Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/1rrroLJUHPUCRr7hvARh3MMnKeg.roa
File: 1rrroLJUHPUCRr7hvARh3MMnKeg.roa (raw, json)
Hash identifier: s0flRWgI4GcV4Vo3IQcrXUCV8LvczOopNoyQg7LbqZM=
Subject key identifier: D6:BA:EB:A0:B2:54:1C:F5:02:46:BE:E1:BC:04:61:DC:C3:27:29:E8
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 03C77BB2
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/1rrroLJUHPUCRr7hvARh3MMnKeg.roa
Signing time: Sat 01 Jan 2022 03:57:31 +0000
ROA not before: Sat 01 Jan 2022 03:57:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16552
IP address blocks: 46.31.233.0/24 maxlen: 24
46.31.232.0/24 maxlen: 24
46.31.239.0/24 maxlen: 24
46.31.235.0/24 maxlen: 24
46.31.238.0/24 maxlen: 24
46.31.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63404978 (0x3c77bb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: Jan 1 03:57:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6baeba0b2541cf50246bee1bc0461dcc32729e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a4:44:db:a2:b9:0d:05:11:d2:a0:f2:72:d3:
fe:8a:2e:cb:d6:ea:91:08:94:e3:b2:d0:4d:9b:99:
47:7e:c2:f3:14:63:e3:d9:d7:6b:af:74:1e:dd:d0:
f5:1d:b3:13:d3:f7:3f:59:f5:2d:9a:aa:92:94:a4:
9e:35:15:64:33:ac:43:0b:06:ee:d4:1d:3b:7c:8c:
40:7a:d3:ad:47:34:49:fa:fb:f6:98:d5:af:c7:25:
1a:91:96:20:a0:18:03:62:ab:29:b2:41:45:34:e6:
e6:8c:8c:59:ad:64:da:51:13:b3:13:dc:6f:d2:76:
23:b1:e7:42:b7:b1:a8:aa:c0:69:e5:82:76:3e:27:
f0:99:d8:4f:7a:fb:5b:ac:c2:9b:84:15:29:f9:0d:
e2:15:22:7b:b9:18:f8:21:c5:2f:71:fc:92:a6:73:
eb:2b:4e:e5:ee:1f:7d:96:20:e4:22:e4:ff:bb:e4:
7b:2d:11:26:e7:51:c4:37:45:98:da:a2:a0:de:f4:
2e:1b:8c:2f:0b:76:46:bd:43:34:fa:5f:b9:2c:61:
54:88:c5:40:b6:b3:fb:8f:18:61:66:11:67:59:17:
62:14:11:de:94:6b:a6:a2:7f:0d:ac:06:03:64:1f:
9f:f0:9a:90:7a:93:d0:75:ad:1d:a4:63:01:49:47:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BA:EB:A0:B2:54:1C:F5:02:46:BE:E1:BC:04:61:DC:C3:27:29:E8
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/1rrroLJUHPUCRr7hvARh3MMnKeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.232.0/22
46.31.238.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:d1:a3:85:69:5c:48:22:db:2e:26:9b:89:73:0c:9b:de:54:
3e:b8:7d:5c:68:5f:81:a9:ec:c6:6a:cd:97:3e:91:6d:78:4b:
c7:b4:f0:9d:7d:ac:d3:de:17:80:25:fc:3e:a2:ed:9f:eb:1a:
80:ba:53:70:e1:9f:9c:03:0c:21:7c:73:5d:b0:1f:02:60:52:
04:ff:18:8f:d8:1b:37:5f:d5:28:d6:95:a6:d1:5a:c9:9c:9e:
44:0a:38:41:d4:e5:9f:ea:af:d6:85:5b:1b:05:23:4e:5a:56:
6d:e2:3d:58:69:56:c9:60:cb:4e:f9:96:6b:24:86:c5:01:6c:
fe:79:2a:1f:8c:2f:f2:80:3c:b0:68:46:88:88:18:81:02:19:
a3:62:71:41:1b:0f:e9:39:d8:86:c9:dd:63:fd:c0:be:fa:ca:
12:ce:81:e2:a2:95:a1:47:eb:9e:bb:c6:5e:ed:e1:9e:39:59:
d9:bc:92:b8:b4:7d:c0:5b:38:e1:94:48:59:24:10:2b:e9:eb:
58:7d:9d:91:c0:87:d0:ec:a1:77:22:23:62:3f:7a:30:bb:9f:
5e:a1:e9:a4:e2:11:4e:94:ee:b3:86:3e:6c:eb:59:56:00:42:
31:8c:6c:f7:8a:9d:bd:b1:16:24:6b:92:72:7d:7f:68:8b:7c:
bc:68:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:07 2024 by rpki-client on console-fra.rpki-client.org