Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/4nu9eGPlfpFtbQpoDf_Y7lTc7DU.roa
File: 4nu9eGPlfpFtbQpoDf_Y7lTc7DU.roa (raw, json)
Hash identifier: 1Z/JTJyT6i4DnTQdztErRNo8CVTK71CoWLtcfk17tm8=
Subject key identifier: E2:7B:BD:78:63:E5:7E:91:6D:6D:0A:68:0D:FF:D8:EE:54:DC:EC:35
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: CA4176
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/4nu9eGPlfpFtbQpoDf_Y7lTc7DU.roa
Signing time: Sat 01 Jan 2022 03:56:16 +0000
ROA not before: Sat 01 Jan 2022 03:56:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35491
IP address blocks: 194.24.180.0/23 maxlen: 23
46.148.64.0/20 maxlen: 20
46.148.64.0/24 maxlen: 24
46.148.67.0/24 maxlen: 24
46.148.68.0/24 maxlen: 24
46.148.69.0/24 maxlen: 24
46.148.70.0/24 maxlen: 24
46.148.71.0/24 maxlen: 24
46.148.65.0/24 maxlen: 24
46.148.66.0/24 maxlen: 24
46.148.76.0/24 maxlen: 24
46.148.77.0/24 maxlen: 24
46.148.72.0/24 maxlen: 24
46.148.73.0/24 maxlen: 24
193.151.112.0/22 maxlen: 22
193.151.112.0/24 maxlen: 24
193.151.114.0/24 maxlen: 24
193.151.115.0/24 maxlen: 24
91.192.120.0/22 maxlen: 22
91.192.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13255030 (0xca4176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Jan 1 03:56:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e27bbd7863e57e916d6d0a680dffd8ee54dcec35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:98:f1:4d:f1:e3:aa:19:e2:8d:5b:31:9d:
9a:85:b0:c5:28:31:ab:ba:d2:d0:cc:9e:1b:2a:9e:
64:2a:3b:07:5b:88:dc:93:6e:7f:20:26:46:95:8b:
cf:51:60:e1:e5:a4:e5:bb:a6:a6:de:22:2e:0c:8a:
40:f4:ae:8f:54:96:60:b3:98:ff:da:c4:d1:97:6c:
e0:1c:63:ee:43:f2:cd:c3:40:ae:c6:24:2d:3d:57:
8c:05:6a:83:2e:d6:35:8d:8e:7e:11:8c:6e:35:9a:
c4:93:b0:bf:53:5b:b9:b9:8b:a9:22:78:37:0e:76:
41:ed:18:e9:70:c3:28:39:78:a4:0e:fb:6b:bd:9f:
73:af:4d:be:49:3a:0b:a0:a5:0b:67:10:86:48:bd:
cc:df:66:65:ad:ef:9f:b0:0b:c8:11:d0:a9:1b:68:
00:5e:6c:d1:67:65:85:52:44:74:7f:0e:b6:64:59:
0e:7f:28:d1:21:5f:b1:a3:73:50:19:19:44:1a:aa:
14:cf:d7:b3:63:d2:ac:ad:cf:d6:4a:aa:2b:1d:33:
d6:c5:99:99:22:ca:ad:c3:9d:65:ae:97:47:04:5a:
dc:0f:7f:5d:e8:1e:16:44:8e:7b:9a:81:6f:af:93:
ab:23:43:04:17:46:0a:89:b9:d2:57:a1:3d:14:06:
a4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7B:BD:78:63:E5:7E:91:6D:6D:0A:68:0D:FF:D8:EE:54:DC:EC:35
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/4nu9eGPlfpFtbQpoDf_Y7lTc7DU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.64.0/20
91.192.120.0/22
193.151.112.0/22
194.24.180.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:b8:6b:02:b3:c9:2e:df:5a:1a:d5:2c:02:ed:0f:68:43:07:
29:ed:16:34:04:8e:d3:1c:65:87:26:ad:54:0e:ed:43:45:f9:
66:6e:78:2e:0b:dd:93:89:a6:5c:f0:25:69:ea:d6:01:80:2a:
e5:36:ef:57:88:91:ff:e8:95:af:a4:27:7f:f1:66:56:87:bc:
bd:b1:51:b2:fd:31:7e:2b:b9:ce:4b:97:ab:e3:fc:86:96:25:
a0:84:8d:12:9a:5c:17:19:b2:2e:7f:3a:50:d7:32:9e:1b:1e:
9a:ea:f4:83:1d:8b:ce:55:66:db:d1:ab:f7:3f:7e:d8:68:43:
c0:e3:0f:b2:4e:ff:98:69:e2:5f:1d:cd:21:c8:5e:20:24:ee:
13:86:20:3b:66:c7:17:b3:09:84:ed:f8:fd:aa:79:a3:e2:ee:
27:dd:75:ca:d1:03:94:d9:03:c3:45:52:60:f9:19:c2:f1:00:
b9:6d:d0:80:bf:52:fd:8c:70:50:39:34:a7:b2:46:4f:d7:07:
d8:b0:75:a1:1e:55:07:9f:c3:45:6b:c7:6f:5e:f1:d3:d9:b9:
d8:c8:0a:ef:18:22:f2:9e:c9:23:10:6b:e7:e2:3a:ca:1c:68:
0e:e4:cc:43:3e:6a:df:52:71:31:3d:65:a7:a9:2f:ca:4f:f9:
ec:0c:05:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:02 2023 by rpki-client on console-fra.rpki-client.org