Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/MrkLrqoNqH23aS_u5FaPchxY_f4.roa
File: MrkLrqoNqH23aS_u5FaPchxY_f4.roa (raw, json)
Hash identifier: 6Wn6W1pFpErDuG60mzNBYpipSwJdtelQL5srOkYDeaM=
Subject key identifier: 32:B9:0B:AE:AA:0D:A8:7D:B7:69:2F:EE:E4:56:8F:72:1C:58:FD:FE
Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Certificate serial: 04C434CE
Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/MrkLrqoNqH23aS_u5FaPchxY_f4.roa
Signing time: Sat 01 Jan 2022 13:03:09 +0000
ROA not before: Sat 01 Jan 2022 13:03:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201035
IP address blocks: 46.253.240.0/23 maxlen: 23
46.253.240.0/24 maxlen: 24
46.253.240.0/20 maxlen: 24
46.253.241.0/24 maxlen: 24
46.253.245.0/24 maxlen: 24
46.253.246.0/23 maxlen: 23
46.253.246.0/24 maxlen: 24
46.253.244.0/22 maxlen: 22
46.253.244.0/23 maxlen: 23
46.253.244.0/24 maxlen: 24
46.253.249.0/24 maxlen: 24
46.253.247.0/24 maxlen: 24
46.253.248.0/24 maxlen: 24
46.253.248.0/23 maxlen: 23
46.253.254.0/24 maxlen: 24
46.253.254.0/23 maxlen: 23
46.253.255.0/24 maxlen: 24
185.209.104.0/22 maxlen: 22
185.209.104.0/23 maxlen: 23
185.209.104.0/24 maxlen: 24
185.209.105.0/24 maxlen: 24
185.209.106.0/23 maxlen: 23
185.209.106.0/24 maxlen: 24
185.209.107.0/24 maxlen: 24
2a04:1c40::/31 maxlen: 31
2a04:1c40::/30 maxlen: 30
2a04:1c40::/29 maxlen: 29
2a04:1c41::/33 maxlen: 33
2a04:1c47:c000::/34 maxlen: 34
2a04:1c40:c000::/34 maxlen: 34
2a04:1c40::/32 maxlen: 32
2a04:1c40::/33 maxlen: 33
2a04:1c42::/32 maxlen: 32
2a04:1c42::/40 maxlen: 40
2a04:1c42:c000::/34 maxlen: 34
2a04:1c42:4000::/34 maxlen: 34
2a04:1c42::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79967438 (0x4c434ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Validity
Not Before: Jan 1 13:03:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32b90baeaa0da87db7692feee4568f721c58fdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:da:c2:ab:63:27:77:e2:2d:44:f6:a5:5b:
97:fb:d9:25:0f:51:1a:30:f8:51:f2:4c:bc:27:9e:
06:b3:2c:5a:30:8a:1d:b9:e9:34:09:75:a1:ca:f9:
b9:3e:41:24:14:60:ad:a2:69:02:76:df:f0:91:73:
8f:70:1b:26:11:0e:b4:ff:36:a7:2c:78:71:de:9b:
ab:f9:13:82:dc:c9:c7:83:cd:81:15:0d:ef:d5:3a:
6e:6d:0e:19:5a:b5:88:8c:c8:ec:a9:4b:e1:44:18:
a9:2f:05:60:31:bc:d8:02:a6:3f:7f:d4:b2:9e:0d:
30:67:16:c0:1f:51:75:8e:87:42:fd:14:a1:df:e6:
d2:74:ad:0d:5e:52:82:22:e5:82:45:d0:da:5f:70:
0e:ff:8c:d6:2f:e3:12:11:f5:92:32:9a:1f:86:5c:
54:a5:24:8b:18:fa:61:fc:2d:2f:76:0d:75:9d:cd:
ff:52:74:19:ed:37:b1:39:70:4c:99:2c:55:65:2e:
2d:07:96:4f:3a:3a:61:f5:55:15:dc:c4:b8:f8:71:
c5:7d:67:6e:2f:86:64:b5:db:65:59:d1:01:82:ad:
62:a1:a7:47:d5:91:1b:78:28:0e:04:59:c6:c3:d4:
15:b3:60:3a:e4:95:2e:e3:dc:53:12:32:a7:92:50:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B9:0B:AE:AA:0D:A8:7D:B7:69:2F:EE:E4:56:8F:72:1C:58:FD:FE
X509v3 Authority Key Identifier:
keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/MrkLrqoNqH23aS_u5FaPchxY_f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.240.0/20
185.209.104.0/22
IPv6:
2a04:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
88:2f:86:1d:2e:3d:b3:17:10:f3:cd:bb:e7:a2:38:0e:a0:a0:
8e:e6:74:81:a5:c7:6a:e5:ab:e5:b4:8c:aa:9f:d3:92:6e:fb:
c7:56:c8:df:ac:2f:bf:ef:d0:65:d8:6d:6d:2c:3b:d0:86:58:
da:74:61:50:5f:1a:dc:bb:b7:d1:38:c7:50:5a:69:80:95:b9:
ee:27:00:72:78:18:4a:fa:98:53:68:9b:8b:d8:93:f0:b0:b7:
66:19:a4:d9:ac:37:2a:fd:46:1a:d9:4a:16:59:45:ab:71:7e:
66:e7:4f:f0:59:2c:84:43:76:d1:6c:3f:92:02:ed:d3:0b:75:
24:46:9c:b8:4e:f8:30:01:50:b7:25:22:31:ad:9d:b6:98:92:
e6:34:de:ff:b7:6a:9c:97:85:ea:2f:ca:7b:02:39:67:c4:58:
b3:67:78:7f:24:63:dc:e2:92:34:02:93:a0:e3:81:a1:ce:ac:
bb:01:bd:af:5c:fb:63:99:d9:3d:51:2a:0f:11:40:6b:23:86:
9b:cc:4a:44:d2:3d:01:69:52:39:80:cd:b4:83:5e:0b:c5:43:
48:73:8a:96:c9:13:5d:1b:e8:f7:ce:9f:3c:ae:e9:f9:bf:2a:
53:89:5b:64:3e:83:57:3f:7d:3b:a5:3c:09:7f:9b:32:32:a8:
83:f1:fe:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:42 2023 by rpki-client on console-ams.rpki-client.org