Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/mPPxPSlEFRzvZe1vQrH3t3yfrtY.roa
File: mPPxPSlEFRzvZe1vQrH3t3yfrtY.roa (raw, json)
Hash identifier: qBIm7yIG1YUR5nG2tdbrNFOrwwlB1D1lLr1puDjb9Zw=
Subject key identifier: 98:F3:F1:3D:29:44:15:1C:EF:65:ED:6F:42:B1:F7:B7:7C:9F:AE:D6
Certificate issuer: /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Certificate serial: 19E888BE
Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/mPPxPSlEFRzvZe1vQrH3t3yfrtY.roa
Signing time: Sat 01 Jan 2022 14:55:21 +0000
ROA not before: Sat 01 Jan 2022 14:55:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199997
IP address blocks: 46.245.224.0/21 maxlen: 21
46.245.225.0/24 maxlen: 24
46.245.224.0/24 maxlen: 24
46.245.226.0/24 maxlen: 24
46.245.228.0/24 maxlen: 24
46.245.227.0/24 maxlen: 24
46.245.229.0/24 maxlen: 24
2a01:bfe0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434669758 (0x19e888be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Validity
Not Before: Jan 1 14:55:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98f3f13d2944151cef65ed6f42b1f7b77c9faed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:04:25:b8:3e:f7:50:5b:9f:66:6a:71:b7:
c5:20:26:f1:8c:95:32:02:60:1d:55:a7:23:6c:78:
c9:c8:1c:b1:ce:ea:52:8a:94:23:23:c7:ef:70:0a:
c2:1c:b9:b7:66:cf:82:d5:a1:57:b3:1c:fa:2c:9c:
a7:f1:dd:fd:08:40:20:67:00:24:7e:c3:39:0a:f6:
4d:38:5b:a2:97:13:c2:5a:66:eb:bd:9d:39:85:f6:
ee:d9:e4:4c:6c:69:e9:9a:36:79:02:26:a2:6d:f1:
59:48:1c:fa:ca:67:53:57:50:54:51:59:ef:7c:f7:
9f:83:9a:f1:55:b3:c1:66:9f:8c:62:6f:d5:1e:57:
c9:d4:d5:99:fc:65:18:f7:05:40:f6:de:11:e3:df:
28:7b:42:de:d2:ca:41:1b:6b:2b:36:5d:40:72:35:
eb:80:f4:5f:30:7f:5c:04:5e:06:e9:d3:dc:06:8f:
dc:3d:4e:aa:fe:c8:ea:25:a0:56:e2:cc:19:ed:2b:
e1:d8:94:80:70:7b:c1:e1:6b:8b:9b:19:ce:11:68:
12:30:44:45:c6:5c:6d:f0:9b:47:c2:24:3e:a7:86:
05:aa:1c:08:40:62:1e:28:06:c6:15:e6:31:47:77:
b6:63:7a:14:89:0f:03:aa:04:83:4d:ae:1c:4d:ce:
3f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F3:F1:3D:29:44:15:1C:EF:65:ED:6F:42:B1:F7:B7:7C:9F:AE:D6
X509v3 Authority Key Identifier:
keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/mPPxPSlEFRzvZe1vQrH3t3yfrtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.224.0/21
IPv6:
2a01:bfe0::/32
Signature Algorithm: sha256WithRSAEncryption
82:a4:21:3f:7a:c9:d2:01:26:80:c2:55:fe:6d:4e:74:12:7e:
c2:f4:88:55:33:a1:08:73:0d:77:e8:3f:8a:2b:95:b8:76:a8:
b6:13:3f:08:ae:e0:3c:bd:18:48:2a:f1:9c:82:66:8e:e7:5a:
9c:f7:3c:95:ae:65:4c:25:c5:17:f1:b3:82:83:ab:f5:9f:77:
c1:6a:70:e8:b3:28:5e:1e:22:6b:eb:41:a9:15:03:64:9a:c9:
c3:3b:21:77:cb:16:82:84:f8:40:52:59:51:ab:98:7e:25:a5:
c6:6e:fc:30:42:45:83:1d:d4:bf:8c:90:3e:d0:e7:bf:a3:38:
e1:d4:80:e0:4d:64:25:49:5f:b5:5c:ba:d9:ca:c3:53:86:a0:
d2:a0:13:41:dc:13:f5:1a:d9:c1:31:99:ca:fd:79:e6:28:90:
8a:c0:4f:5a:fb:e6:9a:ad:b2:28:e1:02:79:cc:d8:53:e2:be:
a4:8e:1d:6d:96:f3:00:5c:09:af:2f:99:f3:20:ee:7b:67:5c:
3f:68:95:30:9f:4d:44:24:a7:31:b2:06:2c:3c:2b:73:4c:fd:
61:21:09:92:80:25:86:01:b8:73:7e:35:34:3d:36:87:72:a9:
e5:ff:de:ce:92:be:13:57:23:82:d2:d4:a7:9a:09:79:9f:a1:
c5:77:c6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:35 2024 by rpki-client on console-fra.rpki-client.org