Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/KG2vt4Z0oWSU1jgB1-uprGNLuH8.roa
File: KG2vt4Z0oWSU1jgB1-uprGNLuH8.roa (raw, json)
Hash identifier: Jw4VD0D9wi/oEZohZG6LgkR+YNkg8WgctmBWF2jI7mM=
Subject key identifier: 28:6D:AF:B7:86:74:A1:64:94:D6:38:01:D7:EB:A9:AC:63:4B:B8:7F
Certificate issuer: /CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Certificate serial: 37F5A90D
Authority key identifier: 8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/KG2vt4Z0oWSU1jgB1-uprGNLuH8.roa
Signing time: Sat 01 Jan 2022 09:55:48 +0000
ROA not before: Sat 01 Jan 2022 09:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198291
IP address blocks: 185.124.44.0/22 maxlen: 24
46.232.138.0/24 maxlen: 24
46.232.139.0/24 maxlen: 24
46.232.136.0/21 maxlen: 24
46.232.136.0/24 maxlen: 24
46.232.137.0/24 maxlen: 24
46.232.141.0/24 maxlen: 24
46.232.142.0/24 maxlen: 24
46.232.140.0/24 maxlen: 24
46.232.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938846477 (0x37f5a90d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Validity
Not Before: Jan 1 09:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=286dafb78674a16494d63801d7eba9ac634bb87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1a:7e:b9:1d:42:12:fb:51:ce:de:18:5e:e5:
c2:af:48:03:14:aa:3a:6d:03:ab:fa:36:db:c1:25:
1c:da:3d:9f:d6:1e:10:53:51:50:41:f3:a9:9b:b2:
3a:31:f0:d6:7e:e8:98:68:36:21:79:f3:1b:d6:32:
ae:b0:46:fc:1c:78:63:a8:f5:87:54:52:3c:d5:5b:
89:a6:3d:6b:ad:ba:2e:6c:3b:e7:cd:00:7f:d1:0c:
32:06:82:e6:28:e4:ee:cd:74:19:3b:40:02:16:f7:
41:2f:82:79:c8:0b:8c:d3:14:e9:77:89:49:dd:c3:
91:c0:13:5c:ec:21:68:00:49:61:b9:50:99:42:27:
12:0b:fe:ba:3f:46:60:fb:60:64:cb:09:90:96:f2:
1e:08:28:90:e1:c7:c6:54:79:1f:58:e4:35:47:69:
b0:63:d7:d7:9c:b4:d2:29:b6:95:98:f5:9a:90:57:
2a:18:9d:b8:52:e2:a3:ea:15:d8:9d:a7:bc:4b:44:
d3:b1:da:99:52:88:75:ac:e9:ea:8b:ec:88:2c:22:
d7:46:42:f7:1e:ff:b6:70:a0:7d:d5:72:f2:96:4e:
9f:df:1d:41:1a:53:ca:3d:d9:bb:a0:cf:ab:f1:e3:
ea:ab:13:ad:67:36:d2:d7:b9:d8:74:ac:8c:1d:a9:
bd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6D:AF:B7:86:74:A1:64:94:D6:38:01:D7:EB:A9:AC:63:4B:B8:7F
X509v3 Authority Key Identifier:
keyid:8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/KG2vt4Z0oWSU1jgB1-uprGNLuH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.136.0/21
185.124.44.0/22
Signature Algorithm: sha256WithRSAEncryption
35:a5:ef:f5:f8:be:77:6e:d5:69:df:3a:ba:2b:33:0e:52:f5:
3d:b7:ae:e9:61:3d:53:e3:b0:ea:b5:d3:02:9a:53:67:e5:e0:
