Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/HQQkmSMbFu1cOQmQs1zJM0bYt5A.roa
File: HQQkmSMbFu1cOQmQs1zJM0bYt5A.roa (raw, json)
Hash identifier: Gr9fRMUxwtqKFMKP2Nfim7Wwq9VvWvNGmcFkO6sOmJY=
Subject key identifier: 1D:04:24:99:23:1B:16:ED:5C:39:09:90:B3:5C:C9:33:46:D8:B7:90
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 09AF8D00
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/HQQkmSMbFu1cOQmQs1zJM0bYt5A.roa
Signing time: Wed 04 May 2022 09:10:52 +0000
ROA not before: Wed 04 May 2022 09:10:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47553
IP address blocks: 46.232.56.0/21 maxlen: 24
46.232.48.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162499840 (0x9af8d00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: May 4 09:10:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d042499231b16ed5c390990b35cc93346d8b790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:2e:e5:53:ad:17:24:ca:cc:e2:29:e2:8d:
72:41:84:59:17:96:dc:3d:c0:ae:62:76:93:ab:2f:
22:f4:fc:c9:c8:7b:5f:c0:87:25:2b:e3:3b:8e:20:
9a:6e:5d:90:a6:75:fa:09:55:b5:2c:52:4b:56:db:
38:65:3b:48:17:48:49:53:db:6f:9c:66:03:fa:a8:
26:d0:0b:9d:fb:e3:72:fc:ea:74:e2:c8:ef:24:bf:
10:f5:d3:22:18:2c:6e:c1:a6:bf:49:89:2f:6d:51:
c0:3c:e0:28:0a:e8:22:8b:b1:60:2f:54:a2:cc:dd:
38:f4:7b:e8:8c:81:ea:62:2d:66:a0:5f:46:89:f5:
12:d1:76:8f:83:a3:fb:eb:0d:ff:05:37:4e:f8:50:
b2:61:af:aa:00:f9:e1:ee:23:2c:6c:66:49:cd:13:
2e:05:14:1a:9f:66:e2:e3:e4:8c:be:06:3a:8b:59:
a5:f8:8e:4e:4b:4b:53:9b:e2:a5:47:e9:9a:f7:2f:
90:d7:5c:a4:d1:d2:b7:6f:de:09:3c:d5:1e:26:a5:
2c:86:bd:b1:89:19:90:8c:ec:c8:9f:be:02:cb:50:
9f:83:f1:01:8e:54:2c:fd:be:13:7f:57:ad:83:25:
bd:5b:0e:27:14:1c:01:27:72:a3:e8:a1:38:0f:d0:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:04:24:99:23:1B:16:ED:5C:39:09:90:B3:5C:C9:33:46:D8:B7:90
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/HQQkmSMbFu1cOQmQs1zJM0bYt5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:a9:7c:05:af:44:ae:1e:f7:95:7b:51:4c:dc:17:ee:94:d9:
6c:98:5e:f8:c8:1e:06:e3:70:3b:59:e3:23:a6:f5:8d:83:5c:
40:99:16:1f:ea:0e:db:21:9b:18:63:17:7d:3f:f8:61:d9:89:
68:86:bf:2c:9e:91:eb:ee:61:07:c2:eb:f9:9f:e5:01:f3:2b:
be:25:d1:f3:47:49:6f:34:b5:f9:44:f9:61:5f:e5:3f:1d:54:
3c:9e:a7:e3:4b:92:fb:0f:71:b9:ac:db:e3:65:b6:89:e6:80:
0d:65:28:ef:91:c1:7e:f6:39:b0:dd:dc:11:63:e6:c7:aa:ad:
db:de:65:15:5f:c1:b3:5c:83:5f:0e:84:c3:14:8e:a8:11:4c:
cc:6a:71:8d:7b:98:92:01:e8:32:bf:8a:47:bb:d4:3e:e8:2f:
4b:0a:3f:52:a9:2b:3e:91:bf:53:e8:ef:1e:48:ee:2d:2e:71:
a2:39:c5:2a:09:c1:04:3c:72:ad:ed:88:d8:66:02:ee:5a:f4:
77:79:0b:30:94:d4:25:b5:68:27:a9:e4:b2:02:31:a0:31:01:
f0:af:f5:ba:08:2e:d4:0d:20:0f:69:a7:ac:0e:63:a8:23:26:
db:b9:69:28:dd:48:5b:01:07:8b:7e:d2:b8:9b:1f:75:73:22:
84:81:bb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org