Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/HKrZHJqtu5a37jgeQKQbqiE9rZk.roa
File: HKrZHJqtu5a37jgeQKQbqiE9rZk.roa (raw, json)
Hash identifier: IyLftkN0zAG5r8tHsVlXL6Ls6RM0UGlf5DrpaeFup5Q=
Subject key identifier: 1C:AA:D9:1C:9A:AD:BB:96:B7:EE:38:1E:40:A4:1B:AA:21:3D:AD:99
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01845CB6F0B0B709B3DBA0EF51F47D165C1A
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/HKrZHJqtu5a37jgeQKQbqiE9rZk.roa
Signing time: Wed 09 Nov 2022 14:06:43 +0000
ROA not before: Wed 09 Nov 2022 14:06:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2914
IP address blocks: 46.3.152.0/22 maxlen: 22
46.3.160.0/20 maxlen: 20
46.3.176.0/20 maxlen: 20
46.3.96.0/19 maxlen: 19
46.3.92.0/22 maxlen: 22
46.3.129.0/24 maxlen: 24
46.3.131.0/24 maxlen: 24
46.3.128.0/23 maxlen: 23
46.232.64.0/19 maxlen: 19
46.232.64.0/18 maxlen: 18
46.3.64.0/20 maxlen: 20
46.3.80.0/22 maxlen: 22
46.3.80.0/20 maxlen: 20
46.232.96.0/19 maxlen: 19
46.232.0.0/24 maxlen: 24
46.3.216.0/21 maxlen: 21
46.232.16.0/22 maxlen: 22
46.3.224.0/22 maxlen: 22
46.3.16.0/22 maxlen: 22
46.3.12.0/22 maxlen: 22
46.3.24.0/22 maxlen: 22
46.232.32.0/19 maxlen: 19
46.3.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5c:b6:f0:b0:b7:09:b3:db:a0:ef:51:f4:7d:16:5c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Nov 9 14:06:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1caad91c9aadbb96b7ee381e40a41baa213dad99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b2:32:10:fd:b8:20:6a:dd:63:6b:26:77:33:
86:9b:bb:55:17:45:1c:30:07:ab:78:35:e8:38:71:
66:dd:3b:be:21:a0:36:3e:2b:53:34:6b:35:ac:16:
d9:38:fe:37:b6:a0:d5:74:df:bb:bc:60:61:6f:99:
d4:3d:c3:dc:11:db:e9:88:a6:d5:77:e9:fc:57:8a:
58:1e:2a:94:a9:51:b7:f1:d2:e0:bd:a7:51:6f:13:
b5:3c:6c:3f:a3:8e:26:ce:78:f9:f5:74:15:d9:4b:
ce:10:c0:9c:2f:62:d0:67:0e:29:1a:11:71:dc:c7:
aa:96:82:13:72:8c:64:08:66:1e:88:4a:11:13:18:
35:f3:cd:99:4e:72:f0:6d:67:2b:06:67:d3:6b:78:
09:2d:5d:35:ce:68:4b:e7:82:c7:75:ef:d1:8d:2f:
dc:eb:1e:64:a4:a0:49:91:1f:b5:85:95:98:5d:3a:
90:c0:49:17:1c:88:70:12:38:ed:f1:63:81:7d:50:
24:30:23:e9:f3:a3:e6:fb:01:8a:83:b7:63:6b:23:
9c:6f:50:c8:e2:e2:3c:a6:02:40:3e:25:c8:56:ed:
cc:49:26:b7:44:5f:a3:7c:12:5c:1c:60:02:ce:12:
f9:55:e0:50:98:fb:90:9e:d6:2a:71:1d:c1:8b:17:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AA:D9:1C:9A:AD:BB:96:B7:EE:38:1E:40:A4:1B:AA:21:3D:AD:99
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/HKrZHJqtu5a37jgeQKQbqiE9rZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.12.0-46.3.19.255
46.3.24.0/22
46.3.30.0/24
46.3.64.0-46.3.129.255
46.3.131.0/24
46.3.152.0/22
46.3.160.0/19
46.3.216.0-46.3.227.255
46.232.0.0/24
46.232.16.0/22
46.232.32.0-46.232.127.255
Signature Algorithm: sha256WithRSAEncryption
8e:02:24:39:41:ee:a4:7f:f8:eb:8d:7e:91:98:bf:75:5b:3a:
fa:13:87:3a:5b:fd:36:5a:ec:9e:2a:bf:0d:df:3a:d8:31:34:
2d:0b:2e:b1:9e:0e:f2:61:55:35:14:11:35:0f:0c:c5:20:f3:
34:2d:ef:e3:9e:90:6d:09:f2:25:92:ff:70:12:77:5d:29:8c:
df:61:fc:0b:2d:42:72:4a:e0:ff:9f:71:25:83:cd:86:e1:c5:
a9:73:52:b8:cc:ad:69:99:51:ee:f4:93:08:b5:d4:27:6a:07:
ff:30:51:cd:7a:5a:b7:c0:6e:23:44:fd:f9:21:0f:9c:f9:05:
f8:83:3d:2b:4f:d7:32:11:cc:f0:cc:ea:82:e7:e8:2b:64:20:
88:d3:14:c3:0e:79:c7:23:98:3e:5f:dc:ed:dc:2b:04:e7:dc:
f9:aa:15:97:53:78:b9:dd:9a:ff:7c:28:c8:d8:07:30:5e:31:
65:0d:6b:a0:4d:e6:0c:df:2b:aa:aa:b9:01:6a:a8:5d:11:ce:
cb:a2:20:44:81:2b:45:c4:e0:1a:71:b5:c2:bd:ac:94:0a:6f:
48:49:9f:b5:41:0b:71:c8:15:e8:6b:ff:d1:7b:ab:1f:f4:86:
d6:5d:bc:ce:cf:57:09:d2:06:e8:f3:da:f4:10:b4:e6:b7:ec:
a0:a9:1c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org