Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Dux0uWcMJIhuXsLQ0x70MOjPQPQ.roa
File: Dux0uWcMJIhuXsLQ0x70MOjPQPQ.roa (raw, json)
Hash identifier: sXQooCQ9hYONgesVfb6LSuF4bRt4YVvYuKXJdj8r5p0=
Subject key identifier: 0E:EC:74:B9:67:0C:24:88:6E:5E:C2:D0:D3:1E:F4:30:E8:CF:40:F4
Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Certificate serial: 01842A2DBC60A3C5EEA5AD0E650EB7014728
Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Dux0uWcMJIhuXsLQ0x70MOjPQPQ.roa
Signing time: Sun 30 Oct 2022 18:35:51 +0000
ROA not before: Sun 30 Oct 2022 18:35:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211882
IP address blocks: 46.231.240.0/23 maxlen: 24
2a0c:e303::/32 maxlen: 32
2a0c:e300:12::/48 maxlen: 48
2a0c:e304:c0fe::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2a:2d:bc:60:a3:c5:ee:a5:ad:0e:65:0e:b7:01:47:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Validity
Not Before: Oct 30 18:35:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0eec74b9670c24886e5ec2d0d31ef430e8cf40f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:c8:be:27:12:42:cc:1c:fd:54:db:7e:23:
04:b0:6a:29:1f:23:91:83:b5:ee:85:bc:26:4a:5d:
93:10:eb:cb:9b:db:13:9c:f5:83:e3:4b:fc:1f:90:
2c:05:c6:22:78:78:07:1f:68:85:35:0e:17:ac:6f:
45:f3:7d:e5:7d:91:19:bd:3a:36:1c:dc:83:60:95:
08:20:88:ae:93:24:d2:5b:fb:78:9c:96:e0:81:24:
c4:e8:65:38:2d:44:21:d4:76:bc:97:ec:97:2b:cd:
64:fc:d9:2e:93:30:9b:64:1b:43:e3:5f:f4:c7:a1:
64:0f:73:bb:f1:78:e0:4a:5b:a9:32:5a:dd:cf:b4:
0c:8d:db:c7:74:9d:6d:3d:76:65:b6:13:93:36:40:
44:50:a8:cf:af:0a:65:63:24:0f:a5:9e:d0:51:e3:
84:a1:cc:ff:28:d9:a5:a3:ba:20:f6:c7:b0:db:2a:
b0:05:08:f3:70:df:d8:3d:7f:33:34:92:c0:fd:75:
c9:4a:05:dd:25:98:ed:b8:31:40:ca:e2:ea:d8:9e:
18:84:21:f8:21:f5:d8:19:25:17:da:4f:77:bf:07:
dc:68:d7:1d:d8:40:4f:58:83:74:27:38:14:22:41:
ab:27:90:33:8f:f2:c1:13:f6:f0:be:24:53:b8:f5:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EC:74:B9:67:0C:24:88:6E:5E:C2:D0:D3:1E:F4:30:E8:CF:40:F4
X509v3 Authority Key Identifier:
keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Dux0uWcMJIhuXsLQ0x70MOjPQPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.240.0/23
IPv6:
2a0c:e300:12::/48
2a0c:e303::/32
2a0c:e304:c0fe::/48
Signature Algorithm: sha256WithRSAEncryption
4f:d4:c1:a0:f8:9c:50:e7:2f:eb:e6:c2:9e:75:ef:d2:49:bb:
78:56:db:f8:ec:ec:d5:2f:dc:e0:b2:8c:a9:b3:3d:c9:9e:68:
10:d1:bf:1c:37:48:2a:06:f6:71:95:0f:68:8b:4c:72:c2:cf:
07:e6:c2:06:ba:62:26:cb:18:72:ee:df:c6:1f:b9:19:ae:bc:
0c:40:2c:6b:97:96:c8:19:34:f2:b8:d4:cc:a4:19:53:4f:40:
9b:47:f0:56:5f:5a:2d:46:de:4d:9d:81:d3:15:55:ba:59:2e:
eb:d4:79:d2:dc:b3:64:00:93:4b:98:e1:88:c3:f1:d7:45:78:
e0:bc:e8:c8:ab:c0:58:1a:f3:c7:51:59:f6:41:04:99:a0:f1:
13:7e:e9:08:2a:63:79:7c:8a:c3:b7:3c:b5:50:e6:d8:71:18:
77:c9:39:26:7e:94:8c:46:79:1c:f6:13:bd:a6:28:12:da:64:
4d:4e:87:9c:b2:95:4a:04:4d:7f:41:e9:13:1d:5f:b4:f4:94:
ab:fc:0a:c5:0b:a6:55:e3:d5:e9:7d:7f:22:b6:5a:1a:b5:df:
70:6c:9f:82:83:f2:84:76:6a:eb:78:13:d6:64:60:e8:43:97:
5b:7a:a8:a9:79:fa:cb:1e:00:71:bf:d6:02:4a:ea:8b:5c:6b:
2d:74:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:09 2024 by rpki-client on console-ams.rpki-client.org