Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/hELqmw5frZ8A4496dcqtJiTZ4g8.roa
File: hELqmw5frZ8A4496dcqtJiTZ4g8.roa (raw, json)
Hash identifier: jjtRHBdNSFglTar8MxXhiZnnORStEbGPXPyFPyxIddk=
Subject key identifier: 84:42:EA:9B:0E:5F:AD:9F:00:E3:8F:7A:75:CA:AD:26:24:D9:E2:0F
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 10495345
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/hELqmw5frZ8A4496dcqtJiTZ4g8.roa
Signing time: Thu 21 Apr 2022 12:18:14 +0000
ROA not before: Thu 21 Apr 2022 12:18:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42431
IP address blocks: 46.233.13.0/24 maxlen: 24
46.233.12.0/24 maxlen: 24
46.233.16.0/24 maxlen: 24
46.233.16.0/21 maxlen: 21
46.233.15.0/24 maxlen: 24
46.233.14.0/24 maxlen: 24
46.233.17.0/24 maxlen: 24
46.233.23.0/24 maxlen: 24
46.233.22.0/24 maxlen: 24
46.233.21.0/24 maxlen: 24
46.233.24.0/24 maxlen: 24
46.233.24.0/23 maxlen: 23
46.233.20.0/24 maxlen: 24
46.233.19.0/24 maxlen: 24
46.233.18.0/24 maxlen: 24
46.233.26.0/24 maxlen: 24
46.233.25.0/24 maxlen: 24
46.233.30.0/24 maxlen: 24
46.233.29.0/24 maxlen: 24
46.233.28.0/22 maxlen: 22
46.233.28.0/24 maxlen: 24
46.233.27.0/24 maxlen: 24
46.233.31.0/24 maxlen: 24
46.233.32.0/22 maxlen: 22
46.233.32.0/21 maxlen: 21
46.233.36.0/23 maxlen: 23
46.233.2.0/24 maxlen: 24
46.233.1.0/24 maxlen: 24
46.233.0.0/19 maxlen: 20
46.233.0.0/24 maxlen: 24
46.233.0.0/21 maxlen: 21
46.233.4.0/24 maxlen: 24
46.233.3.0/24 maxlen: 24
46.233.6.0/24 maxlen: 24
46.233.5.0/24 maxlen: 24
46.233.9.0/24 maxlen: 24
46.233.8.0/24 maxlen: 24
46.233.7.0/24 maxlen: 24
46.233.11.0/24 maxlen: 24
46.233.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273240901 (0x10495345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Apr 21 12:18:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8442ea9b0e5fad9f00e38f7a75caad2624d9e20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:ef:b5:4d:a7:d0:db:c7:17:7c:0c:27:b5:
b8:80:6a:fe:d6:d6:9a:96:6c:d1:81:1c:de:32:af:
2c:bb:fb:41:bb:74:e1:0d:30:65:f7:72:f3:e3:a4:
07:85:b2:f9:d2:d5:41:c2:c9:b0:71:fe:c5:2a:92:
d2:ba:f8:67:12:cd:5f:df:0c:a3:dd:c6:35:ad:be:
c7:a9:72:10:1d:00:58:69:2e:3a:58:cf:66:47:c1:
f2:78:b4:3d:d2:f5:34:b6:22:94:9f:80:68:1e:0b:
ad:bc:37:d4:99:f4:20:c7:47:20:11:79:a8:11:18:
36:02:b1:9d:3a:2a:65:e0:d4:b8:f6:71:2a:c6:c8:
aa:f8:e7:22:3e:cf:1b:e0:cf:78:cd:4c:7e:34:53:
f2:df:26:25:0d:1a:ca:fb:d9:cd:c3:44:40:cf:f4:
b9:fb:d8:f8:d7:c5:5d:fe:47:8f:26:4c:0b:8d:e4:
ec:aa:19:ad:d0:73:ca:b9:b3:50:be:d7:c4:3b:b5:
a1:1e:3b:d5:b0:17:f7:e0:d5:d0:57:05:3d:9d:f9:
ab:bb:cb:27:82:85:cc:4e:eb:c6:72:bb:4a:81:16:
3f:77:d9:34:73:47:50:af:7e:3e:72:1e:69:be:79:
3c:bd:e6:44:52:06:d3:14:83:87:62:3b:58:3d:33:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:42:EA:9B:0E:5F:AD:9F:00:E3:8F:7A:75:CA:AD:26:24:D9:E2:0F
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/hELqmw5frZ8A4496dcqtJiTZ4g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.0.0-46.233.39.255
Signature Algorithm: sha256WithRSAEncryption
82:dc:31:b5:51:a6:e5:b5:1b:20:82:21:c5:2f:40:32:ed:9b:
86:5f:77:25:ff:3a:01:03:ad:3c:44:bc:d9:47:27:d1:b9:51:
c8:bb:95:6f:75:a9:03:18:90:3e:e0:52:3a:6f:3a:35:8a:df:
c2:9b:9b:2b:e1:3d:33:38:84:61:e6:15:a3:2c:df:e0:ae:07:
76:da:35:4c:0d:4a:25:3e:af:aa:29:7a:24:11:ac:2e:02:b4:
68:da:61:76:b5:d8:59:3d:96:e5:dd:08:ca:ac:62:d3:34:70:
84:08:71:6e:6b:50:9a:3d:ae:cd:2f:6c:64:39:f2:ca:53:75:
95:54:70:5e:c6:3f:32:14:33:79:a4:9d:56:76:76:26:36:13:
85:13:be:6e:e1:6f:b6:f0:43:9d:af:f7:c5:eb:68:05:f6:17:
bc:72:89:28:87:b5:12:58:4d:a3:b2:ac:8a:15:12:bf:f4:2d:
44:fc:9a:0a:0d:bb:8a:80:82:91:8b:b7:87:6d:ac:8b:e1:a3:
79:f3:45:fc:0a:be:7f:35:b6:1c:fa:76:2a:b0:4a:d8:f2:3e:
23:76:3a:e9:34:f7:8e:0a:dc:89:f7:94:8d:26:67:0b:f4:23:
13:6f:a7:ee:b9:d5:c2:9f:90:76:dc:8f:de:48:a4:8b:b7:59:
45:71:47:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:05 2023 by rpki-client on console-fra.rpki-client.org