Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/q43LCqWEN4yNVMJ441UFSuzEwtQ.roa
File: q43LCqWEN4yNVMJ441UFSuzEwtQ.roa (raw, json)
Hash identifier: CEJ2DvWDm0VlOwQe0GDBHNJAcqdc8Bpmac3GaZTDQxQ=
Subject key identifier: AB:8D:CB:0A:A5:84:37:8C:8D:54:C2:78:E3:55:05:4A:EC:C4:C2:D4
Certificate issuer: /CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Certificate serial: 0549DBBC
Authority key identifier: C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/q43LCqWEN4yNVMJ441UFSuzEwtQ.roa
Signing time: Sat 01 Jan 2022 08:59:04 +0000
ROA not before: Sat 01 Jan 2022 08:59:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49106
IP address blocks: 62.122.192.0/24 maxlen: 24
62.122.192.0/21 maxlen: 21
62.122.192.0/22 maxlen: 22
62.122.198.0/24 maxlen: 24
46.150.160.0/20 maxlen: 20
46.150.160.0/21 maxlen: 21
46.150.160.0/24 maxlen: 24
46.150.160.0/22 maxlen: 22
46.150.160.0/19 maxlen: 19
46.150.160.0/23 maxlen: 23
46.150.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88726460 (0x549dbbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Validity
Not Before: Jan 1 08:59:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab8dcb0aa584378c8d54c278e355054aecc4c2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:d2:2c:5b:c6:4e:d2:b2:77:08:ce:9c:82:
16:5c:6d:2d:c6:c5:8a:ab:2c:54:37:ce:ab:cb:d6:
25:30:f1:20:89:bc:3a:b0:cb:89:84:8c:a6:d6:e1:
0b:c1:2c:52:0c:3c:11:5a:5e:68:04:0b:ff:6d:7a:
59:06:52:c4:b4:2f:fa:17:cd:78:fe:cc:ed:ce:93:
34:db:06:fb:57:16:a2:c6:ee:49:1f:aa:12:39:1a:
e1:6c:75:32:c6:e6:a7:c8:cd:4c:9c:d9:eb:96:b3:
e7:91:89:5d:87:b8:e4:b3:88:13:f9:8d:a7:73:0a:
55:7e:b6:e6:08:7e:29:3a:40:9f:a9:0e:0e:77:4d:
79:99:34:93:c7:72:3b:08:50:e7:bd:48:cb:1b:8f:
fe:06:e2:e6:a3:a3:3f:33:50:52:02:0c:9f:2a:6c:
31:f3:67:49:7b:97:cc:c8:9b:fc:5d:09:0a:1d:85:
df:f5:d5:b3:34:4c:7f:a9:1d:dd:2f:6e:8a:40:54:
6e:45:3e:f1:e9:7f:0b:cb:15:9a:ac:24:55:b4:6f:
12:af:6c:3b:bc:97:69:b9:92:d2:df:c8:2c:19:19:
ee:04:ac:72:c5:f9:37:16:1c:b6:b9:7b:16:5e:fe:
a5:ff:fe:2b:ab:16:29:ca:05:80:29:75:08:cd:70:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8D:CB:0A:A5:84:37:8C:8D:54:C2:78:E3:55:05:4A:EC:C4:C2:D4
X509v3 Authority Key Identifier:
keyid:C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/q43LCqWEN4yNVMJ441UFSuzEwtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.150.160.0/19
62.122.192.0/21
Signature Algorithm: sha256WithRSAEncryption
78:ae:c9:d6:53:48:b3:30:a4:0c:6f:dd:3e:80:8e:08:2b:07:
9f:18:5e:be:bc:07:14:ae:03:05:e8:ba:89:14:d3:4b:10:9e:
6e:94:b9:ab:01:83:e9:cf:0b:e9:00:ab:98:f7:6a:f7:20:a4:
29:fd:61:06:6d:ab:0a:ec:a2:82:1d:9a:6c:6b:83:30:91:00:
88:bc:b6:a0:0f:43:b6:30:6b:ff:35:88:a6:6f:59:6a:f5:69:
53:fa:7d:45:f4:e9:f0:c7:1f:5d:b7:91:f9:07:bf:b0:52:5e:
04:6f:c6:02:ab:51:e1:f9:b8:b0:2e:e9:40:bd:bb:95:d2:27:
03:1f:37:fd:d7:85:c7:b4:59:04:5d:c1:e5:bd:31:ae:61:4a:
36:96:7c:66:98:94:d9:5c:dd:b7:e1:be:fb:2e:fc:0c:28:ae:
11:40:ce:87:25:16:e9:b5:e9:36:cf:41:cf:c7:22:c2:e8:4f:
35:41:4e:a7:09:a7:93:8b:67:23:6c:9e:c1:c5:d7:53:e2:d5:
f9:5a:aa:40:2f:2a:c8:8c:61:d2:35:38:c9:50:3b:da:fc:a2:
41:ba:47:0e:87:89:66:04:df:23:83:34:2f:e5:c5:4d:57:10:
c6:0f:f1:82:97:fa:c7:2e:10:2c:94:34:0a:6a:52:f2:9d:fc:
f9:74:b9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:35 2025 by rpki-client