Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/BKYxVpJElwuHGw4gA1I3uQCI7U8.roa
File: BKYxVpJElwuHGw4gA1I3uQCI7U8.roa (raw, json)
Hash identifier: g1PnwJCNPf1de5Dxbm1JWw/WYBhz6Y4c4lTUTJykEkw=
Subject key identifier: 04:A6:31:56:92:44:97:0B:87:1B:0E:20:03:52:37:B9:00:88:ED:4F
Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial: 0181DCDEE26A75A2C584EE111AA9C76F3C1C
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/BKYxVpJElwuHGw4gA1I3uQCI7U8.roa
Signing time: Fri 08 Jul 2022 08:13:23 +0000
ROA not before: Fri 08 Jul 2022 08:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49697
IP address blocks: 46.251.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dc:de:e2:6a:75:a2:c5:84:ee:11:1a:a9:c7:6f:3c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Validity
Not Before: Jul 8 08:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04a631569244970b871b0e20035237b90088ed4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f2:2b:b8:fb:b9:b0:34:20:97:86:31:6e:3d:
84:42:d0:fc:36:03:85:8b:95:3d:31:9b:10:93:80:
fc:21:dc:3d:2c:d1:44:94:29:fe:01:16:e2:79:64:
f9:d0:7f:45:54:99:eb:8a:5e:50:61:68:55:52:01:
1a:3a:f9:26:47:d3:2a:c9:7e:13:53:a1:6e:fe:12:
16:94:f6:60:b8:d2:ab:05:f6:66:64:07:c2:74:72:
e4:5e:47:4a:f3:90:1b:fb:93:4f:71:02:cc:4f:96:
6f:4b:9a:f7:fd:76:3f:f0:08:ca:2a:1b:4f:7b:76:
2d:76:45:c4:0f:5f:a8:ff:a7:d8:b4:49:4c:7c:6c:
97:95:14:43:bc:5b:e0:91:39:4b:d6:4b:e9:ba:0a:
6f:d8:51:21:9f:14:78:0d:ed:19:93:ad:2d:80:19:
71:ed:cd:71:d8:09:d6:7d:8e:b4:13:0f:0b:f1:60:
09:0e:08:09:1a:f1:05:db:56:d1:8c:15:04:80:e0:
d1:19:e5:cd:9b:81:01:f2:06:c3:70:6b:f0:8a:2a:
ae:eb:51:3a:b4:00:e0:df:40:b4:56:82:d5:8f:22:
e9:24:7f:9e:ea:30:41:d3:2d:d3:77:13:31:33:f0:
f9:35:5a:fb:94:81:a5:4a:61:01:bd:92:5c:6e:92:
6f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A6:31:56:92:44:97:0B:87:1B:0E:20:03:52:37:B9:00:88:ED:4F
X509v3 Authority Key Identifier:
keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/BKYxVpJElwuHGw4gA1I3uQCI7U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.251.230.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ac:c1:63:cc:41:c0:ee:f0:df:8c:04:2f:2b:a5:9b:65:d1:
98:d2:68:01:fb:6e:56:7d:70:bd:30:aa:a9:fa:08:cd:e0:11:
09:af:5b:0f:af:78:f6:f8:f6:87:f6:a9:01:68:7d:28:d3:37:
b4:10:04:9d:6c:55:37:84:4e:03:66:d6:4d:cb:9b:3a:1c:0d:
46:7c:a3:97:16:de:1e:8b:4f:50:4c:40:8b:43:ca:45:8a:28:
e6:60:ba:4e:9b:17:dd:d7:dc:98:7d:ca:dc:38:6e:15:16:4c:
fc:af:be:77:c5:ce:3b:df:37:a8:9e:5f:6c:0b:59:d2:5f:d6:
9b:93:6e:f6:68:70:0b:f5:b9:b6:b8:1a:63:fb:af:ef:db:2b:
5a:d8:31:95:10:31:33:d4:6d:61:b6:18:bb:ae:15:11:fa:c9:
8f:fc:fe:2b:1b:20:f6:9f:d2:7f:b3:67:07:1a:32:1d:7e:4a:
1c:5e:56:ea:d9:81:a2:3a:21:74:ce:48:f4:e8:0e:4e:56:24:
04:0d:ec:44:5d:26:5c:eb:0a:4b:dc:24:a4:d8:8b:35:6a:85:
ef:97:7e:99:51:80:88:5a:5e:88:ff:27:ec:c6:4f:dd:97:2a:
71:a8:a8:22:1c:c3:3b:0c:e7:d8:68:81:20:a6:02:d6:bc:8a:
52:fd:0b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:01 2024 by rpki-client on console-fra.rpki-client.org