Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/fbd7UrUYfdrP86F8VsQGn43-dOs.roa
File: fbd7UrUYfdrP86F8VsQGn43-dOs.roa (raw, json)
Hash identifier: 1tdCvWrYv0LljXJGhWmLzgkbQ/YjM5sM1y7xkhECB0g=
Subject key identifier: 7D:B7:7B:52:B5:18:7D:DA:CF:F3:A1:7C:56:C4:06:9F:8D:FE:74:EB
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0B66B299
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/fbd7UrUYfdrP86F8VsQGn43-dOs.roa
Signing time: Sat 01 Jan 2022 08:58:41 +0000
ROA not before: Sat 01 Jan 2022 08:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60093
IP address blocks: 46.234.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191279769 (0xb66b299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 08:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7db77b52b5187ddacff3a17c56c4069f8dfe74eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:70:40:85:fa:e0:2a:62:ec:c3:26:84:a0:25:
6b:bb:80:51:cf:f8:f0:b4:a0:a0:ba:1f:ec:19:b6:
af:20:09:f4:79:49:77:50:57:43:fb:da:7f:09:56:
53:cc:b7:fd:87:b7:a9:7c:36:88:1e:86:60:71:c1:
1d:48:00:91:9e:08:d7:44:31:9d:89:00:70:0a:65:
aa:3d:71:1d:ed:4b:f1:e1:fb:0f:cb:08:f7:0e:86:
ed:9e:f0:db:39:ee:85:f7:43:8d:ec:14:8a:32:45:
63:97:74:27:e3:d3:94:78:37:37:48:39:56:fc:e0:
d7:b6:10:44:fb:6f:34:af:ba:c6:53:94:c3:a3:4c:
ab:33:88:ea:fd:87:d0:30:12:06:ca:2f:16:68:90:
81:37:08:0a:77:f7:cf:24:3e:ac:cf:ed:49:7e:8a:
35:03:39:1d:11:e9:d6:4a:5a:e3:6e:56:68:b4:20:
c4:64:09:a9:3f:87:fe:1d:e2:21:77:fb:25:fd:28:
1b:07:a5:88:d7:1d:df:98:65:17:17:40:2d:02:80:
81:84:2b:71:41:2c:48:36:54:51:85:9c:39:90:cb:
e6:29:6e:d9:8b:81:ed:a6:14:cc:61:c0:97:1f:5d:
8c:81:17:e1:e5:73:d7:28:20:e3:0f:6b:d4:27:b0:
ec:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B7:7B:52:B5:18:7D:DA:CF:F3:A1:7C:56:C4:06:9F:8D:FE:74:EB
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/fbd7UrUYfdrP86F8VsQGn43-dOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.234.16.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ff:ca:e0:aa:2e:d9:73:91:62:a0:1a:18:dd:e3:2a:4c:da:
55:d7:65:ae:4e:5b:ec:02:86:86:4d:9f:70:91:6f:3a:ec:86:
f9:b2:0a:f4:01:a9:46:20:5f:ea:ae:8b:51:06:42:15:25:55:
7b:a9:18:8d:1c:2a:af:d9:2e:bd:11:8a:89:13:02:57:f0:01:
35:af:39:d7:53:d9:a7:48:ff:a6:29:ff:07:39:97:85:26:85:
07:b1:c2:a1:35:e6:7c:09:44:ae:84:8f:b5:8f:00:6f:33:51:
8b:97:68:05:15:ef:1b:e2:16:d5:f1:79:7b:d6:4b:38:23:3c:
87:18:52:fe:b1:65:e0:9f:7f:b4:aa:3b:b1:bf:d8:a3:a4:66:
6a:aa:78:76:52:39:65:fb:0c:1e:80:90:05:c7:74:c6:f7:05:
04:13:db:b3:56:33:eb:3f:5f:7f:ff:cd:5e:f5:30:31:ad:8c:
ea:ae:f8:82:97:40:3e:37:20:51:49:1a:a2:d3:f3:81:95:4a:
93:f5:de:b8:e6:44:04:cd:0e:f3:c2:c0:be:6e:29:37:3f:5a:
70:d0:04:70:28:64:aa:2d:5b:9c:8e:25:fe:32:62:30:66:71:
72:77:e3:82:8d:62:bb:e7:3a:ec:df:5b:24:37:58:83:fa:1d:
96:4a:72:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org