Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/nEarhzd-OwPjSucuyHT7IXJVPI4.roa
File: nEarhzd-OwPjSucuyHT7IXJVPI4.roa (raw, json)
Hash identifier: eOaSEUGO8yBbVn2Qs/dw2sda9T001rV/7WWKa7dWVbA=
Subject key identifier: 9C:46:AB:87:37:7E:3B:03:E3:4A:E7:2E:C8:74:FB:21:72:55:3C:8E
Certificate issuer: /CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Certificate serial: 45398607
Authority key identifier: E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/nEarhzd-OwPjSucuyHT7IXJVPI4.roa
Signing time: Sat 01 Jan 2022 10:58:19 +0000
ROA not before: Sat 01 Jan 2022 10:58:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56376
IP address blocks: 130.255.96.0/24 maxlen: 24
130.255.98.0/23 maxlen: 24
130.255.97.0/24 maxlen: 24
130.255.100.0/22 maxlen: 24
46.231.37.0/24 maxlen: 24
46.231.36.0/24 maxlen: 24
46.231.32.0/22 maxlen: 24
185.62.241.0/24 maxlen: 24
185.62.242.0/24 maxlen: 24
185.62.243.0/24 maxlen: 24
46.231.38.0/23 maxlen: 24
185.62.240.0/24 maxlen: 24
185.62.240.0/22 maxlen: 22
2a03:d100::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1161397767 (0x45398607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Validity
Not Before: Jan 1 10:58:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c46ab87377e3b03e34ae72ec874fb2172553c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:57:a3:b8:55:d5:ec:71:8a:30:71:ff:c3:
a0:de:61:79:5d:32:9b:c0:e4:f3:85:f1:d2:e2:c9:
2e:d4:04:f4:41:80:d8:03:3c:65:ec:bb:f5:03:f5:
09:71:20:dd:16:30:49:70:e5:ff:87:bf:24:dc:d2:
17:8b:92:d0:56:a0:8f:af:41:23:f6:3f:c2:df:82:
7e:ec:b1:a2:11:30:f4:28:34:a3:95:c3:ff:24:37:
a9:f7:73:4e:35:e7:46:ed:26:c6:f3:38:01:1e:a8:
46:4b:cb:74:ad:38:ad:5d:37:c6:2d:c5:fe:92:4b:
8b:0a:89:8f:29:6e:0c:63:2f:c2:5c:18:cb:87:b6:
a6:a4:1e:c0:f7:be:45:94:3f:01:f2:9d:66:a2:0f:
dc:42:3b:1e:fa:06:0f:6d:43:1c:ad:39:a6:76:78:
d2:7e:8e:c7:73:95:f6:9b:9c:21:41:03:c6:38:ff:
fb:7a:81:95:cf:ba:72:18:bf:a0:ef:cf:11:7b:bf:
94:37:50:e0:0e:3d:62:26:59:c7:96:79:54:de:7f:
43:d6:fe:ec:ba:80:d4:c9:46:24:b6:d9:7b:5e:e5:
83:f3:5d:e6:85:66:c0:db:cb:08:87:6a:39:c6:41:
ee:f2:ba:3c:01:90:29:aa:96:b2:a1:40:6d:49:f6:
98:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:46:AB:87:37:7E:3B:03:E3:4A:E7:2E:C8:74:FB:21:72:55:3C:8E
X509v3 Authority Key Identifier:
keyid:E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/nEarhzd-OwPjSucuyHT7IXJVPI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.32.0/21
130.255.96.0/21
185.62.240.0/22
IPv6:
2a03:d100::/32
Signature Algorithm: sha256WithRSAEncryption
34:57:15:0b:d8:3a:47:6e:5d:d8:80:bc:50:3d:8a:91:48:8f:
50:96:90:1c:9c:66:55:73:80:b9:ab:d9:af:63:cd:79:c7:8e:
da:39:82:ef:4e:ec:7e:1b:5c:d6:40:1d:0c:69:4a:a7:66:b8:
8e:a6:db:1e:5f:08:76:64:d6:0c:bb:00:9f:fb:c0:e4:ac:82:
10:af:1e:14:22:b8:d9:4a:0c:23:3f:cb:ec:fe:6d:e6:f4:db:
eb:0d:c7:99:1d:23:53:37:57:ee:d4:73:c4:48:06:4b:cd:90:
7d:bd:56:9b:2e:14:78:53:71:c3:66:e8:17:2a:ff:57:2f:bb:
73:8d:26:e8:b0:73:7f:8d:6a:ec:a3:d7:98:81:0d:18:11:62:
dc:95:0f:b6:40:c0:84:4a:ef:90:9e:d6:10:9d:e4:1a:b5:07:
5d:3b:65:66:48:9a:9e:25:e3:50:30:91:76:52:54:a8:17:43:
3c:ce:71:4a:8e:88:42:a4:3d:ec:73:67:43:42:1c:c7:2f:66:
05:6f:9d:28:84:5d:32:39:cc:70:87:09:bd:8f:d1:59:78:68:
e9:20:cb:2d:39:da:ab:d9:91:e9:68:61:ff:2c:25:a4:7a:49:
2c:10:d5:ee:dc:9e:be:ee:52:93:b3:15:59:3c:5b:d8:39:fd:
dc:d2:01:f4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:48 2024 by rpki-client on console-fra.rpki-client.org