Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/B4BjK_Zyfjxg4kCB7s_npBSdmZw.roa
File: B4BjK_Zyfjxg4kCB7s_npBSdmZw.roa (raw, json)
Hash identifier: DL6zSvM6tNGKaq6ey5lr/X76kbz3ciJKzsR8bgt8IH8=
Subject key identifier: 07:80:63:2B:F6:72:7E:3C:60:E2:40:81:EE:CF:E7:A4:14:9D:99:9C
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 01853048A821A5B2FF901F2BD34D7C0CB866
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/B4BjK_Zyfjxg4kCB7s_npBSdmZw.roa
Signing time: Tue 20 Dec 2022 16:05:45 +0000
ROA not before: Tue 20 Dec 2022 16:05:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25198
IP address blocks: 46.229.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:48:a8:21:a5:b2:ff:90:1f:2b:d3:4d:7c:0c:b8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Dec 20 16:05:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0780632bf6727e3c60e24081eecfe7a4149d999c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d0:06:e0:23:96:d0:5e:ee:c0:1d:5c:8a:5f:
be:21:5c:7d:ec:91:c6:18:b1:20:93:3f:7e:22:fb:
c7:41:1c:53:74:9d:c6:b7:cf:d9:8a:90:a6:eb:c2:
a2:9e:ad:0e:04:6e:9d:8f:96:5e:91:87:5d:84:25:
02:2d:02:e9:7e:ff:17:fd:c3:2d:39:ff:b0:56:be:
c6:79:af:03:e8:b7:fc:5a:fe:96:a2:23:47:02:f4:
59:df:60:95:ca:27:5b:9c:2c:7a:86:e7:50:20:21:
04:25:cf:ff:c7:79:bd:7a:59:f4:58:fe:00:44:74:
e1:61:37:19:ad:b5:0b:ab:f0:e0:ca:5d:c5:d4:bf:
93:ff:d3:28:52:84:cc:ff:21:ac:11:73:58:48:5a:
f0:0a:65:c7:d5:bc:5a:a1:d2:51:64:ff:fc:df:c7:
bb:df:b7:ed:42:17:9e:1d:d2:d5:de:d3:d8:80:6b:
e8:42:de:99:f9:32:2b:7d:9b:b5:f3:f9:76:a0:d2:
60:6a:72:5c:e5:12:42:0c:da:bc:ff:2f:cf:6f:ef:
41:25:bf:8a:48:f7:7b:25:4f:95:f9:49:74:98:d1:
15:77:78:84:d0:1d:7e:87:4c:58:c3:5f:65:08:92:
37:61:89:bf:52:21:35:0d:38:04:43:d2:ae:53:9c:
ff:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:80:63:2B:F6:72:7E:3C:60:E2:40:81:EE:CF:E7:A4:14:9D:99:9C
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/B4BjK_Zyfjxg4kCB7s_npBSdmZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.243.0/24
Signature Algorithm: sha256WithRSAEncryption
31:45:17:cb:9c:0c:90:84:7e:1e:b0:9f:be:9c:dd:fc:72:23:
35:a1:41:db:f1:c9:c0:87:dc:e4:48:cf:45:b6:60:5b:2c:2d:
4e:5e:68:b8:10:fe:08:45:e2:9c:fa:d1:c1:82:40:11:d8:e0:
5d:34:25:ec:47:ed:77:aa:eb:c9:99:c7:36:24:01:d8:6d:cf:
fc:f1:65:82:28:5a:49:c5:e7:7e:dd:10:7f:ab:a9:82:12:6d:
e7:fa:5a:00:b4:08:11:08:da:7b:3e:e3:76:d1:c5:5a:cf:b6:
cb:85:f9:69:4d:f2:5b:ac:29:7a:11:12:63:24:36:c4:61:4b:
bc:72:87:d5:3f:75:f7:61:9c:6f:27:f9:21:f7:7e:1d:d7:fe:
f3:c1:1b:c8:3a:b4:1a:4c:cf:80:b5:9c:2f:a1:ab:77:c1:4f:
ec:99:08:bd:aa:0a:f9:cc:3d:ba:ce:12:ef:9f:85:42:eb:b1:
d7:e3:6c:5f:5d:2a:c4:ae:89:43:5e:f0:cc:ad:b5:93:21:9c:
26:2e:5f:54:e5:cd:2b:38:dc:8d:17:00:00:4a:4c:d9:60:5c:
de:9e:cc:81:0a:b1:7e:00:d4:81:5a:60:80:5b:7c:62:2f:63:
1c:7e:28:c9:3f:ee:46:c3:f4:7a:38:8c:6a:78:41:05:07:98:
d9:c9:fa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:53 2023 by rpki-client on console-fra.rpki-client.org