Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/00h1T91ik3vM0FVLTlX4L1X4ppc.roa
File: 00h1T91ik3vM0FVLTlX4L1X4ppc.roa (raw, json)
Hash identifier: LmxPAgXP3VcUEnOpWI4NrN+XHYvq7/gTpk6s6yIAc5o=
Subject key identifier: D3:48:75:4F:DD:62:93:7B:CC:D0:55:4B:4E:55:F8:2F:55:F8:A6:97
Certificate issuer: /CN=42ca1a1e3d0925423310c154b502c2842888e612
Certificate serial: 1393E488
Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/00h1T91ik3vM0FVLTlX4L1X4ppc.roa
Signing time: Thu 09 Jun 2022 15:19:05 +0000
ROA not before: Thu 09 Jun 2022 15:19:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197240
IP address blocks: 46.30.104.0/23 maxlen: 24
46.30.108.0/24 maxlen: 24
46.30.110.0/23 maxlen: 24
46.30.106.0/23 maxlen: 24
46.30.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328459400 (0x1393e488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612
Validity
Not Before: Jun 9 15:19:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d348754fdd62937bccd0554b4e55f82f55f8a697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:3c:da:6e:c0:b3:a6:7e:9d:c7:1c:b0:fe:
2a:55:79:b7:ce:29:22:4e:95:63:e3:4e:f6:1d:42:
b2:57:ab:ea:5e:50:4d:c5:bd:ac:50:88:7a:66:1f:
98:c2:ff:9f:07:c1:4e:8d:ec:44:cf:ea:a7:f8:59:
ed:87:ec:ca:68:e0:32:d5:e2:63:eb:83:bb:57:ef:
cd:c8:d2:c1:3a:b3:b7:38:f6:74:f8:86:d1:6d:45:
bb:67:3d:d5:25:76:15:80:d8:40:8a:e3:71:9e:64:
14:ad:99:2a:56:88:74:7a:ee:1d:f4:9c:9b:99:78:
47:d9:96:47:4e:47:8f:93:00:e4:e2:c1:7e:e1:36:
52:49:7b:0c:02:6a:39:47:9a:60:41:d4:72:d9:8e:
ee:4c:12:67:9c:bc:ad:8f:0d:29:0d:fb:57:82:a8:
ec:be:60:89:ba:26:9a:ce:62:3f:4f:d4:80:de:e0:
c8:f0:4a:54:cd:3d:61:1c:03:0b:65:6d:a8:d4:34:
41:a4:74:c7:0d:a9:4b:62:41:99:6b:ac:46:9d:39:
96:4a:d2:a6:1c:af:61:76:27:85:c3:ec:12:e0:07:
68:44:a4:bd:cc:78:89:76:05:cf:56:90:3f:aa:5a:
38:30:74:6e:6b:2b:85:52:92:6b:38:0f:38:f9:28:
02:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:48:75:4F:DD:62:93:7B:CC:D0:55:4B:4E:55:F8:2F:55:F8:A6:97
X509v3 Authority Key Identifier:
keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/00h1T91ik3vM0FVLTlX4L1X4ppc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.104.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:eb:cd:aa:42:42:86:04:ae:30:b2:d7:09:aa:ff:bb:d5:02:
79:d5:87:b1:dc:b0:c3:df:63:bc:82:68:36:31:63:13:57:7f:
76:e4:82:78:db:15:5d:2f:f8:80:fe:ee:79:87:86:c9:bd:99:
49:b3:c9:c1:92:09:98:68:b6:4a:2e:6c:ca:2d:30:ef:e9:a7:
b6:a5:5b:e1:aa:51:85:fa:90:32:06:d9:2e:bb:77:28:cb:eb:
02:a8:66:61:fb:57:2a:05:1d:3f:79:c7:4b:b7:93:c3:fd:ad:
3c:71:89:3a:61:12:7b:a3:c9:c9:f3:6f:50:6c:78:96:4e:c3:
52:06:9e:f3:da:f3:a4:d7:a6:ff:6c:f1:ab:b4:7b:7f:a5:8d:
f5:a5:6c:32:a4:a3:93:21:9a:6a:f8:96:3c:5f:2a:97:69:65:
10:6f:0a:02:a0:9b:b9:cc:2f:e6:c5:82:d0:43:5b:ef:ef:01:
c3:7c:af:50:1e:13:b6:aa:97:91:1b:b3:74:8f:8a:28:c5:70:
bd:50:67:3d:47:08:b1:1a:1d:bb:44:79:f4:0e:18:17:a0:be:
cd:81:90:8e:eb:fb:9f:35:05:87:0d:8c:8b:1f:94:d0:60:24:
84:1a:8c:8c:fb:1c:7d:c2:b5:17:3a:09:03:4e:2f:fa:0d:d1:
ec:0a:f9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:20 2024 by rpki-client on console-fra.rpki-client.org