Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/219l34bAqZEJGS9ZPl_JseFkSsA.roa
File: 219l34bAqZEJGS9ZPl_JseFkSsA.roa (raw, json)
Hash identifier: jL8lJAIskl3omb1VQQRferxJ8jZyAz2EOvgViqEfUfs=
Subject key identifier: DB:5F:65:DF:86:C0:A9:91:09:19:2F:59:3E:5F:C9:B1:E1:64:4A:C0
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01845CCB17E16BB953DF70F57DB554619A62
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/219l34bAqZEJGS9ZPl_JseFkSsA.roa
Signing time: Wed 09 Nov 2022 14:28:44 +0000
ROA not before: Wed 09 Nov 2022 14:28:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49505
IP address blocks: 46.232.64.0/24 maxlen: 24
46.232.70.0/24 maxlen: 24
46.232.71.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.67.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.3.213.0/24 maxlen: 24
46.3.209.0/24 maxlen: 24
46.3.210.0/24 maxlen: 24
46.3.211.0/24 maxlen: 24
46.3.212.0/24 maxlen: 24
46.3.208.0/24 maxlen: 24
46.3.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5c:cb:17:e1:6b:b9:53:df:70:f5:7d:b5:54:61:9a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Nov 9 14:28:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db5f65df86c0a99109192f593e5fc9b1e1644ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:24:63:13:58:55:be:91:25:0b:ce:58:2b:
2a:cb:e2:6d:e4:8b:1a:56:b3:d3:96:71:41:dc:9d:
cd:d2:42:e6:28:c7:88:f3:a6:f4:88:89:49:aa:88:
a1:ff:6f:f7:5c:c3:02:41:c7:a9:65:80:bd:2d:36:
99:fc:86:50:b1:27:1f:63:25:2c:27:d7:a7:3b:2a:
e3:7a:0c:6a:e4:60:be:30:49:26:cd:87:48:b8:00:
12:bb:79:49:fa:4c:ef:9f:e0:5f:1f:ec:7c:25:80:
8c:13:1e:13:c5:03:dd:d4:09:18:94:de:dd:4d:6a:
a6:18:e9:77:88:0b:df:ce:ce:5f:58:d9:05:d0:87:
b0:20:b7:b1:19:05:ad:37:43:d0:b9:42:f5:c3:3c:
df:ed:2f:ae:4a:97:26:5b:2c:10:74:68:0c:f5:56:
bb:9a:32:5e:5b:9b:40:20:bd:03:a9:34:4b:a8:d1:
04:a4:fc:42:1a:43:7a:09:eb:df:c0:45:0d:01:a8:
bd:d7:95:c0:c8:c6:2d:bf:89:24:b2:f6:5d:3d:7e:
2f:91:f6:40:ff:27:8e:54:1e:3a:0f:3d:42:49:59:
1f:df:bc:18:15:cd:79:bc:c0:96:ee:33:cd:6a:12:
d8:42:4e:01:bb:60:c1:32:06:62:00:82:0c:f9:ac:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5F:65:DF:86:C0:A9:91:09:19:2F:59:3E:5F:C9:B1:E1:64:4A:C0
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/219l34bAqZEJGS9ZPl_JseFkSsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.208.0-46.3.214.255
46.232.64.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:68:a6:0a:2e:f4:39:38:8a:3c:c8:a2:c1:72:0c:c3:71:f0:
8d:a5:c9:d5:c5:c1:92:db:49:e8:09:87:e8:49:23:69:5c:54:
b6:80:98:ab:03:e6:80:28:47:c1:41:e6:7a:bd:76:21:b0:21:
10:39:fd:f5:21:33:a5:21:56:53:e7:e3:8f:72:88:e4:82:75:
7b:a3:b7:94:ad:03:72:64:55:3a:ec:8a:9a:b2:8a:80:46:a2:
06:82:a7:52:4e:4e:ec:94:87:c5:2c:ad:4b:09:0d:e3:1e:b6:
10:c9:2f:ee:d2:6c:8b:b8:db:b5:e4:c1:8d:62:68:f9:40:07:
91:8f:00:24:15:49:16:97:6e:08:74:b2:50:5d:35:68:e7:18:
12:8a:b4:ad:07:7e:86:14:d2:31:12:59:28:b4:5d:ad:cf:91:
54:e2:a3:e1:19:a6:a0:02:55:83:c3:44:c0:1f:ea:b4:0b:a5:
51:f5:42:b0:8d:17:ce:46:1a:c1:e5:94:24:e5:8d:0b:69:4d:
46:c7:91:d6:83:82:17:e9:16:7b:9c:92:0e:eb:e1:a6:c2:90:
17:c8:ea:72:7a:cd:eb:e4:07:0b:25:de:36:1a:16:33:78:59:
00:fe:1b:3f:1f:77:80:af:48:d4:54:02:3b:1a:81:87:a7:79:
54:a9:60:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:35 2023 by rpki-client on console-fra.rpki-client.org