Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/5Kop2zos_T64oRgRBLJE-G1reLE.roa
File: 5Kop2zos_T64oRgRBLJE-G1reLE.roa (raw, json)
Hash identifier: N3ljF55ct74r7p+FP5/vCbSEDuc2aoMwNuBJrDwj5To=
Subject key identifier: E4:AA:29:DB:3A:2C:FD:3E:B8:A1:18:11:04:B2:44:F8:6D:6B:78:B1
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 3A79698D
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/5Kop2zos_T64oRgRBLJE-G1reLE.roa
Signing time: Tue 31 May 2022 09:39:13 +0000
ROA not before: Tue 31 May 2022 09:39:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44889
IP address blocks: 46.38.144.0/22 maxlen: 22
212.16.64.0/19 maxlen: 24
46.38.140.0/24 maxlen: 24
212.16.72.0/24 maxlen: 25
212.16.73.0/24 maxlen: 24
212.80.0.0/19 maxlen: 24
185.24.148.0/24 maxlen: 24
46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981035405 (0x3a79698d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: May 31 09:39:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4aa29db3a2cfd3eb8a1181104b244f86d6b78b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:64:21:1f:3c:a2:9b:ef:6f:0b:e1:14:18:ed:
8b:dd:85:85:0c:05:d9:16:12:8b:41:63:3f:c7:2a:
e9:1b:fa:be:7b:d8:59:df:c6:86:10:cd:d7:c6:a1:
2b:7a:77:63:24:f3:73:b7:a6:d7:17:8f:1d:49:72:
68:c5:fa:dd:e4:1d:2a:ad:20:3b:16:24:bd:85:f3:
fd:e0:77:13:3e:45:49:ec:95:d7:ac:0b:96:a1:22:
01:82:27:34:57:7b:94:b0:e6:fe:23:44:f1:12:36:
39:e4:46:ce:a2:47:ac:72:a1:4f:cc:21:e4:ae:1f:
f5:32:d4:ef:fa:0e:1b:04:14:c5:bf:0e:91:45:c9:
69:30:bc:c2:2d:84:c0:aa:a5:4f:bd:ca:e7:56:41:
11:fd:f4:ac:e6:07:b2:6b:b7:83:e9:3d:e7:b6:d0:
53:bb:02:84:92:bc:90:9c:e6:72:a7:4b:16:d3:3f:
7a:25:72:04:15:a8:f8:d1:c6:ff:e5:39:15:b2:d0:
ef:b0:7d:90:fb:45:49:8b:60:fa:d8:11:d5:77:e9:
18:49:2a:97:83:72:38:7d:37:20:f0:55:82:d2:de:
a0:c7:d0:ec:a4:52:ca:16:23:ce:1c:d3:0c:7a:53:
6e:fc:89:3c:bb:13:cd:7a:0b:6b:6d:e0:c9:62:ff:
57:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AA:29:DB:3A:2C:FD:3E:B8:A1:18:11:04:B2:44:F8:6D:6B:78:B1
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/5Kop2zos_T64oRgRBLJE-G1reLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.140.0/24
46.38.144.0/22
185.24.148.0/24
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
69:54:84:dc:e6:00:c3:8e:f2:3e:da:1f:5d:35:e7:b9:a4:0a:
0e:4d:9c:0d:89:a8:38:6d:6d:02:79:12:94:6a:39:0d:95:29:
1e:8a:88:55:dd:8f:de:60:a3:8a:41:f5:95:66:d9:ec:96:53:
00:81:34:39:35:d3:10:ed:96:be:73:7b:6e:c3:e7:7d:e4:f7:
a8:27:a4:0f:40:67:f2:8c:bd:b0:c3:85:82:12:a9:ae:c0:3d:
a7:d5:ac:50:45:bc:ed:92:c1:2e:36:c4:9d:21:96:c8:1c:82:
4d:53:3d:ec:38:80:7f:44:f3:51:ad:d5:32:d4:f4:d6:98:0d:
dd:68:47:65:bf:31:3e:43:9e:2b:91:a2:99:c1:26:b1:17:90:
74:28:ec:e8:ab:72:c4:67:4d:58:f6:7b:20:96:9d:00:fb:d2:
69:24:a5:b6:b1:07:81:d1:ca:d3:d4:1c:3d:b0:4b:59:c6:a3:
54:0d:0e:07:c0:d3:87:67:13:7d:d6:98:c9:1f:de:2a:0b:17:
d4:cf:05:1d:74:8c:8c:d9:0b:72:e6:b1:e3:45:ff:7d:72:66:
a9:bd:ed:2c:16:cd:13:ff:a3:0e:a3:af:4a:25:43:9f:18:02:
0a:29:20:8f:64:fa:a3:87:3f:6c:0b:6d:45:0e:ac:e1:5e:56:
66:c5:0f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:06 2024 by rpki-client on console-ams.rpki-client.org