Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/Kup-dvQCVsEME8nyzplxcWpCXQ4.roa
File: Kup-dvQCVsEME8nyzplxcWpCXQ4.roa (raw, json)
Hash identifier: m+N8hG9oYKI7SMvt9zKu54tPxrowwX3IDbS4NNB+kMA=
Subject key identifier: 2A:EA:7E:76:F4:02:56:C1:0C:13:C9:F2:CE:99:71:71:6A:42:5D:0E
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 38925C39
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/Kup-dvQCVsEME8nyzplxcWpCXQ4.roa
Signing time: Sat 01 Jan 2022 10:05:24 +0000
ROA not before: Sat 01 Jan 2022 10:05:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49970
IP address blocks: 46.143.200.0/24 maxlen: 24
46.143.201.0/24 maxlen: 24
46.143.246.0/24 maxlen: 24
46.143.247.0/24 maxlen: 24
109.122.240.0/21 maxlen: 21
46.143.193.0/24 maxlen: 24
46.143.192.0/18 maxlen: 24
46.143.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949115961 (0x38925c39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 1 10:05:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2aea7e76f40256c10c13c9f2ce9971716a425d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:c4:f8:80:30:a6:c2:42:bf:e4:ce:9f:b1:
71:a1:72:05:68:94:5b:ce:94:41:ca:42:44:0a:1f:
b6:1b:7b:8f:71:be:60:a3:73:14:d1:be:b6:b3:d0:
21:74:51:13:36:18:6b:9e:8a:64:e5:de:78:06:4e:
d8:0f:0d:f6:0d:60:90:93:81:13:00:85:64:05:65:
9b:75:72:0a:6b:99:66:3d:3f:87:c7:26:8e:87:1f:
0b:ec:f9:6c:58:a0:39:a0:fe:d4:a3:da:55:8c:14:
fa:d3:11:48:53:1d:5d:b1:9e:56:8b:81:54:8e:54:
00:c8:ce:76:c7:4a:e9:ae:51:15:4a:18:51:0c:8b:
9e:7f:51:9e:71:c4:b4:f3:86:5a:88:f8:c2:5a:e6:
b6:46:a4:9e:32:88:11:d5:f2:0c:d8:4a:53:9c:dd:
5b:b5:21:46:98:1d:79:6d:56:53:f9:85:47:99:da:
8c:7f:87:f1:3f:d1:f0:a1:52:26:91:9b:a2:5c:76:
1d:28:ba:31:ef:b8:cb:09:3a:45:bb:79:f7:06:dc:
d9:29:95:bd:b6:3f:6b:80:91:9a:be:82:44:1d:10:
c2:6d:aa:c7:7c:14:ad:3e:51:33:c0:da:82:e5:72:
c8:7d:9e:89:cb:2c:5b:09:c5:df:5e:49:71:c6:b5:
da:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EA:7E:76:F4:02:56:C1:0C:13:C9:F2:CE:99:71:71:6A:42:5D:0E
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/Kup-dvQCVsEME8nyzplxcWpCXQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.192.0/18
109.122.240.0/21
Signature Algorithm: sha256WithRSAEncryption
99:51:c7:5a:0e:16:91:52:39:97:3e:02:dc:d4:d5:99:0f:c4:
e9:d5:03:28:78:c3:0f:a0:79:8c:77:fb:3e:cd:80:c3:d4:28:
25:22:fb:85:4c:21:2c:71:d7:95:a5:42:61:dc:f5:7e:64:6f:
47:78:c1:f0:26:5e:bb:48:52:47:56:1b:d0:9a:e0:60:05:b0:
09:8d:1e:75:15:9e:71:48:13:d9:1c:b2:d5:61:15:33:6d:1a:
5a:1e:2e:ee:0a:ef:df:16:75:64:cb:d5:6d:69:db:85:e0:b7:
f1:19:65:02:67:39:94:d8:86:8a:04:74:2f:11:13:ed:c4:db:
be:57:27:f8:8a:3c:b7:79:d9:d6:4f:b9:64:0a:a7:21:ac:0f:
8f:ec:8e:4b:2a:a6:73:97:db:92:f6:00:9f:3c:9a:ad:5d:99:
7a:ea:09:91:9f:6f:e2:1c:e1:48:13:7b:dd:00:d8:65:38:0d:
00:8b:8f:fc:aa:cb:0c:e8:0c:c6:d1:9d:78:0a:60:9c:0e:5d:
c2:47:e1:15:9d:41:8f:7b:18:e3:f3:59:0f:49:32:53:7d:fb:
d1:18:1f:ce:3f:ca:dd:16:16:97:9b:eb:ff:17:ba:4b:3d:5d:
2f:38:b8:89:1d:4a:df:7f:33:22:6f:19:e3:e1:54:8a:f9:e2:
00:04:60:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:50 2023 by rpki-client on console-fra.rpki-client.org