Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Q4Oh7WHU8kUqqhV_sW0Hny_oxnI.roa
File: Q4Oh7WHU8kUqqhV_sW0Hny_oxnI.roa (raw, json)
Hash identifier: zx4EqDvbciAW/Iq85bWgIS7m2wtzaaURP1JOf3Qhm5I=
Subject key identifier: 43:83:A1:ED:61:D4:F2:45:2A:AA:15:7F:B1:6D:07:9F:2F:E8:C6:72
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 370889FB
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Q4Oh7WHU8kUqqhV_sW0Hny_oxnI.roa
Signing time: Sat 01 Jan 2022 11:00:22 +0000
ROA not before: Sat 01 Jan 2022 11:00:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202984
IP address blocks: 109.248.59.0/24 maxlen: 24
46.8.21.0/24 maxlen: 24
46.8.29.0/24 maxlen: 24
95.182.120.0/22 maxlen: 24
46.8.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923306491 (0x370889fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 1 11:00:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4383a1ed61d4f2452aaa157fb16d079f2fe8c672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:61:3e:38:c8:c7:68:d8:c7:f5:e0:96:0d:
e0:12:2e:7f:ce:56:4a:fc:68:32:bb:7d:c3:75:62:
b4:16:19:f3:cd:e3:ee:ec:5f:77:88:f0:5d:fc:ff:
3e:f4:a5:70:3c:37:76:a6:28:a7:df:7e:4c:6b:d3:
ff:da:d2:4b:b1:18:3b:9d:d3:43:df:9a:ae:4d:97:
dd:63:6e:29:ce:f6:55:d1:9b:52:88:74:a1:86:33:
58:d4:e5:7c:72:0c:33:db:61:90:97:ed:7b:6d:9c:
b1:21:58:c8:ca:bb:b0:64:7d:f0:59:f5:7e:4d:4e:
eb:c0:2b:62:18:09:a0:d6:6b:0c:b4:4d:de:b3:d6:
47:1c:c2:ff:5b:14:7e:a4:e7:a4:c9:21:da:43:f5:
ce:be:f0:76:8b:b6:d5:a6:2f:39:d1:06:cf:b6:5a:
96:45:15:42:97:27:13:47:91:d4:fe:f4:20:fe:5d:
12:43:d1:af:75:af:ed:98:42:5d:68:19:d3:d3:56:
f1:32:d3:cc:65:8b:30:24:5d:a2:9f:5e:79:36:bd:
b5:32:68:5b:ac:81:6d:43:b7:0c:cd:11:92:20:aa:
93:7f:25:96:84:30:5a:b2:a3:70:91:f0:6b:bf:4a:
e6:38:b1:2f:da:81:bd:5c:7e:74:af:84:87:91:2a:
23:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:83:A1:ED:61:D4:F2:45:2A:AA:15:7F:B1:6D:07:9F:2F:E8:C6:72
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Q4Oh7WHU8kUqqhV_sW0Hny_oxnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.21.0/24
46.8.29.0/24
46.8.158.0/24
95.182.120.0/22
109.248.59.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ab:78:6d:8f:17:7b:ed:75:75:73:8d:b0:fe:d1:b8:bb:40:
41:44:ce:37:3f:0a:67:0c:b2:59:64:48:47:34:61:fc:3c:36:
4d:11:da:79:7d:41:25:98:3e:38:5e:23:61:72:7c:f6:e5:fd:
93:a2:50:f7:8c:e7:6b:ec:b3:8d:82:51:b9:53:21:74:e2:4c:
d5:df:3d:35:6e:12:af:73:e4:15:5a:65:fe:10:f8:37:a2:b9:
eb:28:42:e5:f2:a4:31:ba:cb:24:c6:57:5e:cf:69:69:73:82:
c4:e0:cc:cc:65:2f:46:a8:3c:4e:f3:bd:33:97:88:41:05:08:
3e:28:e0:9e:01:0a:43:16:b6:c1:47:9c:76:79:12:b4:c0:25:
3f:b2:49:6b:6f:81:e6:7f:df:a0:1e:fc:28:95:74:da:28:04:
d0:f1:41:d1:5a:58:f7:5d:2b:57:dc:92:16:79:3b:93:03:ca:
fc:9c:56:d7:23:8e:34:11:c6:51:b7:01:30:0a:73:ef:0f:e7:
d3:d7:e7:3a:ae:d8:9f:8a:ab:93:46:65:f1:1d:0d:40:7f:5e:
34:04:fe:64:04:ad:e2:c0:81:2b:07:5d:4f:4e:92:a0:e3:d0:
12:4a:cf:87:44:18:0e:20:48:de:0f:93:9d:5a:b1:bf:12:d1:
90:aa:fa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org