Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/aCkcWHVirXw57ZdZJj2hrNtgozs.roa
File: aCkcWHVirXw57ZdZJj2hrNtgozs.roa (raw, json)
Hash identifier: 5LgZZqaFi2SCDIV5Fwy2B9AyrwSDCV8DyVMEhLrHPqc=
Subject key identifier: 68:29:1C:58:75:62:AD:7C:39:ED:97:59:26:3D:A1:AC:DB:60:A3:3B
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 0D517F4B
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/aCkcWHVirXw57ZdZJj2hrNtgozs.roa
Signing time: Sat 01 Jan 2022 05:55:21 +0000
ROA not before: Sat 01 Jan 2022 05:55:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28917
IP address blocks: 46.44.0.0/18 maxlen: 18
46.44.0.0/20 maxlen: 20
62.140.224.0/19 maxlen: 19
62.140.233.0/24 maxlen: 24
62.140.234.0/23 maxlen: 23
62.140.250.0/24 maxlen: 24
62.140.252.0/23 maxlen: 23
46.44.32.0/19 maxlen: 19
62.140.255.0/24 maxlen: 24
80.77.160.0/20 maxlen: 24
80.77.162.0/23 maxlen: 23
80.77.169.0/24 maxlen: 24
80.77.172.0/22 maxlen: 22
93.191.11.0/24 maxlen: 24
93.191.8.0/21 maxlen: 21
93.191.12.0/23 maxlen: 23
93.191.14.0/24 maxlen: 24
185.221.44.0/22 maxlen: 22
2a02:2518:11::/48 maxlen: 48
2a02:2518::/29 maxlen: 29
2a02:2518::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223444811 (0xd517f4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Jan 1 05:55:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68291c587562ad7c39ed9759263da1acdb60a33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:ec:10:bd:f0:32:6c:84:24:dd:43:aa:64:
68:98:66:94:73:04:14:fd:a3:ff:cc:3c:f7:0b:93:
b8:63:17:94:8e:0e:92:55:84:cc:0f:f4:0c:11:73:
0e:b1:4e:30:57:08:14:8c:b7:ab:6b:bb:7e:c1:ac:
fc:fb:4d:1f:de:a5:fd:ef:1e:c6:e0:4e:7f:b4:ea:
5a:08:e2:f7:01:b5:7d:b3:c7:12:08:aa:ef:58:aa:
df:68:79:4c:a5:77:01:8e:72:5e:13:68:26:ec:8b:
86:4b:19:30:27:09:f8:1b:96:5c:b2:93:65:9b:97:
a0:8f:57:fb:90:4c:62:8c:c6:73:87:d7:42:d2:1b:
7a:16:75:76:4d:a7:ab:0a:d4:6f:b0:87:c9:1d:65:
03:a4:68:f7:c0:a4:0f:b8:2a:47:c0:c7:05:69:00:
97:27:8a:ca:98:c9:70:35:fa:9c:89:aa:f4:b7:19:
b1:ac:d6:4e:20:e6:f7:8c:77:34:8c:8b:1a:2a:9e:
f0:7f:a0:29:ed:76:9e:de:54:26:a6:2e:3c:67:02:
cf:71:a2:d6:7f:17:fa:33:e9:92:bf:7e:4a:f6:d7:
e5:22:aa:cf:ed:a4:ab:48:c2:ff:b0:38:1d:ef:fd:
50:14:fc:08:a9:16:24:c9:32:5b:43:51:9f:3b:89:
05:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:29:1C:58:75:62:AD:7C:39:ED:97:59:26:3D:A1:AC:DB:60:A3:3B
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/aCkcWHVirXw57ZdZJj2hrNtgozs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.44.0.0/18
62.140.224.0/19
80.77.160.0/20
93.191.8.0/21
185.221.44.0/22
IPv6:
2a02:2518::/29
Signature Algorithm: sha256WithRSAEncryption
48:7b:03:4e:48:cf:0e:07:d6:26:52:d6:1d:2d:c4:17:61:98:
e5:ab:34:42:eb:60:f7:fb:71:a5:6a:24:2e:2a:d4:e1:98:3e:
01:2b:d0:67:db:3b:cb:d6:82:84:5c:1b:db:b7:e7:ed:89:c0:
07:61:2f:44:be:81:6e:81:d4:ab:06:57:87:3e:c5:d1:e5:6b:
49:f6:80:61:61:85:35:e6:3e:d3:62:09:fb:f9:75:f1:4a:06:
f2:19:8e:f1:5d:c1:da:4e:17:40:b6:df:97:51:f0:a7:87:8f:
93:b5:a8:4b:f2:71:e2:9e:5f:d4:a8:b7:fb:1b:4f:73:48:15:
dc:f7:76:c5:eb:86:70:4f:92:11:4c:8a:fd:28:ab:43:b8:db:
57:2b:91:52:f6:e2:21:02:0c:dc:6c:e6:1b:a0:e8:96:ed:85:
34:8b:aa:15:af:9a:ff:23:82:1e:2a:c1:8d:7c:ed:c9:1a:d8:
d8:de:bd:58:a3:49:c9:ec:26:67:fb:f5:39:94:24:0e:18:ad:
e7:2e:f7:38:2e:f2:43:2a:f8:14:eb:0f:c0:4f:7d:fe:0b:c9:
6f:a9:74:d0:8d:f6:90:00:60:bc:e9:1d:46:19:5b:03:c1:27:
7b:7e:62:ea:71:ec:8a:9a:81:e1:98:ad:3d:5c:38:20:32:d6:
bc:68:4f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:57 2024 by rpki-client on console-fra.rpki-client.org