Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/J08y1nOQ-8sKBDtyIdaMGXYvx1k.roa
File: J08y1nOQ-8sKBDtyIdaMGXYvx1k.roa (raw, json)
Hash identifier: DvSgBpKL6mFujXHishoW/F3yfCkzy0MMy+/wHfaoJLM=
Subject key identifier: 27:4F:32:D6:73:90:FB:CB:0A:04:3B:72:21:D6:8C:19:76:2F:C7:59
Certificate issuer: /CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Certificate serial: 1573BC6E
Authority key identifier: A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/J08y1nOQ-8sKBDtyIdaMGXYvx1k.roa
Signing time: Sat 01 Jan 2022 05:58:52 +0000
ROA not before: Sat 01 Jan 2022 05:58:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52030
IP address blocks: 46.28.0.0/22 maxlen: 24
46.28.4.0/22 maxlen: 24
77.39.208.0/21 maxlen: 24
46.16.88.0/22 maxlen: 24
46.16.92.0/22 maxlen: 24
67.231.176.0/20 maxlen: 24
185.81.0.0/21 maxlen: 24
86.107.32.0/21 maxlen: 24
46.30.244.0/22 maxlen: 24
46.254.32.0/22 maxlen: 24
46.254.36.0/22 maxlen: 24
93.95.216.0/21 maxlen: 24
185.13.252.0/22 maxlen: 24
89.46.224.0/21 maxlen: 24
46.30.240.0/22 maxlen: 24
2a02:24b8::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359906414 (0x1573bc6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Validity
Not Before: Jan 1 05:58:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=274f32d67390fbcb0a043b7221d68c19762fc759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:8d:37:36:10:45:c6:95:70:78:94:d9:80:
3f:15:d6:2f:3f:18:3e:5e:71:e4:1e:5c:63:f8:19:
f0:df:d0:97:aa:09:57:f2:4d:e6:40:b5:1b:7b:58:
3e:df:73:0d:30:f3:89:36:d1:ef:2c:5b:5f:45:ab:
94:56:c8:9b:75:3e:85:15:0a:57:cc:e4:7a:a0:e6:
fd:e4:8f:ca:73:67:45:b1:0f:c7:9d:d8:3a:72:9e:
2c:42:9d:77:79:c3:fa:e7:fc:53:39:bd:ca:ac:9a:
38:dc:9c:9b:7c:75:8c:f7:61:12:e9:b2:82:8b:48:
cf:a1:64:24:93:0f:2e:33:6a:43:74:ed:98:63:b3:
ae:04:fe:3a:0f:d9:10:bc:dc:23:35:8d:f8:42:b6:
4f:d5:e7:de:cb:83:91:fe:c1:ea:c5:e6:14:3c:ef:
a4:94:3c:04:52:e7:54:e7:65:2b:40:ee:9d:c8:e0:
26:fa:60:92:21:74:c0:48:1b:c5:74:f8:e1:19:a6:
d2:1b:7f:d4:a7:61:99:15:82:7f:11:22:13:87:d5:
08:98:26:0b:a3:ca:b4:4a:e5:48:ec:21:d2:01:b3:
5f:01:bb:0e:83:5c:f4:ed:67:e4:cf:4e:30:d4:84:
5b:6b:0c:9d:c0:37:eb:2d:a3:fa:77:20:e4:30:61:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4F:32:D6:73:90:FB:CB:0A:04:3B:72:21:D6:8C:19:76:2F:C7:59
X509v3 Authority Key Identifier:
keyid:A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/J08y1nOQ-8sKBDtyIdaMGXYvx1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.88.0/21
46.28.0.0/21
46.30.240.0/21
46.254.32.0/21
67.231.176.0/20
77.39.208.0/21
86.107.32.0/21
89.46.224.0/21
93.95.216.0/21
185.13.252.0/22
185.81.0.0/21
IPv6:
2a02:24b8::/40
Signature Algorithm: sha256WithRSAEncryption
83:bd:c1:49:8d:da:4a:30:f0:f0:76:28:f4:da:0a:4f:1f:a3:
f8:ef:61:51:c7:bc:03:82:ed:c0:b7:be:6d:63:f6:c5:3f:0e:
4e:57:e1:37:ca:b7:19:b2:f5:9d:dd:0c:64:29:1c:6a:e0:7d:
d9:f6:b7:18:b3:0c:ef:72:e3:dc:1a:aa:7d:35:c6:89:e3:3b:
55:a3:fb:f0:72:e0:e0:e1:99:6f:c4:51:50:ce:d5:14:19:0f:
71:af:47:75:b2:10:88:32:9f:71:50:f8:10:df:56:5e:a1:b8:
78:e0:b6:f9:05:be:0c:ba:af:12:1b:52:77:a5:27:ae:30:8a:
db:84:44:4e:6a:4b:dd:fa:64:4f:23:e0:a1:c8:69:4e:72:8e:
4f:ba:e1:a3:f6:6b:8f:6d:b9:d6:49:19:d8:8d:85:d3:4a:c3:
70:4a:5d:d2:3c:88:66:2f:4b:d5:b4:90:d3:07:64:a2:69:5e:
fa:b3:8c:ef:d5:05:37:07:9f:d5:b4:80:ca:ea:63:4c:f2:3f:
39:1d:31:86:24:f4:41:e3:80:63:1f:ec:de:45:97:da:63:19:
20:a5:01:7f:06:5b:aa:df:3b:32:cb:3f:99:58:26:0a:40:71:
61:30:ba:ee:f5:6d:88:d3:9d:c6:71:05:a5:33:d1:7a:0d:f3:
e9:c1:98:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:26 2024 by rpki-client on console-ams.rpki-client.org