Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/HeyqiJwqLpt0nMn1ylYIdgrRKjY.roa
File: HeyqiJwqLpt0nMn1ylYIdgrRKjY.roa (raw, json)
Hash identifier: Xvu8pN0Iik3Tk1fybREx3jZ+7TP2xgugYK5PGBWZVD4=
Subject key identifier: 1D:EC:AA:88:9C:2A:2E:9B:74:9C:C9:F5:CA:56:08:76:0A:D1:2A:36
Certificate issuer: /CN=707af45346f06b622a0ebbb4ff9ba33be6f42f1e
Certificate serial: 04673FE2
Authority key identifier: 70:7A:F4:53:46:F0:6B:62:2A:0E:BB:B4:FF:9B:A3:3B:E6:F4:2F:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/HeyqiJwqLpt0nMn1ylYIdgrRKjY.roa
Signing time: Sat 01 Jan 2022 07:56:02 +0000
ROA not before: Sat 01 Jan 2022 07:56:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52115
IP address blocks: 46.252.224.0/20 maxlen: 20
185.168.140.0/24 maxlen: 24
2a0d:cf00::/29 maxlen: 29
2a05:e780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73875426 (0x4673fe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707af45346f06b622a0ebbb4ff9ba33be6f42f1e
Validity
Not Before: Jan 1 07:56:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1decaa889c2a2e9b749cc9f5ca5608760ad12a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:07:de:0a:a6:3e:26:a1:18:cf:76:e6:3a:14:
ec:3d:43:4d:71:c1:8e:d0:c6:2d:95:9d:c5:16:21:
ac:03:73:2e:9b:af:4c:76:4f:19:f1:ad:51:eb:f8:
e8:25:2b:b1:d9:a9:d8:ac:35:79:7b:1d:71:4d:47:
c1:23:a4:47:10:a7:10:9d:88:6a:4a:9e:3d:f7:fa:
10:fd:6a:32:7b:a3:89:bc:fb:c8:c0:54:b5:fe:28:
f5:ff:af:58:6b:05:e7:f3:56:74:29:c4:94:81:3a:
30:ea:f5:fd:4d:a3:58:d6:f4:44:3d:8e:50:2e:b0:
d4:46:8d:e4:c1:51:3a:a4:9f:b5:57:af:0f:4d:be:
12:e4:33:f7:17:e4:cf:0e:8d:9e:9c:52:8f:6d:8d:
44:90:69:ec:19:32:bc:5d:e4:80:1b:93:5b:e9:a0:
e2:a8:29:1f:57:5d:f2:5a:7a:c3:64:7f:cf:b2:ee:
ae:61:d3:6e:d2:a0:bd:21:e3:2a:94:0f:3b:6e:fe:
e4:03:15:34:7c:3c:07:14:f2:9c:07:01:a6:58:16:
2d:02:b9:8a:a9:74:10:37:93:9e:ca:78:7b:da:8d:
4c:f1:68:6a:d1:24:51:57:da:0d:34:c4:fb:32:95:
2d:34:59:9c:ae:f4:e9:b0:78:ea:09:9f:c6:7c:ce:
0d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EC:AA:88:9C:2A:2E:9B:74:9C:C9:F5:CA:56:08:76:0A:D1:2A:36
X509v3 Authority Key Identifier:
keyid:70:7A:F4:53:46:F0:6B:62:2A:0E:BB:B4:FF:9B:A3:3B:E6:F4:2F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/HeyqiJwqLpt0nMn1ylYIdgrRKjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.224.0/20
185.168.140.0/24
IPv6:
2a05:e780::/29
2a0d:cf00::/29
Signature Algorithm: sha256WithRSAEncryption
3a:f4:49:7e:c2:ca:e9:1a:a1:6d:41:f3:ac:9e:aa:60:f2:99:
f4:d9:c6:b4:91:f3:c2:81:14:7e:4a:92:06:42:d3:fa:a8:04:
cf:31:3a:b5:95:7b:3c:3e:eb:71:21:c2:c6:a7:d2:f9:76:4b:
70:af:cf:8c:6f:9e:16:0c:4b:cd:f1:be:27:5b:21:32:90:b8:
63:4c:70:82:44:04:30:d3:73:c2:eb:53:c7:21:91:5e:a6:7b:
17:17:a9:9f:28:58:82:ec:50:9f:ea:94:5e:95:b4:fb:c0:87:
7f:2a:d9:47:05:aa:41:c6:01:df:a5:ce:09:b0:6e:93:10:82:
0b:2d:d0:2a:40:34:68:43:b5:68:82:67:74:a3:9d:9b:d7:0c:
a5:98:d4:a2:61:7c:93:73:14:96:8c:b5:52:60:22:c2:90:77:
b1:91:b0:14:e0:8e:0d:5d:a4:92:9d:6b:9e:c0:a2:ff:dc:14:
be:43:15:9e:ac:82:59:1a:d3:80:a4:66:28:0e:1b:f4:cc:41:
a8:c3:3a:21:90:b9:ea:e3:34:b9:2d:b9:b9:5f:1b:7f:6b:92:
38:56:02:b9:97:73:71:c9:b5:33:d5:cc:04:7f:d2:23:ce:17:
a2:83:e4:e1:fb:6e:31:40:0a:cf:9d:1e:63:25:87:49:d0:b8:
7a:83:15:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:59 2024 by rpki-client on console-ams.rpki-client.org