Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/uog6QcX6nAEViwOhFJyebupWO3A.roa
File: uog6QcX6nAEViwOhFJyebupWO3A.roa (raw, json)
Hash identifier: pT+HiWeGP9PSbfOK78eQg5a2RpUZQNc9fMKvPxrhdZo=
Subject key identifier: BA:88:3A:41:C5:FA:9C:01:15:8B:03:A1:14:9C:9E:6E:EA:56:3B:70
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0A006FFD
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/uog6QcX6nAEViwOhFJyebupWO3A.roa
Signing time: Sun 05 Jun 2022 12:12:20 +0000
ROA not before: Sun 05 Jun 2022 12:12:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40065
IP address blocks: 46.3.164.0/22 maxlen: 22
46.232.112.0/21 maxlen: 24
46.232.124.0/22 maxlen: 24
46.232.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167800829 (0xa006ffd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 5 12:12:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba883a41c5fa9c01158b03a1149c9e6eea563b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:92:23:1e:43:60:45:68:74:7f:ca:0b:f5:
56:ae:4e:27:f9:ea:31:7e:a9:e8:ff:cc:7a:f9:4d:
8d:98:f4:c4:ee:8e:f4:63:a6:28:cc:4a:9b:66:2f:
50:cf:f6:77:48:48:ef:00:51:16:f1:5d:b2:bb:90:
ea:ba:f3:ec:a7:c6:f7:69:e3:54:6f:02:5e:29:a3:
cb:5a:65:fc:6c:9e:b6:35:84:67:23:8f:68:22:43:
7f:bc:ff:a0:73:a2:ab:2a:db:e4:21:96:7e:22:7e:
8d:31:3b:08:44:e0:eb:9d:36:61:6b:ad:fb:7e:6c:
b3:12:a9:15:12:12:d3:88:7e:2a:4b:a6:61:50:2f:
90:f6:99:e1:33:3b:13:7f:46:8d:e4:55:e8:f7:19:
82:fd:de:b5:42:90:3e:0d:ad:a2:63:8c:78:18:93:
b3:82:74:a6:60:c6:dc:d6:cb:4a:4c:34:27:07:0c:
bc:6c:16:c4:fc:d3:40:1b:a3:00:a5:48:00:6f:99:
1a:9e:3e:24:27:fb:7f:9c:ae:ed:6e:70:d9:e3:70:
5c:47:b5:ae:6d:3b:3b:21:20:45:b0:76:e9:cd:95:
02:ad:07:ef:0b:95:40:a2:3a:0d:96:c8:83:52:f7:
7a:e1:47:ce:e7:19:92:9c:9b:8b:52:69:77:5f:85:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:88:3A:41:C5:FA:9C:01:15:8B:03:A1:14:9C:9E:6E:EA:56:3B:70
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/uog6QcX6nAEViwOhFJyebupWO3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.164.0/22
46.232.16.0/22
46.232.112.0/21
46.232.124.0/22
Signature Algorithm: sha256WithRSAEncryption
59:cf:4b:c6:b1:30:90:bc:21:67:a4:25:e9:5e:0f:a4:16:96:
af:f6:89:6b:db:ef:7f:f8:91:a7:6f:d2:f1:25:85:d7:64:53:
8b:14:59:e4:3d:38:18:12:29:1b:1b:57:ee:9f:7e:58:b2:8a:
32:38:60:02:f0:bb:c3:f1:4e:8c:c1:7c:5f:a4:45:4b:a4:4e:
85:b1:c0:46:bf:11:df:fe:4a:b6:39:75:4c:78:47:63:7c:2c:
8a:c6:01:41:f1:a8:b4:c2:2f:3a:e6:f5:31:60:65:5e:03:54:
50:62:0e:8e:4f:3c:18:37:9d:60:06:5b:95:f8:13:ab:c1:1e:
dc:11:be:e7:4e:c2:c0:43:3f:eb:c2:bc:25:6e:8e:20:9c:a9:
72:32:d5:0d:92:b2:e1:d1:69:08:1c:a8:80:dd:60:3e:03:56:
54:76:07:bb:69:37:95:14:d5:75:b9:5b:23:76:17:7b:38:c2:
65:e9:1c:16:47:49:18:a7:5e:47:65:82:f7:c2:a2:6f:10:c3:
d9:ff:99:7d:97:46:a6:d7:ec:4d:bd:cb:06:83:ae:0c:ce:f1:
6e:ed:ee:16:1f:ad:b2:33:b8:51:bc:4f:76:70:29:30:f6:d6:
67:e6:06:b2:96:dd:d2:d9:2e:bd:50:48:32:e6:24:d5:89:09:
3c:54:23:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org