Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/p2lDMvI_WG4eEg2zedWCnu-WQ8o.roa
File: p2lDMvI_WG4eEg2zedWCnu-WQ8o.roa (raw, json)
Hash identifier: AwdUG1LjhgqXRNUJWI+z+DCQmpcl8+oh6E5Mr2EAGDg=
Subject key identifier: A7:69:43:32:F2:3F:58:6E:1E:12:0D:B3:79:D5:82:9E:EF:96:43:CA
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0F920025
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/p2lDMvI_WG4eEg2zedWCnu-WQ8o.roa
Signing time: Sun 30 Jan 2022 15:43:44 +0000
ROA not before: Sun 30 Jan 2022 15:43:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42431
IP address blocks: 46.233.13.0/24 maxlen: 24
46.233.12.0/24 maxlen: 24
46.233.16.0/24 maxlen: 24
46.233.16.0/21 maxlen: 21
46.233.15.0/24 maxlen: 24
46.233.14.0/24 maxlen: 24
46.233.17.0/24 maxlen: 24
46.233.23.0/24 maxlen: 24
46.233.22.0/24 maxlen: 24
46.233.21.0/24 maxlen: 24
46.233.24.0/24 maxlen: 24
46.233.20.0/24 maxlen: 24
46.233.19.0/24 maxlen: 24
46.233.18.0/24 maxlen: 24
46.233.26.0/24 maxlen: 24
46.233.25.0/24 maxlen: 24
46.233.30.0/24 maxlen: 24
46.233.29.0/24 maxlen: 24
46.233.28.0/22 maxlen: 22
46.233.28.0/24 maxlen: 24
46.233.27.0/24 maxlen: 24
46.233.31.0/24 maxlen: 24
46.233.36.0/23 maxlen: 23
46.233.32.0/22 maxlen: 22
46.233.2.0/24 maxlen: 24
46.233.1.0/24 maxlen: 24
46.233.0.0/19 maxlen: 20
46.233.0.0/24 maxlen: 24
46.233.0.0/21 maxlen: 21
46.233.4.0/24 maxlen: 24
46.233.3.0/24 maxlen: 24
46.233.9.0/24 maxlen: 24
46.233.8.0/24 maxlen: 24
46.233.7.0/24 maxlen: 24
46.233.11.0/24 maxlen: 24
46.233.10.0/24 maxlen: 24
46.233.6.0/24 maxlen: 24
46.233.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261226533 (0xf920025)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jan 30 15:43:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7694332f23f586e1e120db379d5829eef9643ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1c:1c:ac:98:9e:ae:51:a5:10:1f:b6:a3:95:
41:49:ad:f5:ef:69:06:84:ad:50:a1:dd:2f:8b:cc:
a3:6c:92:2d:d9:67:6d:70:b2:81:1c:94:2e:e2:82:
5f:35:7c:8f:ea:37:82:e1:1f:9a:7b:de:43:ed:e5:
bb:9b:09:28:85:96:dc:4e:e8:3e:33:ee:75:bb:ae:
36:6c:1f:c5:af:ef:26:9e:54:8f:a2:f2:f2:df:5b:
d0:16:a1:ad:60:77:09:7e:58:56:38:17:14:82:c5:
36:4c:54:fd:b6:df:0f:76:28:26:e2:54:b5:8a:8a:
a1:cc:30:a0:d5:c8:a9:a5:9e:29:1c:24:91:f0:ba:
26:02:52:e9:1a:54:c3:d0:20:95:99:a6:29:0d:e8:
ab:f3:af:89:84:ec:20:6f:41:96:61:21:99:16:b3:
4b:87:09:f1:bc:15:2a:64:1f:3e:bd:56:5e:ea:9c:
d6:b2:34:81:2c:f2:85:56:37:a1:f3:5f:be:d5:d9:
8b:d3:c0:95:a0:b1:02:59:08:aa:80:9e:25:dd:b8:
6e:0e:36:69:cc:45:76:79:3f:88:1e:06:72:e0:50:
88:7e:25:a6:b3:29:44:6c:02:75:51:ef:28:bc:bf:
c8:36:0e:bc:12:a1:4f:96:52:61:df:c5:fe:55:2a:
cb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:69:43:32:F2:3F:58:6E:1E:12:0D:B3:79:D5:82:9E:EF:96:43:CA
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/p2lDMvI_WG4eEg2zedWCnu-WQ8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.0.0-46.233.37.255
Signature Algorithm: sha256WithRSAEncryption
9f:d9:8c:a5:16:b8:62:05:4e:88:76:03:1a:cd:96:bd:60:be:
dd:f4:75:ed:6c:cf:83:b2:c5:6a:89:74:09:c2:ea:c1:d4:75:
fa:70:b2:05:00:d3:70:38:37:f1:41:fe:4b:fa:44:30:bd:b3:
c4:33:f6:54:fb:ab:a2:f0:a6:63:47:98:e0:73:66:d0:23:a2:
95:72:92:1a:9e:37:38:db:c3:54:3b:6b:f6:72:3a:55:6d:10:
da:9e:70:db:98:ff:14:fe:92:1f:2c:cd:b5:c7:ea:59:74:72:
79:a8:19:9b:bf:22:97:f6:cf:48:68:4d:f8:80:ec:09:85:bf:
ea:0f:0a:5c:e9:25:55:28:52:c8:e9:eb:34:b2:1a:a4:81:29:
5a:fd:50:56:6f:ab:28:83:9c:10:69:16:a9:51:a6:74:d5:0f:
ec:9c:65:ca:eb:e6:9b:ba:7c:10:bd:22:8d:c1:00:43:b1:da:
a2:21:a2:b9:a9:bb:28:7e:68:9e:4c:d9:08:1f:86:de:41:dc:
d0:d3:cc:48:68:55:86:ee:05:e0:9f:2d:ba:15:ec:fd:83:5f:
a0:18:8b:f9:6f:85:ef:84:14:bc:50:97:2e:f9:ac:48:73:f5:
27:b2:22:94:3e:fb:cf:d9:cf:fc:5e:c7:da:7a:e0:10:3e:22:
94:b4:7f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:37 2024 by rpki-client on console-fra.rpki-client.org