Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/DBqa3vx59kFt9s9Kq0SGRDzDCb4.roa
File: DBqa3vx59kFt9s9Kq0SGRDzDCb4.roa (raw, json)
Hash identifier: 95Hl3iqyyvH2SfpauqOqAsjraryE3vwbUZ0x/qzRnxs=
Subject key identifier: 0C:1A:9A:DE:FC:79:F6:41:6D:F6:CF:4A:AB:44:86:44:3C:C3:09:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 02400FC8
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/DBqa3vx59kFt9s9Kq0SGRDzDCb4.roa
Signing time: Sat 01 Jan 2022 16:11:12 +0000
ROA not before: Sat 01 Jan 2022 16:11:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198957
IP address blocks: 46.30.136.0/24 maxlen: 24
46.30.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37752776 (0x2400fc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Jan 1 16:11:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c1a9adefc79f6416df6cf4aab4486443cc309be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:b5:15:de:58:04:32:bf:3d:eb:af:6b:00:
ec:d1:8a:8d:b5:54:8c:f6:ab:65:f6:c1:30:d3:ba:
d3:38:f2:b1:6a:62:14:38:c3:23:9d:44:77:9f:7d:
60:50:d9:d7:68:7d:98:c1:3d:5e:6d:d0:9f:7c:95:
50:da:49:e2:79:94:7d:39:85:03:e9:32:40:8f:db:
61:d2:8d:94:f2:83:63:a8:e8:73:70:5e:02:81:38:
f7:27:09:8e:39:06:e2:59:40:4a:06:5e:78:00:b1:
48:47:d2:33:f0:6f:5c:3d:a4:a6:7e:4f:05:75:73:
75:a8:ea:0d:f4:0d:0d:51:06:41:1d:d2:88:3b:29:
c5:b6:5c:4d:8d:c5:62:dd:67:98:fe:5f:d7:b0:8b:
ea:86:90:70:48:d8:11:1f:80:b5:04:8a:97:f8:ae:
8a:06:03:fb:8d:25:dd:96:2c:5b:46:9b:48:6c:b5:
f5:20:52:56:7d:48:6f:c6:1a:5e:2d:d9:bc:88:e1:
dc:6d:83:11:a2:3b:6f:8b:05:02:e9:e6:f1:99:4c:
43:25:a5:a9:2c:a7:a4:ce:91:52:cb:17:0a:87:8b:
26:85:61:66:6a:0c:58:b9:d3:51:54:30:e5:a1:8a:
f4:94:34:58:9e:80:6e:e9:b1:d2:dc:ef:5d:ff:ff:
8a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1A:9A:DE:FC:79:F6:41:6D:F6:CF:4A:AB:44:86:44:3C:C3:09:BE
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/DBqa3vx59kFt9s9Kq0SGRDzDCb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.136.0/24
46.30.140.0/24
Signature Algorithm: sha256WithRSAEncryption
51:24:84:76:ca:47:1f:91:59:d3:df:9d:ba:5a:03:49:93:91:
d1:4c:c3:5b:46:3b:d9:c4:01:55:ca:fe:09:22:f7:99:56:23:
64:ba:a5:d0:ff:ef:ca:e8:b5:f1:18:b8:6f:18:e6:e3:fd:b7:
39:d6:46:dc:57:ab:fa:71:70:0e:41:50:50:0e:d8:9a:eb:1c:
a8:70:7f:75:79:d9:be:70:79:08:81:0d:16:4c:0c:92:db:e2:
da:c6:64:25:22:78:61:91:15:0d:c7:ff:60:38:16:f5:f8:08:
09:90:9c:14:03:a7:e4:31:39:c7:25:23:ed:c6:03:9d:cc:32:
f4:a7:0a:bb:be:16:29:f2:86:7b:f2:11:5d:07:1a:78:a9:15:
63:fb:18:a1:86:ac:e8:a2:87:4b:83:1f:18:18:ef:3a:1f:71:
82:04:67:b5:85:80:c1:a4:50:1c:0c:1e:de:ef:5f:f7:6b:ce:
e0:04:00:6c:d4:af:6a:f1:3a:d3:8a:91:ce:b3:3b:da:29:ea:
6b:75:90:fa:20:bc:6e:b7:c0:af:0b:30:b5:eb:da:ff:54:fe:
18:6d:f9:c8:64:d2:07:e4:37:31:a2:1e:ac:6a:85:56:2b:74:
ce:05:60:be:ea:7f:0c:b0:47:e7:50:7b:b5:59:66:13:cf:0f:
11:f4:d0:45
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAkAPyDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZDBjNmIyYmQyOWQzMTY4NDg3YzllYzVmZGU0YzNmYzQyZDljZmJlMB4XDTIyMDEw
MTE2MTExMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGMxYTlhZGVmYzc5
ZjY0MTZkZjZjZjRhYWI0NDg2NDQzY2MzMDliZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL8DtRXeWAQyvz3rr2sA7NGKjbVUjParZfbBMNO60zjysWpi
FDjDI51Ed599YFDZ12h9mME9Xm3Qn3yVUNpJ4nmUfTmFA+kyQI/bYdKNlPKDY6jo
c3BeAoE49ycJjjkG4llASgZeeACxSEfSM/BvXD2kpn5PBXVzdajqDfQNDVEGQR3S
iDspxbZcTY3FYt1nmP5f17CL6oaQcEjYER+AtQSKl/iuigYD+40l3ZYsW0abSGy1
9SBSVn1Ib8YaXi3ZvIjh3G2DEaI7b4sFAunm8ZlMQyWlqSynpM6RUssXCoeLJoVh
ZmoMWLnTUVQw5aGK9JQ0WJ6Abumx0tzvXf//iq0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQMGpre/Hn2QW32z0qrRIZEPMMJvjAfBgNVHSMEGDAWgBT9DGsr0p0xaEh8
nsX95MP8QtnPvjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19ReHJLOUtkTVdoSWZKN0ZfZVREX0VMWno3NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTIvNDM1ZDg4LTM3MWUtNGY4Ni1hOTBhLWNmYmJjMTQ2NzFhMy8x
L0RCcWEzdng1OWtGdDlzOUtxMFNHUkR6RENiNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIv
NDM1ZDg4LTM3MWUtNGY4Ni1hOTBhLWNmYmJjMTQ2NzFhMy8xL19ReHJLOUtkTVdo
SWZKN0ZfZVREX0VMWno3NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAC4eiAMEAC4ejDANBgkqhkiG9w0B
AQsFAAOCAQEAUSSEdspHH5FZ09+duloDSZOR0UzDW0Y72cQBVcr+CSL3mVYjZLql
0P/vyui18Ri4bxjm4/23OdZG3Fer+nFwDkFQUA7YmuscqHB/dXnZvnB5CIENFkwM
ktvi2sZkJSJ4YZEVDcf/YDgW9fgICZCcFAOn5DE5xyUj7cYDncwy9KcKu74WKfKG
e/IRXQcaeKkVY/sYoYas6KKHS4MfGBjvOh9xggRntYWAwaRQHAwe3u9f92vO4AQA
bNSvavE604qRzrM72inqa3WQ+iC8brfArwswteva/1T+GG35yGTSB+Q3MaIerGqF
Vit0zgVgvup/DLBH51B7tVlmE88PEfTQRQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:02 2024 by rpki-client on console-fra.rpki-client.org