Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/x0wP5Dn4PpAfkK6R6PE9lJwkXlI.roa
File: x0wP5Dn4PpAfkK6R6PE9lJwkXlI.roa (raw, json)
Hash identifier: FgB25ElYD80QM4eslL3n/hGWungGLb4d8fGu2qoP4RE=
Subject key identifier: C7:4C:0F:E4:39:F8:3E:90:1F:90:AE:91:E8:F1:3D:94:9C:24:5E:52
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 3549668A
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/x0wP5Dn4PpAfkK6R6PE9lJwkXlI.roa
Signing time: Mon 10 Jan 2022 11:55:56 +0000
ROA not before: Mon 10 Jan 2022 11:55:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21395
IP address blocks: 185.59.88.0/24 maxlen: 24
185.59.88.0/22 maxlen: 22
46.134.192.0/19 maxlen: 19
46.134.192.0/18 maxlen: 18
188.47.192.0/18 maxlen: 18
2a00:f46::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894002826 (0x3549668a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Jan 10 11:55:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c74c0fe439f83e901f90ae91e8f13d949c245e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:99:b5:aa:34:d1:73:8e:f0:a8:a9:4d:1e:
be:c6:10:89:33:c8:55:cf:5e:bb:7e:82:b6:a4:d8:
50:30:44:54:c4:f3:da:ce:21:84:e8:64:ac:ad:d1:
f8:31:4a:18:f6:d8:48:05:f3:96:ef:12:52:1e:23:
5c:49:f9:aa:d2:f6:85:04:fc:fa:6b:12:58:fb:85:
a3:e3:3a:fb:56:0c:63:f7:59:47:90:e7:86:b3:21:
79:a5:e5:8c:1c:f2:a3:36:d7:e0:51:50:75:d7:ed:
7c:22:0d:4a:09:7a:b4:c1:2d:ce:91:89:1d:74:0e:
d1:21:58:e7:2e:ff:81:50:74:d9:4f:c9:2e:ab:6d:
b0:5e:21:c7:c1:2b:a1:39:e4:37:d7:10:3f:38:e4:
ec:20:e1:d9:a2:01:85:23:0a:d1:dc:65:a0:ea:3f:
43:c0:10:90:5d:19:43:19:d8:6e:4f:0b:e9:6f:40:
3e:4f:69:62:18:e2:18:4c:78:ed:e4:ec:25:0e:5f:
d1:2d:04:ad:4b:47:fc:5f:f1:98:28:2b:f5:21:54:
f6:df:35:88:f1:b1:bc:50:90:7f:14:5e:90:a9:7d:
7c:73:14:bb:d1:fd:2d:61:c7:66:a9:4f:47:3e:f4:
1f:39:c5:5d:28:61:1f:4c:58:0d:a2:bb:33:25:9e:
60:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4C:0F:E4:39:F8:3E:90:1F:90:AE:91:E8:F1:3D:94:9C:24:5E:52
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/x0wP5Dn4PpAfkK6R6PE9lJwkXlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.134.192.0/18
185.59.88.0/22
188.47.192.0/18
IPv6:
2a00:f46::/36
Signature Algorithm: sha256WithRSAEncryption
4b:3a:e0:19:98:9b:80:bc:d5:a6:72:fb:ab:95:6a:7d:fd:e4:
c5:39:17:14:ee:73:9a:d9:fe:68:04:3a:4b:57:37:7c:fa:7e:
b6:07:da:f2:1e:e9:77:7b:f9:4f:e3:f7:b1:a7:7b:3c:bf:18:
11:bc:07:4e:26:7c:02:54:87:2f:eb:6b:f2:74:41:45:b7:ea:
ae:f1:bd:cf:f3:ef:b5:08:df:0c:be:9d:9f:d6:d5:bd:07:d4:
1c:70:7d:f2:05:31:55:23:3f:bb:b5:34:12:4d:ee:13:ff:a5:
57:cc:20:46:7f:b9:6a:3a:69:f0:bb:e1:17:3b:66:2d:da:35:
a0:f7:09:46:fb:4e:fa:a3:bc:7d:8b:40:3d:dd:9e:6a:57:0a:
f4:13:83:52:f1:aa:d4:a6:cd:e2:3d:54:5c:17:2f:ab:1b:49:
4f:1e:d6:20:37:dd:ac:18:95:a6:0b:ef:82:14:71:1c:2c:d7:
06:6d:fa:b0:e4:3a:cb:ac:93:06:bc:23:5b:0f:73:86:87:d6:
79:57:24:e5:7e:55:d0:c6:b0:5b:a8:b1:d0:3d:a2:b3:db:ce:
ea:60:99:c8:79:bc:e2:5b:11:5b:8d:36:67:ac:d4:9d:7b:86:
52:ae:4e:6b:ba:6a:f6:e5:47:9f:b8:96:4b:d2:66:6c:e9:44:
05:4c:b0:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:14 2023 by rpki-client on console-ams.rpki-client.org