Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/fTaNqcqb8LossgMqt6x767d3JD8.roa
File: fTaNqcqb8LossgMqt6x767d3JD8.roa (raw, json)
Hash identifier: EWYnDzwHzAgCchgOZ/R9HGHE04jVlmbeMs7h8r5QsTg=
Subject key identifier: 7D:36:8D:A9:CA:9B:F0:BA:2C:B2:03:2A:B7:AC:7B:EB:B7:77:24:3F
Certificate issuer: /CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Certificate serial: 08D285FE
Authority key identifier: 8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/fTaNqcqb8LossgMqt6x767d3JD8.roa
Signing time: Sat 01 Jan 2022 04:59:16 +0000
ROA not before: Sat 01 Jan 2022 04:59:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12637
IP address blocks: 46.174.138.0/24 maxlen: 24
46.174.137.0/24 maxlen: 24
46.174.136.0/24 maxlen: 24
2a09:dd81::/32 maxlen: 32
2a09:dd82::/32 maxlen: 32
2a09:dd80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148014590 (0x8d285fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Validity
Not Before: Jan 1 04:59:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d368da9ca9bf0ba2cb2032ab7ac7bebb777243f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:18:ea:39:11:5a:96:6b:be:01:60:a2:d0:
8e:dd:2c:ad:55:c4:b8:99:90:67:a0:6c:b0:72:cc:
0c:ed:1d:56:17:b3:74:d8:d3:87:b8:e2:7a:98:64:
2f:d0:17:48:88:bb:14:2d:65:af:6a:9a:61:f3:e9:
1d:90:2f:c0:ae:22:2d:38:43:a4:c6:5c:f1:fa:80:
2a:df:7e:33:b7:45:e2:ab:20:5e:8f:5d:86:62:0b:
d5:c8:d4:df:b6:ea:75:1a:a9:80:c3:b5:6f:c4:3c:
09:d1:7e:d8:38:49:36:ab:d0:55:d0:80:43:21:1b:
9c:10:1b:06:0f:5f:08:48:75:0f:b9:c6:f6:26:e0:
f3:92:80:49:82:1d:27:13:14:86:27:46:e9:07:84:
23:f3:4d:ec:52:d8:a1:21:25:9c:81:c8:93:e2:cb:
24:26:96:19:1c:5e:17:d9:df:71:e7:39:5d:a3:c6:
72:2f:02:64:44:01:2c:2d:07:f2:ea:ee:e4:89:02:
8a:62:29:3e:9b:1a:2a:ad:9f:ff:21:2b:18:13:2b:
7f:fc:45:c9:66:0c:48:6a:7b:a4:b1:13:30:b7:e6:
4f:05:f8:4f:06:34:21:4a:1e:50:f9:19:b3:64:5e:
c4:5f:cd:8f:c5:db:a6:d1:16:68:9a:ef:74:38:c6:
11:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:36:8D:A9:CA:9B:F0:BA:2C:B2:03:2A:B7:AC:7B:EB:B7:77:24:3F
X509v3 Authority Key Identifier:
keyid:8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/fTaNqcqb8LossgMqt6x767d3JD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.136.0-46.174.138.255
IPv6:
2a09:dd80::-2a09:dd82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
11:9b:cd:31:d5:53:87:af:e9:9a:68:5d:fa:d0:88:cf:71:cb:
dc:70:de:b3:a3:e7:0e:73:6d:45:03:20:74:a3:a7:36:10:20:
1a:22:1a:95:ad:d6:ca:fe:71:e5:dc:98:da:96:52:e4:c4:e0:
16:e4:a5:ed:8f:c2:6e:fa:85:1a:27:4a:c7:21:3a:a6:19:e6:
a1:ce:f7:20:9e:8d:f1:5f:a2:15:16:a5:8e:04:af:91:b4:b6:
f0:73:10:6d:cf:c0:7d:c9:56:ff:90:1c:85:9d:92:16:61:78:
d4:59:18:45:63:43:a0:34:8a:a1:f3:87:05:a3:09:7f:d9:cd:
6b:cd:ba:13:3d:ff:d1:a2:30:8b:95:4a:b9:61:ad:7e:b5:cc:
ec:a7:fe:3a:ae:9a:2b:6a:d9:5d:4f:44:db:ba:32:7f:4b:c2:
e2:64:18:de:8f:26:28:46:e1:3c:1d:96:96:9b:f3:f6:1c:d3:
c3:7d:15:af:2d:a5:67:77:cd:30:95:d1:7c:94:5e:d5:43:74:
c0:03:87:7d:cd:ec:66:8d:77:3d:b5:62:26:e8:7f:e2:5d:32:
fe:65:f5:4b:79:60:7c:56:19:71:8b:4d:92:e9:75:f8:6e:8b:
fb:27:ec:14:08:3b:e4:8a:9d:d8:d8:e8:e7:8c:21:fb:b5:4b:
65:d1:ad:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:09 2024 by rpki-client on console-ams.rpki-client.org