Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Qc9-t3bM8vvmTjBhF8LhnPJjGlU.roa
File: Qc9-t3bM8vvmTjBhF8LhnPJjGlU.roa (raw, json)
Hash identifier: O1k+7ivsT7v88qWV2wNFhzp7rgOCwQXav7ZPOKRTOVQ=
Subject key identifier: 41:CF:7E:B7:76:CC:F2:FB:E6:4E:30:61:17:C2:E1:9C:F2:63:1A:55
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 09CF211E
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Qc9-t3bM8vvmTjBhF8LhnPJjGlU.roa
Signing time: Sun 15 May 2022 18:30:41 +0000
ROA not before: Sun 15 May 2022 18:30:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2914
IP address blocks: 46.232.64.0/19 maxlen: 19
46.232.64.0/18 maxlen: 18
46.3.64.0/20 maxlen: 20
46.3.80.0/20 maxlen: 20
46.3.80.0/22 maxlen: 22
46.232.96.0/19 maxlen: 19
46.232.0.0/19 maxlen: 19
46.232.0.0/18 maxlen: 18
46.232.0.0/24 maxlen: 24
46.232.0.0/17 maxlen: 17
46.232.16.0/22 maxlen: 22
46.3.16.0/22 maxlen: 22
46.3.12.0/22 maxlen: 22
46.3.24.0/22 maxlen: 22
46.232.32.0/19 maxlen: 19
46.3.30.0/24 maxlen: 24
46.3.32.0/19 maxlen: 19
46.3.152.0/22 maxlen: 22
46.3.160.0/20 maxlen: 20
46.3.176.0/20 maxlen: 20
46.3.96.0/19 maxlen: 19
46.3.92.0/22 maxlen: 22
46.3.128.0/23 maxlen: 23
46.3.131.0/24 maxlen: 24
46.3.216.0/21 maxlen: 21
46.3.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164569374 (0x9cf211e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: May 15 18:30:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41cf7eb776ccf2fbe64e306117c2e19cf2631a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4f:7c:1a:72:19:0f:3a:10:15:53:91:0b:f9:
bb:7a:22:9e:53:25:a7:ca:4f:0b:08:70:1e:16:2a:
cf:12:44:6a:1e:f1:0e:6f:5c:60:77:87:86:41:1e:
ea:6a:cb:98:a6:58:fb:24:d8:98:86:8b:bc:65:78:
d8:4d:4a:08:0e:d0:09:3c:1c:91:b8:cb:dc:16:15:
70:b3:3d:6a:39:24:9f:fb:d5:69:ef:f0:70:ce:6b:
7c:f0:aa:a8:4d:02:b9:fd:15:01:13:58:26:83:f9:
c4:12:dc:5b:d1:d7:32:2a:02:af:71:22:03:57:29:
a7:31:e0:d6:a2:8a:a3:fd:31:f7:84:e4:67:c0:09:
e6:95:21:4b:1e:fa:a8:9e:fe:76:02:c7:f6:40:49:
6c:17:01:fb:19:7d:f7:0c:7c:73:31:29:08:fc:30:
50:b3:f0:7d:f4:ec:32:7f:06:1c:c6:69:a8:63:88:
57:83:73:5b:4b:2f:27:7c:ca:bf:b2:e2:65:76:e9:
f8:62:07:95:e3:cb:c3:8d:23:7b:7c:ea:dd:4d:57:
f7:7e:f8:7b:71:aa:8b:8e:e3:6e:85:8b:0d:76:5f:
4b:57:eb:5b:b6:da:00:43:e3:39:1d:b8:d2:59:75:
a9:c4:50:e2:78:fd:43:22:3f:3f:b4:0f:0c:ec:9e:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CF:7E:B7:76:CC:F2:FB:E6:4E:30:61:17:C2:E1:9C:F2:63:1A:55
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Qc9-t3bM8vvmTjBhF8LhnPJjGlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.12.0-46.3.19.255
46.3.24.0/22
46.3.30.0/24
46.3.32.0-46.3.129.255
46.3.131.0/24
46.3.152.0/22
46.3.160.0/19
46.3.216.0-46.3.227.255
46.232.0.0/17
Signature Algorithm: sha256WithRSAEncryption
02:1a:fe:0f:e3:25:55:3e:35:32:06:88:46:a2:3b:94:7d:7f:
14:4e:83:78:80:91:8f:20:9f:40:d3:98:8d:e2:89:05:81:0b:
b7:3d:7e:cd:0f:4b:92:cd:80:51:23:00:bc:36:f1:72:1e:9b:
aa:53:9b:56:9e:1e:9f:0a:a2:48:56:d0:a3:9b:b5:1d:d5:af:
9a:c5:d6:0b:53:d0:d9:8f:ba:97:33:2c:78:e3:69:22:d0:b2:
5b:b9:a2:86:dd:52:1e:ce:88:92:de:8e:ad:ef:df:cb:14:08:
59:4c:f6:81:3e:b6:ca:4d:24:67:c2:94:8c:59:8e:e9:28:c8:
73:42:2d:01:f4:18:f8:d1:53:5a:c5:a0:c4:67:26:a8:ad:bf:
87:98:37:d1:73:ab:12:86:2e:ce:b2:b7:c9:e4:ea:bb:a3:d0:
73:48:d0:45:17:59:52:d9:ec:c4:f6:3a:a5:77:bb:c6:f5:cf:
da:88:b8:be:7a:f4:87:b2:e0:d6:ec:4c:54:90:de:5c:13:62:
12:50:64:30:6a:bc:c8:f5:40:83:53:2d:cc:5c:77:2b:88:e6:
7d:f2:09:7b:59:ea:e8:af:27:05:69:30:9a:07:52:72:8d:ce:
4f:37:d3:1e:03:36:73:c0:a2:4c:67:29:11:43:07:af:c2:67:
10:7e:62:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org