Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/_pQIULYYMlsEEZ1OnTeeiwxj2gQ.roa
File: _pQIULYYMlsEEZ1OnTeeiwxj2gQ.roa (raw, json)
Hash identifier: OOXXrYD6ewOhREWsNLN7mQ3SO8eam5xZ/Vlrtem9y6M=
Subject key identifier: FE:94:08:50:B6:18:32:5B:04:11:9D:4E:9D:37:9E:8B:0C:63:DA:04
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 04DDCEEF
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/_pQIULYYMlsEEZ1OnTeeiwxj2gQ.roa
Signing time: Sun 15 May 2022 08:42:40 +0000
ROA not before: Sun 15 May 2022 08:42:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43395
IP address blocks: 46.148.35.0/24 maxlen: 24
46.148.36.0/24 maxlen: 24
46.148.43.0/24 maxlen: 24
46.148.44.0/23 maxlen: 23
46.148.38.0/23 maxlen: 23
46.148.41.0/24 maxlen: 24
46.148.45.0/24 maxlen: 24
46.148.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81645295 (0x4ddceef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: May 15 08:42:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe940850b618325b04119d4e9d379e8b0c63da04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c5:95:3c:21:2d:e3:b6:b1:b0:85:cc:9a:9d:
1f:b2:5e:58:46:49:de:ce:92:22:bb:6a:61:e7:6b:
20:c8:4b:c6:e2:ef:02:82:00:f3:d0:7a:53:38:b4:
0f:eb:08:18:86:9f:cc:35:0b:6e:88:69:85:5a:57:
f8:99:fb:d8:5e:68:18:b1:9e:ef:13:0c:33:0d:86:
42:4a:6b:a1:8b:3a:4a:7f:9d:cf:a9:89:9c:4c:9f:
1c:6f:ea:dc:51:36:c8:55:bd:7c:44:f8:e9:94:a6:
9e:c3:df:ad:b0:2b:c0:37:7b:83:cf:5a:88:c9:b1:
47:76:b6:06:ec:7d:19:22:67:ff:06:c0:51:0d:cc:
7c:76:a1:d5:c2:b4:c2:9c:16:d5:d4:d3:91:93:cf:
a0:ba:33:e9:35:0a:6b:42:20:ed:50:d2:73:45:6c:
da:a9:c4:ba:93:1d:54:d3:ca:e6:40:47:da:fc:54:
09:f3:da:5c:71:f1:e6:5d:70:21:5d:68:65:ac:c6:
bb:bd:a4:6a:91:bd:76:68:c8:55:7c:99:7f:51:af:
72:a3:a0:60:47:87:7c:37:f2:27:ac:52:34:93:e8:
be:79:04:c7:a7:ea:e2:5e:75:13:73:e8:b3:6b:2f:
b1:4c:8f:a0:37:6c:0d:0a:64:37:35:69:db:7e:eb:
3e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:94:08:50:B6:18:32:5B:04:11:9D:4E:9D:37:9E:8B:0C:63:DA:04
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/_pQIULYYMlsEEZ1OnTeeiwxj2gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.35.0-46.148.36.255
46.148.38.0/23
46.148.41.0/24
46.148.43.0-46.148.46.255
Signature Algorithm: sha256WithRSAEncryption
85:36:51:e9:7d:50:d6:11:b3:67:8b:0d:3f:3a:6f:f3:4d:46:
31:00:ed:ef:3f:41:83:05:c3:71:7a:ea:ef:f0:af:27:8f:e4:
7a:fa:07:7c:fa:0e:30:f2:a2:db:a5:15:af:bb:a2:e8:4a:a8:
cc:c4:d2:d9:70:d9:bd:f9:44:13:1a:78:33:1c:f4:0f:8c:04:
be:aa:57:0e:97:2d:a0:50:cd:4c:fa:67:1d:32:1a:af:33:0f:
76:5c:3b:62:a4:10:fe:25:80:29:f0:db:24:64:e2:31:35:ad:
dd:a2:e1:b9:d2:76:76:2f:a2:b1:a2:27:92:78:c6:5f:d7:20:
61:75:98:4e:80:2f:b3:8d:4b:42:59:a0:98:ec:0f:29:34:da:
1e:eb:a5:2a:05:0a:94:8f:39:3a:99:75:59:18:a7:71:f1:bd:
a9:7a:fb:bc:ae:79:e8:89:a6:6b:0c:aa:f9:71:a8:47:09:d1:
3c:bf:33:30:d8:27:02:1c:df:8d:b3:be:54:c1:9c:7d:f5:0b:
3b:ed:22:8d:65:63:38:d5:e5:d0:66:55:e7:c3:83:5f:00:08:
16:d5:73:75:9d:df:5c:6e:01:d7:c1:51:fa:26:60:eb:dd:d2:
4b:05:fe:74:8a:7d:26:dd:f1:3f:6a:e7:a8:e4:58:f5:00:37:
3a:a6:53:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:47 2024 by rpki-client on console-ams.rpki-client.org