Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/qmQUmxRcfAltgc2jzJv9YgL8n9w.roa
File: qmQUmxRcfAltgc2jzJv9YgL8n9w.roa (raw, json)
Hash identifier: hS3TUGjHD/alzuKMC2PxGDBMVg3aDUivC0Hksm7mHMY=
Subject key identifier: AA:64:14:9B:14:5C:7C:09:6D:81:CD:A3:CC:9B:FD:62:02:FC:9F:DC
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0963EF19
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/qmQUmxRcfAltgc2jzJv9YgL8n9w.roa
Signing time: Mon 04 Apr 2022 17:07:50 +0000
ROA not before: Mon 04 Apr 2022 17:07:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 46.232.72.0/21 maxlen: 21
46.232.80.0/20 maxlen: 22
46.232.96.0/20 maxlen: 20
46.3.208.0/21 maxlen: 21
46.232.112.0/20 maxlen: 22
149.126.192.0/18 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157544217 (0x963ef19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Apr 4 17:07:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa64149b145c7c096d81cda3cc9bfd6202fc9fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3b:dd:50:21:12:b8:26:40:3f:58:1c:25:93:
40:ba:6a:7f:f0:41:48:a6:bf:25:98:dd:25:d2:4e:
2a:76:ed:e0:6b:1c:02:2c:5f:c9:4d:60:cf:f3:a2:
84:39:8b:8d:bf:4c:7e:23:9e:5e:8f:40:09:39:6b:
84:f5:71:7b:c4:1d:62:5e:1f:9c:32:8b:90:b7:c8:
93:14:e7:e7:b5:e8:0a:99:79:58:7d:57:79:8f:5e:
de:34:16:ea:a6:15:ce:5f:5e:2a:78:2a:3a:58:47:
de:de:76:13:b6:c7:ee:28:da:0f:4d:13:fc:88:39:
ae:fb:0d:2f:42:ae:9f:d5:76:8f:37:b1:af:02:30:
9e:4f:ec:4b:71:ad:38:7e:96:fb:d8:93:38:1f:46:
1f:8f:af:9b:d3:b7:49:43:11:43:f7:14:39:b2:93:
d9:33:67:f2:ad:5e:e0:1f:df:be:1b:20:ba:a4:ce:
b2:df:7b:3d:50:c8:fe:c2:bd:19:11:04:7e:56:be:
13:e2:e4:62:bf:a5:b6:cb:40:66:e6:47:fe:fd:ac:
11:82:84:f8:b3:22:25:0b:d7:a2:a5:42:48:5b:02:
4c:c8:6c:b4:02:5d:0f:4c:a9:c7:2a:e2:04:0e:8f:
86:8a:45:c8:2b:f3:ee:73:03:b3:d2:cb:97:0b:98:
9a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:64:14:9B:14:5C:7C:09:6D:81:CD:A3:CC:9B:FD:62:02:FC:9F:DC
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/qmQUmxRcfAltgc2jzJv9YgL8n9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.208.0/21
46.232.72.0-46.232.127.255
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
94:5f:34:db:11:c1:ea:9b:89:71:f6:c8:ab:26:e1:f1:b8:f5:
6d:7a:3d:7a:e4:97:8c:53:bf:91:04:b2:e5:8e:c2:8b:13:fb:
a9:7b:96:3d:d5:7c:fe:7b:9f:b6:7c:c3:55:05:8b:2b:f5:3a:
38:fc:45:62:fd:6b:41:dd:66:1f:8b:1d:c3:f7:67:ab:e5:75:
60:96:8f:bd:89:8c:ae:cd:e1:6f:5e:e2:1b:7d:58:31:b6:57:
c1:9f:5b:3c:99:b0:47:25:04:88:fa:26:58:79:b6:cd:49:2b:
1f:4a:87:50:c0:66:7c:fe:cc:6a:40:11:52:b1:77:8c:b0:e9:
13:4d:ea:46:f6:29:8e:04:79:09:f8:6a:e5:9b:bf:9c:31:b6:
bd:3e:da:77:cb:a3:28:02:fb:6e:fa:2b:df:32:a7:45:56:b2:
2f:1a:86:60:87:d7:89:4a:3f:9c:9f:e4:6d:90:b0:ae:a2:db:
e9:0a:23:76:33:14:fd:50:ab:ac:b3:72:d5:55:e8:d7:a9:09:
c4:3c:98:90:63:6d:d6:f0:90:bc:5c:a6:45:83:da:b2:05:4b:
e2:77:78:b8:48:c3:66:39:11:01:db:e9:cf:4e:82:9f:c1:b3:
02:b4:2a:b8:72:6f:b5:96:66:20:4c:a2:29:44:00:42:4d:d1:
14:b1:e5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org