91:94:ea:cf:03:93:75:7e:32:4e:ba:53:5c:58:48:5d:36:3a:
3a:fc:cb:9d:c0:b5:64:0d:23:c6:b0:f2:68:60:3c:ec:48:60:
c4:b0:e0:05:40:c5:99:8f:e0:78:ff:7a:52:45:4e:6e:b8:73:
4e:52:e2:96:5b:3a:19:8b:25:3d:40:d3:0c:29:ba:a6:a7:2f:
0a:3e:9e:f4:1a:38:23:cf:77:1c:84:36:de:7c:f6:10:d7:32:
7e:00:c7:33:67:d6:f4:be:ec:03:12:0a:d0:ca:37:5b:a1:4c:
a9:b8:dc:53:f9:b0:f4:5c:dc:a9:40:92:3f:fc:3f:fb:58:2a:
80:9c:98:f5:fb:6c:67:27:38:98:ce:8e:e8:fa:53:31:a7:10:
94:85:cd:b5:b4:fc:85:ca:8b:27:09:fa:ea:20:68:5d:e6:73:
24:a4:b9:cd:88:75:e1:a6:c0:c5:1d:d7:8f:99:9e:b1:af:68:
37:e3:88:f4:72:c8:c8:1f:d7:84:a9:0a:3e:36:7d:d9:84:c0:
e8:83:4e:32:de:c8:82:55:2a:04:58:4c:11:41:37:05:3f:ed:
8f:95:a1:9d
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEN/WpDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZjZkMmFjOWI2OGMzMjcxMWY3ZTg3ZmRlNTIzNDU4NGY1YmNmNGYyMB4XDTIyMDEw
MTA5NTU0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjg2ZGFmYjc4Njc0
YTE2NDk0ZDYzODAxZDdlYmE5YWM2MzRiYjg3ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM4afrkdQhL7Uc7eGF7lwq9IAxSqOm0Dq/o228ElHNo9n9Ye
EFNRUEHzqZuyOjHw1n7omGg2IXnzG9YyrrBG/Bx4Y6j1h1RSPNVbiaY9a626Lmw7
580Af9EMMgaC5ijk7s10GTtAAhb3QS+CecgLjNMU6XeJSd3DkcATXOwhaABJYblQ
mUInEgv+uj9GYPtgZMsJkJbyHggokOHHxlR5H1jkNUdpsGPX15y00im2lZj1mpBX
KhiduFLio+oV2J2nvEtE07HamVKIdazp6ovsiCwi10ZC9x7/tnCgfdVy8pZOn98d
QRpTyj3Zu6DPq/Hj6qsTrWc20te52HSsjB2pvZ8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQoba+3hnShZJTWOAHX66msY0u4fzAfBgNVHSMEGDAWgBSPbSrJtowycR9+
h/3lI0WE9bz08jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2oyMHF5YmFNTW5FZmZvZjk1U05GaFBXODlQSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWQvZTc4ZWUxLTBhMmEtNDZjOS05NzY5LWY5NGYwODRiMWVlNy8x
L0tHMnZ0NFowb1dTVTFqZ0IxLXVwckdOTHVIOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQv
ZTc4ZWUxLTBhMmEtNDZjOS05NzY5LWY5NGYwODRiMWVlNy8xL2oyMHF5YmFNTW5F
ZmZvZjk1U05GaFBXODlQSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAy7oiAMEArl8LDANBgkqhkiG9w0B
AQsFAAOCAQEANaXv9fi+d27Vad86uiszDlL1Pbeu6WE9U+Ow6rXTAppTZ+XgkZTq
zwOTdX4yTrpTXFhIXTY6OvzLncC1ZA0jxrDyaGA87EhgxLDgBUDFmY/geP96UkVO
brhzTlLills6GYslPUDTDCm6pqcvCj6e9Bo4I893HIQ23nz2ENcyfgDHM2fW9L7s
AxIK0Mo3W6FMqbjcU/mw9FzcqUCSP/w/+1gqgJyY9ftsZyc4mM6O6PpTMacQlIXN
tbT8hcqLJwn66iBoXeZzJKS5zYh14abAxR3Xj5mesa9oN+OI9HLIyB/XhKkKPjZ9
2YTA6INOMt7IglUqBFhMEUE3BT/tj5WhnQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:37 2024 by rpki-client on console-fra.rpki-client.org