Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/KTA14emuliwdOiIQVGgGZfsbvoI.roa
File: KTA14emuliwdOiIQVGgGZfsbvoI.roa (raw, json)
Hash identifier: Y1szEiHy0s+pf4vrtdTFT9XUn3x0w20XbRIXSyJ5JcI=
Subject key identifier: 29:30:35:E1:E9:AE:96:2C:1D:3A:22:10:54:68:06:65:FB:1B:BE:82
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 023E8D1C
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/KTA14emuliwdOiIQVGgGZfsbvoI.roa
Signing time: Sat 01 Jan 2022 16:11:11 +0000
ROA not before: Sat 01 Jan 2022 16:11:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196881
IP address blocks: 46.30.137.0/24 maxlen: 24
46.30.138.0/23 maxlen: 23
46.30.138.0/24 maxlen: 24
46.30.139.0/24 maxlen: 24
185.156.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37653788 (0x23e8d1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Jan 1 16:11:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=293035e1e9ae962c1d3a221054680665fb1bbe82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f4:b1:37:b5:b1:68:21:db:54:45:20:d6:fc:
be:22:8e:d7:b7:9c:3a:9e:fb:b6:3c:22:6c:c0:31:
d5:7f:f6:40:5a:b9:43:86:c6:d7:3d:3a:ef:23:1b:
f6:7c:11:41:86:66:35:b1:1d:da:ad:c6:bc:ba:7e:
3c:b2:db:24:2f:b8:c4:db:df:ef:55:26:7b:b0:8f:
db:33:e3:ce:6c:12:aa:0f:0a:6f:37:94:ae:5d:61:
0f:bc:db:a4:b6:15:f7:e1:ed:24:b4:fa:0a:c8:43:
81:7b:cc:dc:38:9a:8d:00:99:05:0b:73:b1:90:38:
94:27:31:48:c4:ca:6b:37:01:82:bc:61:1d:17:e9:
92:c8:2d:dd:da:b1:64:72:c3:64:77:1b:a1:2f:8a:
7d:a1:a4:30:16:03:d8:2d:4f:63:56:5b:89:dd:43:
53:c4:52:3c:17:7e:ef:dc:98:f8:e9:8d:cc:b9:5c:
71:e8:ff:a1:fd:d8:82:9b:d4:70:5a:3d:9b:db:41:
65:f5:cd:94:02:f0:75:31:23:e3:20:f5:0b:46:e9:
f3:c4:97:60:9d:16:9d:bb:36:11:ca:44:c3:8c:76:
bc:19:86:c8:6c:40:45:e3:f2:be:25:a1:04:84:97:
76:a9:4a:df:0c:dc:2d:c5:79:70:13:5c:85:90:3d:
7f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:30:35:E1:E9:AE:96:2C:1D:3A:22:10:54:68:06:65:FB:1B:BE:82
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/KTA14emuliwdOiIQVGgGZfsbvoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.137.0-46.30.139.255
185.156.104.0/24
Signature Algorithm: sha256WithRSAEncryption
36:62:9c:fb:5d:f1:93:22:69:13:29:5d:88:c7:ea:65:04:12:
11:f1:61:29:ee:bc:73:16:f4:b7:e7:5e:e9:09:d1:bb:1f:61:
3f:90:58:d3:95:4d:d0:ef:24:bd:71:b4:f1:18:75:13:b1:e0:
6e:a8:5c:8a:7f:69:29:0a:a7:2e:b0:cc:5f:cc:96:d9:47:8d:
02:b0:ce:44:a2:88:67:ee:ce:97:e9:a7:fc:d1:06:99:9c:11:
4f:05:4b:e3:46:c3:31:ed:5b:3a:85:3b:54:ee:5d:75:88:05:
01:37:00:9c:6e:09:42:a5:92:dc:91:0c:b4:c7:cc:2c:99:73:
d1:ec:a0:b5:85:55:48:57:00:f7:dc:32:a9:3d:36:d1:ad:d9:
14:0c:60:7c:56:a8:6e:48:bb:de:54:69:4e:1c:2e:d6:12:63:
d0:2e:2e:0b:d0:cc:3a:a5:1b:37:17:00:2b:0a:0e:cf:1a:de:
92:be:c6:37:f6:6d:f8:b1:9e:19:ed:a5:31:ed:70:ca:cd:3d:
c6:ff:e6:27:84:8c:59:9a:20:5b:7a:61:3a:21:b1:59:79:8c:
91:df:e2:e2:4a:a1:54:7f:f1:08:d2:69:fd:4f:f1:7e:17:d7:
a6:1c:a1:3e:71:a5:17:aa:6c:43:ed:5d:ff:20:57:a3:d3:84:
ca:7e:46:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:06 2024 by rpki-client on console-ams.rpki-client.org