Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/qEofEPzfUcROdhjkomOfrZfw6uw.roa
File: qEofEPzfUcROdhjkomOfrZfw6uw.roa (raw, json)
Hash identifier: SfjwenwSHqI4kRVPmYVgfEwcHeLk8ip4Mg/etsPHU8w=
Subject key identifier: A8:4A:1F:10:FC:DF:51:C4:4E:76:18:E4:A2:63:9F:AD:97:F0:EA:EC
Certificate issuer: /CN=c013d0505d07aa10d9117ac2fd56266d4890518f
Certificate serial: 0183AE2BDB7FE8C582A14B03D75232856C80
Authority key identifier: C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/qEofEPzfUcROdhjkomOfrZfw6uw.roa
Signing time: Thu 06 Oct 2022 16:40:53 +0000
ROA not before: Thu 06 Oct 2022 16:40:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197293
IP address blocks: 46.31.248.0/21 maxlen: 24
185.15.160.0/22 maxlen: 24
178.248.144.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ae:2b:db:7f:e8:c5:82:a1:4b:03:d7:52:32:85:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c013d0505d07aa10d9117ac2fd56266d4890518f
Validity
Not Before: Oct 6 16:40:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a84a1f10fcdf51c44e7618e4a2639fad97f0eaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:f5:a2:14:b7:03:fb:ad:ba:db:47:6a:6c:
96:58:99:c3:6f:87:a7:3b:9f:72:c5:43:18:92:7f:
e3:49:01:32:98:5d:3a:79:6d:76:a5:19:08:d5:f1:
78:51:0e:54:14:85:81:96:9d:46:a9:b3:d1:9d:5c:
a6:a4:cb:5c:b9:ef:76:42:32:93:0d:3e:76:4a:2e:
7b:f2:4d:e7:c6:43:2d:65:f6:5e:4d:9e:cc:51:ba:
c6:58:ba:f0:ab:7e:18:63:b9:d6:9f:9c:bb:80:84:
74:07:2f:b7:69:b9:4b:83:d1:cc:a3:0d:75:92:bf:
fb:45:1f:e9:34:37:7e:e4:02:7b:91:ba:b8:fc:f5:
8c:23:37:04:6f:a8:78:04:a6:b7:d6:0d:ea:dc:87:
9d:81:a8:28:6c:07:a6:96:aa:08:c9:bc:51:25:5b:
60:d9:b2:66:c8:24:f4:8e:66:ca:ce:35:0d:37:bc:
b2:e6:4d:bb:48:7f:2e:e0:39:73:21:0e:85:4e:0a:
ce:7e:7a:12:92:c1:f0:6e:ca:7e:95:29:23:c9:7a:
2f:97:e5:5b:85:6f:ed:f5:9a:6d:bf:ae:fe:ef:8e:
90:4b:4a:af:bf:cf:aa:0d:56:fa:83:e8:86:41:69:
ba:10:2c:81:4b:7c:e5:c1:02:a1:42:10:b7:5d:c3:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4A:1F:10:FC:DF:51:C4:4E:76:18:E4:A2:63:9F:AD:97:F0:EA:EC
X509v3 Authority Key Identifier:
keyid:C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/qEofEPzfUcROdhjkomOfrZfw6uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.248.0/21
178.248.144.0/21
185.15.160.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:47:d6:2c:92:3b:29:8d:37:98:03:56:69:e5:9d:1c:4a:b8:
d1:4f:c3:11:a0:42:34:ea:f6:e4:f2:3e:73:07:8f:bb:06:46:
9d:a7:6d:21:81:4a:d1:0d:c5:20:b3:84:f6:40:e8:1f:e7:94:
f9:f1:95:bb:99:29:a2:3d:8c:5c:b4:60:a5:52:6b:09:0e:3e:
ed:ec:76:36:a0:89:69:51:d2:21:39:f1:20:d9:f8:11:36:72:
22:a4:fe:2b:18:8c:17:d7:2b:f3:71:dd:50:ba:54:dc:6b:37:
f8:fa:04:29:d4:b3:ac:13:76:95:7e:d1:4c:ee:52:0a:2a:eb:
89:49:7a:7b:3a:59:00:1c:7f:30:e8:d9:2e:5f:ec:db:1a:bc:
fd:d8:0e:0f:cc:aa:7d:77:5a:26:11:b4:3d:8b:d0:2c:62:51:
c6:7f:85:88:66:99:06:37:fa:6e:28:44:02:63:b8:df:61:a2:
7b:70:45:06:cd:cb:ff:db:5d:f7:24:e5:24:fa:52:cb:01:59:
e4:06:ce:20:26:7b:6b:21:4c:b8:05:e1:b7:d8:9f:9a:40:0a:
0a:85:4a:b4:f7:d9:78:89:84:19:8c:09:e0:0b:1b:0e:90:e1:
27:e0:1e:96:6e:9a:56:5b:f4:57:62:18:50:49:76:e4:27:6e:
7e:34:8a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:29 2024 by rpki-client on console-fra.rpki-client.org