Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/74cPhtm5XHP_bMoEPslxk46eU9Q.roa
File: 74cPhtm5XHP_bMoEPslxk46eU9Q.roa (raw, json)
Hash identifier: Wk/cbMGNWbFsgFzygVnrUH2Wfa/9wLux8aGzAawqRGE=
Subject key identifier: EF:87:0F:86:D9:B9:5C:73:FF:6C:CA:04:3E:C9:71:93:8E:9E:53:D4
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0185719559262251F5C8813B7D7463DD2558
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/74cPhtm5XHP_bMoEPslxk46eU9Q.roa
Signing time: Mon 02 Jan 2023 08:24:51 +0000
ROA not before: Mon 02 Jan 2023 08:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30407
IP address blocks: 46.232.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:59:26:22:51:f5:c8:81:3b:7d:74:63:dd:25:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef870f86d9b95c73ff6cca043ec971938e9e53d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:09:83:36:44:d9:86:e5:4d:03:86:f8:a0:
35:f0:6b:59:29:11:50:d2:05:df:3c:ef:b1:4d:42:
88:13:93:e2:65:6d:38:68:94:c5:53:86:ff:9d:95:
02:9c:a8:d6:b8:a3:e7:22:bf:b8:e8:1c:70:b0:e0:
40:4a:7e:33:5c:14:8a:e8:4f:e7:15:e7:3b:97:7e:
b3:37:62:7c:da:a2:bc:a5:63:d5:2c:c8:22:6c:c7:
c5:11:cb:22:8b:f2:48:29:3f:03:41:63:93:0e:e0:
82:22:06:3b:92:63:55:6d:f1:f4:aa:53:92:39:c8:
de:fe:bd:f6:12:51:95:67:31:59:e9:da:85:c9:ab:
46:d6:37:4e:33:71:90:23:f4:8d:80:96:f9:7b:ae:
9a:89:7e:9f:d4:ef:a6:fb:26:fd:e9:24:45:62:f1:
72:06:b7:94:05:4f:76:94:5c:f0:ae:c4:9e:8c:35:
74:a6:f5:1c:58:8c:7c:c3:fb:11:b8:09:f1:82:ee:
1d:09:f2:b7:ef:ae:fa:f2:37:42:75:58:8d:a8:4b:
6a:1c:bc:43:fd:cd:00:94:53:69:50:c3:47:81:bd:
97:0a:b0:0e:f8:b4:d3:10:47:ec:d0:1c:26:60:99:
14:a1:05:70:d3:7c:30:bc:02:ac:b7:68:96:65:65:
af:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:87:0F:86:D9:B9:5C:73:FF:6C:CA:04:3E:C9:71:93:8E:9E:53:D4
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/74cPhtm5XHP_bMoEPslxk46eU9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
63:f8:00:a8:5c:52:53:fd:1b:2e:1b:72:c4:d7:2c:28:70:73:
14:9d:75:69:8a:44:5e:1d:be:cd:61:fa:06:2f:88:ab:44:97:
b8:db:df:8b:3e:19:7b:59:f0:05:f9:0f:76:5a:b9:85:97:e7:
0b:8c:72:d4:e4:85:91:b8:7a:8c:43:c5:49:d0:80:b4:a8:0f:
9d:77:41:94:a4:f9:d1:44:54:38:39:e3:c5:bc:cb:d0:68:fe:
8d:56:46:ed:0e:db:b6:ee:86:7f:16:e7:8f:9a:c8:e1:86:88:
c1:70:64:47:f3:db:c0:6b:d0:87:bf:da:d9:8d:e0:ce:c7:0f:
c5:12:c1:af:4c:72:3a:d7:43:da:af:9a:6c:d4:3c:b0:c5:89:
69:dc:f8:45:73:d8:54:76:b6:f5:70:fb:97:46:19:bc:1a:db:
ce:c4:2a:50:8d:93:46:3e:94:12:75:15:a9:4e:29:69:55:74:
2b:92:a9:d2:2f:87:22:b0:5d:65:7f:8b:a4:79:00:dd:48:10:
1a:43:ab:2e:2b:e4:05:a9:d4:4a:97:ce:58:17:c9:de:94:3a:
74:2a:ea:3f:fb:e4:df:02:2f:8f:8b:96:3b:8e:b2:45:d2:67:
a0:74:64:e2:da:78:00:45:5e:99:e6:5c:98:b2:94:33:12:bc:
da:8f:f0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:40 2025 by rpki-client