Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/L0X4YLlAfhrblNfpURG0KKCF_pE.roa
File: L0X4YLlAfhrblNfpURG0KKCF_pE.roa (raw, json)
Hash identifier: VrmhbbG+Q+ZHT1o5a+9t1jahV9h/AgMgaqXSOepE/is=
Subject key identifier: 2F:45:F8:60:B9:40:7E:1A:DB:94:D7:E9:51:11:B4:28:A0:85:FE:91
Certificate issuer: /CN=c49c88442ba97345bc0106559e6fa786944adca4
Certificate serial: 01825BC95E7AAB64BCF414D959D497F9BA4D
Authority key identifier: C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/L0X4YLlAfhrblNfpURG0KKCF_pE.roa
Signing time: Mon 01 Aug 2022 23:41:39 +0000
ROA not before: Mon 01 Aug 2022 23:41:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8749
IP address blocks: 164.138.88.0/21 maxlen: 21
185.3.180.0/22 maxlen: 22
159.253.168.0/21 maxlen: 21
46.183.128.0/22 maxlen: 22
46.183.128.0/21 maxlen: 21
46.183.132.0/23 maxlen: 23
46.183.135.0/24 maxlen: 24
46.183.134.0/24 maxlen: 24
212.19.0.0/19 maxlen: 19
94.125.48.0/21 maxlen: 21
212.19.18.0/24 maxlen: 24
212.19.24.0/24 maxlen: 24
2a00:c040::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5b:c9:5e:7a:ab:64:bc:f4:14:d9:59:d4:97:f9:ba:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49c88442ba97345bc0106559e6fa786944adca4
Validity
Not Before: Aug 1 23:41:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f45f860b9407e1adb94d7e95111b428a085fe91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:62:6b:e2:55:0b:7a:75:5e:22:45:29:6b:
c7:aa:10:2d:79:0e:ae:46:21:82:35:f5:9f:af:28:
23:44:b4:c3:81:fd:6c:4e:1c:5f:18:78:d9:54:7f:
df:f1:fa:bd:7d:c9:a2:e2:25:25:52:cd:2f:4c:7b:
ab:6e:b5:e4:ab:e6:ad:8b:c4:d2:cf:13:34:c1:40:
de:be:01:fa:d1:62:0c:d0:1f:67:de:63:4b:2c:80:
f9:78:4d:ee:9c:ad:51:74:53:b6:7a:57:1d:68:84:
50:ce:81:fe:b4:9e:aa:ca:ba:03:0c:ce:df:83:4a:
63:59:66:9e:3e:43:0f:29:16:42:a3:3b:f4:55:e5:
a6:c9:9f:29:20:56:0c:f4:5d:ff:36:af:db:f7:b8:
89:e3:4f:b4:ff:e9:82:01:55:96:90:55:ba:df:7e:
8c:3e:21:e9:c4:ff:36:e1:78:cd:6a:ef:a6:39:07:
bc:69:78:8d:62:fe:1a:ad:77:1a:73:17:58:5c:aa:
15:42:36:a6:d4:5a:8e:f4:5c:f4:90:d9:e9:a2:ed:
58:44:00:dc:d5:62:d0:2e:7b:df:a7:59:06:31:ec:
00:cd:5c:62:c8:75:6a:8a:47:2c:9e:35:9c:c4:31:
9d:38:44:42:21:2e:80:bf:27:80:08:91:20:d1:5e:
3d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:45:F8:60:B9:40:7E:1A:DB:94:D7:E9:51:11:B4:28:A0:85:FE:91
X509v3 Authority Key Identifier:
keyid:C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/L0X4YLlAfhrblNfpURG0KKCF_pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.128.0/21
94.125.48.0/21
159.253.168.0/21
164.138.88.0/21
185.3.180.0/22
212.19.0.0/19
IPv6:
2a00:c040::/32
Signature Algorithm: sha256WithRSAEncryption
96:95:bb:6d:29:e9:04:48:8e:07:80:5f:a1:8e:7b:e5:77:90:
43:ba:27:4f:ed:57:ff:6e:da:85:84:51:85:48:d7:b2:0a:fa:
d4:56:b3:2d:83:13:9e:f6:5f:64:b0:59:4a:a7:94:39:cc:2c:
c7:86:07:d6:51:6f:91:4e:34:9f:62:57:a8:41:86:48:37:e9:
13:3c:14:08:95:ab:2d:cb:04:e6:ec:db:49:eb:f6:a3:3c:b8:
d8:83:4b:e2:c2:c0:89:7c:e7:63:9e:a8:a3:f6:9c:eb:c3:41:
5b:f2:56:8e:7d:94:66:64:0a:d9:5d:27:5d:30:b0:41:32:67:
4e:2d:f0:f2:ec:c6:ef:d4:3a:25:2c:b5:fa:c8:9f:db:1f:64:
e2:88:76:ca:35:f6:e9:d4:d5:49:0b:66:16:2f:a6:50:12:92:
60:b6:02:4b:1c:3e:92:8f:0d:e0:eb:a3:2e:fc:90:8b:4c:fc:
e2:48:df:59:81:5a:8b:50:6c:10:51:8a:ba:cf:23:4d:dd:45:
7e:4f:82:a5:8c:7a:f4:15:c5:df:56:9c:6f:05:1e:ed:39:a4:
27:e9:39:c1:ac:df:24:0e:f7:0c:7b:5a:a4:99:a1:4d:6d:8d:
e1:46:f1:bf:ba:c0:8f:38:67:d8:5f:6b:f8:3f:25:2c:78:4e:
00:14:33:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:33 2024 by rpki-client on console-ams.rpki-client.org