Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dFtdXLtYX6ybaWwd5TBjhAStXXA.roa
File: dFtdXLtYX6ybaWwd5TBjhAStXXA.roa (raw, json)
Hash identifier: NbEMyqogz5crh2nRavW9Cp/lEsWdUaTeSZj+TDKti3E=
Subject key identifier: 74:5B:5D:5C:BB:58:5F:AC:9B:69:6C:1D:E5:30:63:84:04:AD:5D:70
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 073B146E
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dFtdXLtYX6ybaWwd5TBjhAStXXA.roa
Signing time: Sat 01 Jan 2022 07:00:48 +0000
ROA not before: Sat 01 Jan 2022 07:00:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24881
IP address blocks: 46.162.0.0/20 maxlen: 20
46.162.0.0/19 maxlen: 19
46.162.4.0/24 maxlen: 24
46.162.0.0/18 maxlen: 18
46.162.16.0/20 maxlen: 20
193.111.156.0/22 maxlen: 22
46.162.32.0/19 maxlen: 19
46.162.32.0/20 maxlen: 20
46.162.48.0/20 maxlen: 20
193.43.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121312366 (0x73b146e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jan 1 07:00:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=745b5d5cbb585fac9b696c1de530638404ad5d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:16:ac:be:b4:32:a8:91:21:99:32:0d:31:e9:
12:48:f9:a1:14:04:5c:67:6d:52:85:c7:aa:f8:25:
18:6e:42:3f:13:d1:95:55:e4:0a:3d:42:a1:df:10:
40:98:9c:f4:1e:1f:69:80:57:41:c2:ca:3a:6d:36:
f3:cf:ca:62:a7:19:32:33:7f:73:17:37:64:a4:e1:
e3:c3:05:42:fc:a8:fa:55:b7:60:87:08:dc:e1:d1:
6f:de:f3:6c:b4:d2:9a:e5:91:ab:98:43:93:ee:91:
69:65:bc:22:9c:ef:ad:6f:2a:6c:e7:21:af:65:74:
4c:0a:c2:49:05:e8:e6:4d:18:82:7b:f9:3a:6a:9d:
05:f5:c7:25:5e:d3:73:66:96:2e:b9:5f:25:c8:d1:
be:fd:64:3e:c1:d8:55:37:7e:45:37:9d:26:cb:88:
2d:da:77:bc:90:86:b6:45:be:fc:5e:ce:e1:c5:fc:
5b:d1:19:ca:fd:74:c5:03:7d:b5:03:14:c6:c5:fe:
3d:f0:2b:ed:66:7d:0a:d3:37:e8:a0:89:dd:b8:47:
56:0b:90:de:9e:76:e5:ef:fa:1e:90:f6:d6:80:32:
82:9f:e7:2c:d8:3e:a2:55:87:88:a0:ac:4b:ea:be:
e5:7d:6f:ed:77:1e:ee:7b:78:c0:c5:44:9d:65:66:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5B:5D:5C:BB:58:5F:AC:9B:69:6C:1D:E5:30:63:84:04:AD:5D:70
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dFtdXLtYX6ybaWwd5TBjhAStXXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.0.0/18
193.43.252.0/22
193.111.156.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:1a:30:be:33:e3:17:df:c6:6c:90:7d:10:54:cd:71:7f:c5:
35:f9:70:a9:6b:3a:6f:77:ea:de:44:97:44:85:51:60:58:ed:
32:af:16:44:4b:ec:55:dc:9c:56:e5:d9:e0:ec:e5:98:97:c5:
f7:69:ed:81:d7:03:dd:d5:c4:87:00:77:a0:61:f6:25:26:30:
ff:40:51:75:9a:d9:2f:d7:3c:99:48:f6:9d:e1:d8:65:21:dd:
de:02:63:92:1e:7c:97:47:06:5f:2a:84:da:aa:b3:b4:f6:4e:
72:bd:17:eb:ff:28:d3:9d:95:b6:7c:ff:bf:18:c4:13:9d:36:
62:62:2a:d0:d9:26:50:60:87:a0:45:55:df:cc:4d:e7:19:aa:
a9:a8:13:fb:c3:8f:8f:0a:b3:2b:c1:0e:90:c8:52:62:16:99:
98:c1:7c:67:81:96:fe:af:dc:24:be:9a:ed:77:fe:b2:63:b9:
4e:b8:a2:96:a7:71:87:ae:43:f3:bf:9a:86:69:09:b9:5f:52:
e3:97:a4:6c:db:64:7b:62:1e:0e:c4:fc:26:8d:27:91:79:14:
2f:ff:fa:6d:98:8b:9e:ce:c8:ac:22:f3:51:2a:66:81:31:37:
14:51:fc:91:97:c6:6c:de:8a:50:ac:21:e1:03:47:83:1a:02:
dc:78:0a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org