Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ynaOxEpLPqhEfUjb9n5sP0-SAeY.roa
File: ynaOxEpLPqhEfUjb9n5sP0-SAeY.roa (raw, json)
Hash identifier: 4FEXd0k1QCjwcZxC77alDRTZLeHqu4iAiBfgrbr4tm4=
Subject key identifier: CA:76:8E:C4:4A:4B:3E:A8:44:7D:48:DB:F6:7E:6C:3F:4F:92:01:E6
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0968A964
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ynaOxEpLPqhEfUjb9n5sP0-SAeY.roa
Signing time: Tue 05 Apr 2022 16:09:41 +0000
ROA not before: Tue 05 Apr 2022 16:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399989
IP address blocks: 46.3.48.0/20 maxlen: 20
46.3.80.0/21 maxlen: 21
46.3.216.0/21 maxlen: 21
46.3.224.0/21 maxlen: 21
46.3.120.0/21 maxlen: 21
46.3.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157854052 (0x968a964)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Apr 5 16:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca768ec44a4b3ea8447d48dbf67e6c3f4f9201e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6f:0f:52:f0:8b:46:4d:95:89:dd:cc:3e:31:
8b:75:ae:2d:e4:fc:fe:f5:95:28:f5:ad:92:67:56:
44:c1:3f:a3:8c:d6:6c:f0:2c:a4:85:5b:a1:83:2f:
d6:35:81:25:12:ef:44:ad:f0:0b:06:a6:2f:6b:d2:
77:6c:15:70:1d:19:ec:31:ed:95:60:24:42:09:ec:
2e:c9:4d:3f:a5:34:fd:e2:b0:75:10:69:aa:cb:a9:
43:f2:9c:e6:01:69:68:42:99:82:59:e5:c3:33:b4:
d0:a6:ac:46:65:5e:a0:38:6e:18:35:f9:14:7e:f9:
5c:48:44:6f:f4:f9:e4:be:02:bb:54:0d:e1:3a:01:
b6:fa:21:43:f6:8a:17:41:77:fc:99:bf:46:62:fa:
ba:db:da:15:1b:9b:74:c6:20:ed:01:ab:6a:88:30:
4e:cc:e1:ac:cb:1f:2b:18:7c:5e:02:57:74:38:f7:
85:2d:c8:84:db:38:05:b9:38:55:c5:da:30:a7:2c:
6d:5c:c1:01:fc:4f:fb:77:12:b5:14:86:38:be:bc:
b0:80:17:e5:4c:47:bc:bd:60:9a:4f:4f:b0:fa:e3:
29:e0:71:0b:1f:61:05:65:0b:cf:5e:9f:c5:44:f4:
ab:df:1b:73:8d:ec:01:20:d1:d2:97:7c:ce:3a:6d:
9c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:76:8E:C4:4A:4B:3E:A8:44:7D:48:DB:F6:7E:6C:3F:4F:92:01:E6
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ynaOxEpLPqhEfUjb9n5sP0-SAeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.32.0/19
46.3.80.0/21
46.3.120.0/21
46.3.216.0-46.3.231.255
Signature Algorithm: sha256WithRSAEncryption
3e:5d:52:78:c0:59:53:00:b3:72:40:b4:cc:95:b2:d3:ad:ab:
30:08:26:b7:9b:cd:4f:4b:b7:6a:6d:3a:3f:10:af:47:f4:6d:
cf:c7:42:04:30:c0:cb:de:31:5d:8c:03:2a:fe:0d:af:07:4b:
f3:bb:92:4b:47:0f:93:90:8a:a2:ec:26:2f:a1:b8:cf:92:af:
a9:0e:8d:7c:bc:c8:82:52:07:93:24:ac:ed:5d:01:9a:64:70:
1e:a2:e9:46:4c:0a:56:f8:01:a7:68:4d:73:5b:25:69:72:87:
7a:1c:20:79:4c:f5:f5:db:b5:ca:e4:55:a9:e4:71:c1:d6:0b:
1c:c0:ac:49:ce:a5:36:d6:09:50:f2:a6:be:a2:10:0f:b2:c7:
74:50:bd:1a:c0:81:b1:d1:58:15:d5:78:62:bd:eb:3a:cb:fa:
4b:49:33:c0:79:6b:db:95:bc:fb:b7:c8:8f:c8:9a:7d:b6:4b:
7e:91:e6:91:88:c2:31:5a:23:24:c6:bc:d3:08:97:47:e2:47:
17:a0:4a:aa:88:f4:eb:78:f9:01:d2:b8:4f:2d:bc:88:2c:fd:
7c:4d:7c:d1:b2:3e:00:65:b1:c1:e3:d7:29:1b:e6:a7:2b:de:
f3:f7:8c:70:dd:b2:eb:9d:24:01:f9:0c:63:a9:23:60:af:94:
ef:69:56:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org