Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/5Git71m6IX1XNrF_r3xuAUL_yUY.roa
File: 5Git71m6IX1XNrF_r3xuAUL_yUY.roa (raw, json)
Hash identifier: mLqGnufCb/Pq7xsa8kLX5eWWoLalSWz4FDsL2qBBXfg=
Subject key identifier: E4:68:AD:EF:59:BA:21:7D:57:36:B1:7F:AF:7C:6E:01:42:FF:C9:46
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 389FABFF
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/5Git71m6IX1XNrF_r3xuAUL_yUY.roa
Signing time: Sun 27 Mar 2022 08:10:41 +0000
ROA not before: Sun 27 Mar 2022 08:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51407
IP address blocks: 46.253.80.0/23 maxlen: 23
46.253.84.0/23 maxlen: 23
46.253.82.0/23 maxlen: 23
46.253.80.0/21 maxlen: 21
46.253.86.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949988351 (0x389fabff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Mar 27 08:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e468adef59ba217d5736b17faf7c6e0142ffc946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:e9:cc:78:c2:d6:1d:59:e9:ec:56:e9:d9:8f:
0e:d1:d7:13:2d:77:52:7d:10:c5:b2:91:90:57:b7:
d5:96:f1:31:5b:32:4e:a6:de:b6:2e:c7:80:2d:62:
97:ea:8a:fe:eb:8d:88:6d:db:14:e7:10:0a:66:f7:
b3:b8:58:24:cc:14:60:e6:71:93:b4:fb:97:d7:f4:
84:ca:6f:38:e2:13:ec:78:2d:80:e6:f0:3d:06:34:
1f:b3:46:f7:ae:6e:d5:d4:62:19:7e:03:72:a7:f1:
40:d6:96:97:65:18:c5:14:62:69:b8:cf:09:9f:a4:
4a:e8:58:05:37:33:e3:ae:89:a5:7d:61:a6:ed:b6:
2d:45:c6:f8:38:de:87:f7:23:57:2b:1b:f3:73:f4:
e2:89:82:f8:74:c3:9f:3e:71:a4:27:d9:fb:c1:5c:
0a:f7:f2:71:22:49:84:8a:1f:fa:3d:42:b7:8a:7d:
d2:5c:0b:d7:b4:52:56:f5:b3:4e:0a:eb:e7:8b:e5:
1f:89:98:53:59:c9:c8:ad:75:af:dc:67:ac:41:fe:
72:c9:d5:d2:14:18:da:2d:1d:17:f1:28:22:f0:d2:
72:51:da:83:e4:fe:4a:55:3f:45:e4:98:c6:0e:d6:
19:f3:70:5d:a6:c2:1f:ae:00:8b:b9:c2:db:19:18:
b4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:68:AD:EF:59:BA:21:7D:57:36:B1:7F:AF:7C:6E:01:42:FF:C9:46
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/5Git71m6IX1XNrF_r3xuAUL_yUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.80.0/21
Signature Algorithm: sha256WithRSAEncryption
c4:c0:86:a5:9f:4a:b7:99:3f:22:e9:d6:0a:63:25:bd:1b:e0:
07:ff:b9:1f:3d:95:fd:45:04:df:8a:23:31:07:3c:eb:2a:67:
06:f1:40:28:7d:2e:c0:ba:db:fe:a2:45:73:de:9a:60:de:1f:
f0:ff:7a:73:62:d3:d3:6f:3c:07:8d:74:a1:24:6a:33:40:9d:
99:59:27:43:94:a2:ff:d0:4d:b3:8b:f8:73:8e:28:86:3e:f7:
1d:fc:ec:e7:9d:2c:42:2c:85:b2:48:63:5a:91:4f:5e:b5:22:
6b:57:b3:ac:71:b8:5a:a5:83:fb:c8:44:e8:9e:db:2d:1c:8d:
2b:7e:34:0d:05:24:1a:15:2c:ab:eb:52:f9:6b:17:ac:ab:d5:
38:04:e7:6c:24:4e:3c:ea:89:e5:98:4f:50:f1:f3:3d:dd:d2:
da:8f:a0:c6:93:69:13:48:50:ac:70:7a:5e:4b:79:57:03:59:
c8:fc:41:45:f6:7f:23:06:3d:85:6d:b9:6f:d2:20:ef:db:9d:
24:8d:d6:79:d5:ff:0b:c9:f2:ed:aa:53:41:5c:14:17:f1:98:
47:b1:d4:0b:d3:e3:09:d2:7b:9a:73:3c:00:a0:cd:35:01:68:
24:bf:10:62:28:3e:70:e9:20:7c:72:45:1d:8d:a5:40:2a:0b:
c7:5c:6c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:03 2023 by rpki-client on console-fra.rpki-client.org