Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/MeIBIxEdLGRVTPbAW2vj015Kk3w.roa
File: MeIBIxEdLGRVTPbAW2vj015Kk3w.roa (raw, json)
Hash identifier: 9i+6vjvAS6qR4FDpCW+qHIZfBVk+Z/3vBbRap/2e16I=
Subject key identifier: 31:E2:01:23:11:1D:2C:64:55:4C:F6:C0:5B:6B:E3:D3:5E:4A:93:7C
Certificate issuer: /CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Certificate serial: 19346BFC
Authority key identifier: 00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/MeIBIxEdLGRVTPbAW2vj015Kk3w.roa
Signing time: Sat 01 Jan 2022 00:58:12 +0000
ROA not before: Sat 01 Jan 2022 00:58:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48608
IP address blocks: 46.34.96.0/20 maxlen: 20
46.34.96.0/21 maxlen: 21
46.34.96.0/19 maxlen: 19
46.34.104.0/21 maxlen: 21
46.34.112.0/21 maxlen: 21
46.34.112.0/20 maxlen: 20
46.34.120.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422865916 (0x19346bfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Validity
Not Before: Jan 1 00:58:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31e20123111d2c64554cf6c05b6be3d35e4a937c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:22:ba:66:ac:3f:df:46:4f:c5:a9:98:43:6b:
44:e5:18:b0:e6:3e:75:04:ba:64:52:ac:c8:08:e9:
87:46:fb:34:9e:96:a8:41:72:50:a5:45:a4:fd:a2:
ae:5c:b9:49:d2:8c:54:b4:ba:1a:f1:74:8a:43:81:
bc:7f:91:29:ae:4d:1f:c4:54:8f:8c:b1:8d:74:47:
dc:78:73:92:2e:f0:52:71:63:96:03:ed:66:0e:f2:
00:33:0c:77:9d:e3:05:68:3e:fb:bd:2e:f9:8a:d8:
e6:9e:39:a9:bf:b5:6d:4c:3c:d5:9c:8d:4c:60:a3:
f2:6b:a3:11:4a:53:b8:45:b5:bc:e4:65:6c:bd:46:
c1:c0:74:13:f5:23:88:81:58:9f:2c:f7:67:6a:7e:
4c:ee:04:1c:0f:f1:ee:30:9e:d2:06:8b:07:0c:0a:
7d:ff:61:da:f0:6a:b8:19:9d:1d:a4:19:46:d9:e3:
08:69:73:31:d2:ec:a5:47:9d:07:38:18:a0:0b:c4:
39:dc:2b:31:cb:f2:0f:be:77:26:44:fb:0e:20:19:
b0:1a:79:ce:dd:8c:49:ec:89:5c:6f:7b:70:40:18:
16:75:fb:62:a9:a7:e2:ca:8d:0f:3a:9c:63:df:f0:
0f:8b:84:ff:0e:ba:d4:e7:72:29:7d:37:5c:49:99:
50:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E2:01:23:11:1D:2C:64:55:4C:F6:C0:5B:6B:E3:D3:5E:4A:93:7C
X509v3 Authority Key Identifier:
keyid:00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/MeIBIxEdLGRVTPbAW2vj015Kk3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.96.0/19
Signature Algorithm: sha256WithRSAEncryption
30:fa:6c:cb:5d:57:a6:97:39:f5:b9:20:ce:f3:71:1c:e3:c2:
74:df:2e:05:77:11:29:f4:33:af:cb:bf:89:c3:5c:84:5b:e3:
38:fe:31:32:8a:5f:56:c1:df:8c:7d:96:b3:41:d9:4b:a7:60:
b5:a4:b6:9a:3a:37:ad:4a:d1:1d:0a:67:0f:54:9b:51:dd:9f:
38:27:3e:68:ca:86:54:87:f7:c3:26:8c:2e:2f:eb:85:9e:c8:
12:45:60:60:00:51:00:fe:5c:41:f0:f1:85:ef:d5:a0:e5:37:
e1:97:00:d9:b1:8f:15:ce:71:b6:d7:eb:43:f2:ad:e1:4d:ab:
4b:bb:8c:8f:0a:53:05:6e:a8:6e:ac:74:58:c1:04:14:d0:2f:
3a:bf:5a:74:a4:fa:62:80:d7:2d:73:2b:ac:7a:31:2c:e6:be:
5d:41:86:23:5d:82:21:1b:07:a7:70:73:dd:91:36:05:ef:cb:
20:7b:29:37:93:0b:95:ac:63:0f:95:65:01:86:dc:7d:65:7f:
52:65:74:2c:dd:4c:5d:13:38:25:ac:68:9b:9d:da:6c:a7:ff:
a1:42:ab:b8:79:3a:a4:58:30:e7:fd:6e:e0:0b:1a:fa:68:ca:
e0:a7:ea:2d:0e:5f:d7:6b:8a:92:0f:5b:89:dd:9d:6b:2b:20:
3d:b9:a3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:21 2023 by rpki-client on console-fra.rpki-client.org