.0/24 maxlen: 24
46.172.75.0/24 maxlen: 24
46.172.77.0/24 maxlen: 24
46.172.72.0/24 maxlen: 24
46.172.73.0/24 maxlen: 24
46.172.79.0/24 maxlen: 24
46.172.81.0/24 maxlen: 24
46.172.85.0/24 maxlen: 24
46.172.83.0/24 maxlen: 24
46.172.82.0/24 maxlen: 24
46.172.84.0/24 maxlen: 24
46.172.89.0/24 maxlen: 24
46.172.91.0/24 maxlen: 24
46.172.88.0/24 maxlen: 24
2a04:5e40:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33653012 (0x2018114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
Validity
Not Before: Jan 1 03:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f89e3dbf5dc66b0d7082f5247df396ddc7379dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a1:b7:a9:87:ac:02:d4:ac:a5:f2:3c:e2:4f:
6c:de:bf:c3:43:3b:32:9d:80:2c:96:73:8a:97:16:
71:21:18:83:c7:a1:8f:d2:00:05:c2:03:e6:67:81:
84:ee:86:cc:30:f2:a0:14:2f:97:10:09:23:31:db:
db:5a:6f:6d:05:36:c8:aa:df:65:11:8f:c3:1c:5c:
49:2a:65:14:94:0a:a5:fa:bf:18:0c:a7:9a:b9:ab:
d0:e7:b8:a4:7f:7a:c4:ee:27:28:3a:d2:e1:13:0a:
11:e8:8d:5f:fc:5e:ac:df:30:3a:e6:7e:0d:7d:42:
ac:e1:d4:f3:e4:98:11:e2:c8:23:6e:48:d2:9b:4d:
d4:f0:b4:d7:b5:94:67:f8:7b:58:70:dd:cc:ee:14:
a1:b5:c8:45:16:58:11:a5:ab:b2:4a:2c:89:7f:42:
27:16:80:d5:e2:68:aa:88:2f:9c:90:81:f1:81:3d:
93:e6:f5:f6:d7:98:1e:60:43:1e:f0:07:83:97:67:
51:8c:14:60:96:01:12:c3:2b:62:0e:5e:19:91:a9:
e1:64:d1:fe:e5:52:fc:21:27:ea:65:31:3b:d1:7e:
28:fa:b3:7d:ac:c3:51:b4:cd:bf:ba:81:28:40:0a:
76:79:e6:7c:a0:b2:2f:c6:91:90:24:78:9b:b5:f0:
c3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9E:3D:BF:5D:C6:6B:0D:70:82:F5:24:7D:F3:96:DD:C7:37:9D:BD
X509v3 Authority Key Identifier:
keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/1-J49v13Gaw1wgvUkffOW3cc3nb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.67.0-46.172.68.255
46.172.72.0/23
46.172.75.0/24
46.172.77.0/24
46.172.79.0/24
46.172.81.0-46.172.85.255
46.172.88.0/23
46.172.91.0/24
IPv6:
2a04:5e40:1::/48
Signature Algorithm: sha256WithRSAEncryption
98:82:4e:5f:97:ec:08:c3:90:80:de:c3:43:c0:3a:08:69:17:
ad:ba:06:c0:91:2f:fd:e5:b2:b8:7b:7f:eb:7d:c0:fd:33:31:
6f:6f:1a:6f:97:f6:14:3d:11:a8:d5:52:f1:01:83:23:26:3e:
33:68:a4:2f:b7:59:27:fa:b8:32:c0:98:41:86:e8:53:67:08:
86:8c:43:58:0c:05:a9:ef:e4:0e:99:c5:3f:90:e3:12:31:25:
bf:9a:84:66:6d:bf:5d:a8:d3:00:4f:c0:05:ae:11:91:11:17:
66:2c:3f:8a:75:aa:d9:bd:1a:ad:b2:2c:7e:9c:e9:53:d5:68:
4f:4f:50:ee:3d:dc:f7:1a:33:e1:c0:fe:f4:b3:cb:d3:6c:19:
d1:e2:94:e3:8e:e2:9f:fc:c5:37:54:82:fb:0e:ca:fb:01:8e:
af:d7:21:02:73:aa:42:b7:04:9c:72:5b:7e:4f:43:76:3c:48:
3c:f9:f5:0d:27:fe:1e:27:34:96:44:15:5c:f7:20:f4:a4:78:
b5:86:a3:28:93:d3:bc:77:c9:55:d9:7a:92:3c:8a:da:a4:60:
25:8a:35:dd:15:28:5c:37:e4:fe:ba:9a:58:a3:9b:2e:12:df:
d6:55:d8:06:0e:7d:d8:3b:a7:31:08:d1:d8:c9:77:12:c0:ee:
d1:71:10:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:48 2023 by rpki-client on console-fra.rpki-client.org