Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/KwjgW9JiCp0zT-pvNXMYg75yL1c.roa
File: KwjgW9JiCp0zT-pvNXMYg75yL1c.roa (raw, json)
Hash identifier: +qffqTKKl90OV/hA7s7M8hT3Frsy+Cj/RPzGb94DBwM=
Subject key identifier: 2B:08:E0:5B:D2:62:0A:9D:33:4F:EA:6F:35:73:18:83:BE:72:2F:57
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0870A2AB
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/KwjgW9JiCp0zT-pvNXMYg75yL1c.roa
Signing time: Sat 01 Jan 2022 13:03:08 +0000
ROA not before: Sat 01 Jan 2022 13:03:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207636
IP address blocks: 46.3.192.0/19 maxlen: 19
46.232.0.0/17 maxlen: 24
149.126.192.0/18 maxlen: 24
46.3.224.0/19 maxlen: 19
46.3.0.0/16 maxlen: 24
80.243.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141599403 (0x870a2ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 13:03:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b08e05bd2620a9d334fea6f35731883be722f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:09:7b:1f:0a:36:19:e2:30:46:a6:53:b7:
d0:18:a0:46:a9:74:27:00:b3:63:4d:0e:51:7a:69:
87:b6:6c:76:2c:fd:30:64:ed:0a:dd:31:65:f7:1b:
e9:30:25:87:17:5c:80:e4:4e:f2:a5:02:8c:cf:88:
5d:0f:11:38:26:04:b5:99:d5:6a:3c:42:bd:d4:58:
67:6f:0b:25:59:4a:8d:83:42:0f:93:79:a4:30:4d:
c5:50:d8:3b:c8:73:2a:3c:32:50:49:11:35:1d:21:
56:95:d6:58:c8:b4:f9:85:77:41:18:5c:a6:fd:08:
fb:ac:1e:e9:46:7e:84:46:78:20:d0:25:82:13:a0:
eb:5a:dd:d3:02:00:52:c1:32:7d:a6:56:16:df:94:
d5:f6:e0:5d:34:6b:ca:5a:61:14:9e:fd:ee:64:8e:
b4:1b:ec:4b:f5:c4:b8:a1:75:e7:dc:65:3f:78:2a:
ec:31:91:87:ab:33:07:55:62:03:e6:4e:26:91:ec:
2a:17:f7:af:38:8d:77:34:e6:09:00:71:da:9d:d5:
2b:3b:9f:db:85:ca:c1:db:f7:9e:e9:c4:a3:3f:d3:
f7:f7:88:fd:14:98:d3:97:ae:37:2d:93:cb:0f:03:
ab:8d:fd:d1:28:66:1b:1c:ce:cc:62:96:66:07:85:
c2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:08:E0:5B:D2:62:0A:9D:33:4F:EA:6F:35:73:18:83:BE:72:2F:57
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/KwjgW9JiCp0zT-pvNXMYg75yL1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/16
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
7c:1a:86:ae:cd:19:3c:1f:a6:32:61:b0:7c:5e:4c:81:46:0b:
8e:94:61:a4:12:d5:4b:0e:ac:74:51:fb:df:c2:2f:44:b9:5e:
e6:71:50:41:6c:f8:b0:01:37:d9:02:91:54:d0:15:35:5c:f7:
dd:22:31:e4:c2:1c:bd:b6:3e:9d:c4:16:99:45:df:39:56:0d:
70:54:88:15:2f:43:b9:04:cf:f5:f2:f3:5b:80:d0:11:be:be:
4f:89:6b:ca:97:a6:3c:50:1a:91:92:ea:05:57:c8:e0:3f:49:
d6:8c:e6:1c:ab:1b:bc:5f:d3:7e:2b:d9:41:03:fc:84:f7:e3:
b6:9c:19:ff:68:cd:04:99:d8:ba:96:11:9c:40:31:45:c6:38:
61:3a:33:47:45:21:32:92:20:f4:15:c1:c3:06:ed:60:de:c2:
2b:72:ed:97:20:22:84:9d:39:88:29:b6:93:92:26:e0:c1:18:
6a:62:c6:38:81:b9:c7:8a:0f:48:d6:ff:8c:50:b2:9f:93:67:
ad:49:9d:26:8e:16:8d:68:ab:4f:8b:7e:76:15:b1:a5:0a:10:
2b:01:cf:c7:31:48:44:f9:00:1d:ca:fc:ba:aa:d6:bb:f6:19:
75:ad:58:8c:b0:61:44:0c:fb:24:5e:4a:55:d9:d2:d2:cf:60:
09:59:ac:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org