Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/42NZRfrFQ13IaTy1ajxJCIy-4bc.roa
File: 42NZRfrFQ13IaTy1ajxJCIy-4bc.roa (raw, json)
Hash identifier: ZCdpnvfuLcO6ZPcT6AqHx2huUKPhF17tdi5EIs4TRLI=
Subject key identifier: E3:63:59:45:FA:C5:43:5D:C8:69:3C:B5:6A:3C:49:08:8C:BE:E1:B7
Certificate issuer: /CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Certificate serial: 09E48F99
Authority key identifier: 4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/42NZRfrFQ13IaTy1ajxJCIy-4bc.roa
Signing time: Sat 01 Jan 2022 02:01:02 +0000
ROA not before: Sat 01 Jan 2022 02:01:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62459
IP address blocks: 185.35.39.0/24 maxlen: 24
46.243.60.0/24 maxlen: 24
185.35.38.0/24 maxlen: 24
185.35.36.0/24 maxlen: 24
185.35.36.0/22 maxlen: 22
185.35.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165973913 (0x9e48f99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Validity
Not Before: Jan 1 02:01:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3635945fac5435dc8693cb56a3c49088cbee1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:89:a5:59:ee:a0:21:d6:5c:e8:6e:24:cd:
c1:b2:d3:10:57:33:23:1c:ee:d0:a5:67:92:12:cb:
c2:ff:44:fd:43:63:cf:68:6f:31:98:da:73:25:a7:
ab:7c:69:0f:8c:d0:18:3b:9d:54:ae:ab:65:3f:33:
5e:ee:86:39:ef:13:9e:00:bf:ec:21:0b:ff:09:93:
69:01:0c:4d:a3:cb:a4:fa:6d:18:7d:0b:f7:e4:3d:
8e:8c:b6:e2:3e:b8:15:2c:08:00:3a:f0:3a:54:9b:
e0:6e:03:28:48:20:47:f4:c1:f3:75:3f:07:83:33:
b0:bd:d2:f7:d0:fa:d2:b3:68:be:af:77:63:90:be:
9e:dc:40:cb:43:48:ac:64:10:28:31:ed:6b:db:38:
14:91:f0:12:9d:d7:5c:ce:16:f2:c7:90:f8:fd:5a:
a2:35:92:67:4d:bb:13:dc:ae:5e:8d:d5:e2:05:60:
24:8e:86:a5:c8:27:49:1b:18:a2:7b:3a:4d:12:d1:
1d:ae:66:6a:d4:45:35:1b:e0:e8:62:33:e1:9a:65:
53:bc:0e:e1:49:3a:0d:7d:a8:8c:ac:ea:d7:30:1f:
72:b1:5c:5c:39:7c:85:87:f1:4c:8b:ff:ae:40:b4:
c0:41:1a:09:e1:8d:00:03:9f:e4:75:69:ac:ab:7b:
86:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:63:59:45:FA:C5:43:5D:C8:69:3C:B5:6A:3C:49:08:8C:BE:E1:B7
X509v3 Authority Key Identifier:
keyid:4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/42NZRfrFQ13IaTy1ajxJCIy-4bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.60.0/24
185.35.36.0/22
Signature Algorithm: sha256WithRSAEncryption
76:f9:95:70:34:c3:e3:19:9c:80:cd:53:02:dc:51:60:38:0a:
66:d6:a6:4d:26:88:fd:8e:1f:56:7b:e7:e5:36:6f:5f:03:6d:
42:53:2c:85:b2:74:9d:d6:67:61:0e:92:76:89:38:9d:77:ba:
1d:cf:17:e3:33:4f:ff:82:ba:d6:16:23:89:3c:f7:e4:e9:11:
d9:f2:a1:c8:73:4e:a0:d4:31:8a:8f:8b:e1:b0:fe:3c:a5:73:
49:ed:23:0f:4c:af:ed:39:c3:1e:6d:28:bf:59:1e:be:55:99:
9c:a3:73:1e:2b:9a:e8:7a:c6:01:53:fe:0d:1b:8c:84:ff:63:
9b:dc:5e:0f:12:29:f1:27:fa:cf:dd:44:68:9b:3d:03:a6:8a:
8f:4f:d8:56:d1:2a:7e:10:c6:0c:8b:0f:02:68:0d:67:32:92:
b5:d6:02:22:ea:0a:23:4c:60:58:ee:ea:84:bb:a5:22:bc:bb:
a3:91:82:31:08:9c:42:cb:e8:a2:6b:2e:ae:d2:2a:fc:32:2b:
55:58:9b:ee:b7:7f:12:e1:09:99:2f:4f:a3:d6:f5:88:10:6d:
de:ee:5b:db:d2:b4:36:08:2c:1f:9c:37:65:7b:d5:d5:91:e5:
4e:32:49:4e:0b:f2:41:50:09:49:d2:09:f0:ce:2a:0a:f4:1a:
a0:a4:61:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:06 2024 by rpki-client on console-ams.rpki-client.org