Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/nEaTDH3WbCWLppJhn681B9JzUnk.roa
File: nEaTDH3WbCWLppJhn681B9JzUnk.roa (raw, json)
Hash identifier: y+QhPbKz+1ZNnR1AQCuV+0gJglWAVmssIO8ifTd0rHQ=
Subject key identifier: 9C:46:93:0C:7D:D6:6C:25:8B:A6:92:61:9F:AF:35:07:D2:73:52:79
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 01836902660FDBE17E24393385778A5BD543
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/nEaTDH3WbCWLppJhn681B9JzUnk.roa
Signing time: Fri 23 Sep 2022 06:21:48 +0000
ROA not before: Fri 23 Sep 2022 06:21:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8758
IP address blocks: 212.6.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:69:02:66:0f:db:e1:7e:24:39:33:85:77:8a:5b:d5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Sep 23 06:21:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c46930c7dd66c258ba692619faf3507d2735279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:d3:33:eb:4f:3c:bf:f1:40:b6:75:b7:f4:
6b:e8:97:4e:9d:24:cb:55:8f:fe:1c:07:83:66:06:
7c:43:77:01:62:06:7a:5d:f9:4a:dd:30:bc:62:1c:
30:3f:06:d4:67:ae:b0:12:b2:80:63:60:8d:5a:93:
a6:a8:a2:41:3a:6b:68:74:6d:be:a7:74:8f:c6:8f:
43:e6:b4:2b:b3:a0:5a:ff:7c:46:eb:93:ff:ea:0e:
fe:da:eb:bf:1a:3a:7f:62:18:97:ab:26:a5:25:19:
02:bb:56:c2:0f:ea:92:4d:3e:a5:27:3e:cf:4f:97:
bd:6f:37:f0:76:10:49:31:38:c4:9f:27:89:70:f7:
79:05:b7:18:39:39:cc:96:e0:f6:32:9c:b3:2d:f6:
cb:9e:75:21:2f:ea:68:37:ee:be:7b:e6:93:89:99:
a1:df:d3:3d:8a:4a:1b:38:91:fa:39:cf:a2:05:b7:
fc:ff:15:bc:a7:07:77:7e:b7:a6:0c:a7:9f:9e:bb:
17:94:96:c7:f3:b2:b7:4c:3f:d4:98:37:14:22:71:
41:f9:0b:2f:56:7e:61:4f:78:64:68:7e:56:af:91:
8a:99:74:14:6e:d3:f6:56:df:9a:a1:1d:17:22:5d:
b4:23:33:3a:86:b4:56:dc:ed:32:63:98:ec:ac:ae:
ff:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:46:93:0C:7D:D6:6C:25:8B:A6:92:61:9F:AF:35:07:D2:73:52:79
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/nEaTDH3WbCWLppJhn681B9JzUnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.45.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:43:0d:3d:c6:d3:62:5b:32:50:44:c9:37:07:e7:ca:d7:f3:
57:af:9b:70:63:e8:fc:57:cd:69:28:00:01:bb:d4:5f:ed:70:
60:9d:7f:2e:9b:a8:ef:4f:d0:44:03:79:40:f7:2a:dd:a3:f2:
40:f3:e4:8f:d4:15:bb:da:a4:72:7d:e8:88:c8:97:0d:0f:46:
c7:60:81:ed:45:38:4a:73:f3:48:21:48:94:b5:ab:3d:00:11:
55:74:82:0f:30:b6:68:40:98:9a:15:68:94:2a:10:26:cd:40:
f7:27:15:f9:a2:2c:6e:74:b0:31:b1:1c:55:81:ee:79:38:e2:
11:98:d3:ca:6b:dd:76:39:a5:f5:9b:ac:52:9f:13:0a:a4:91:
46:f5:07:e5:af:31:6c:6a:2d:2e:74:c8:92:29:3f:d3:6b:bd:
ff:31:d4:b4:4c:17:52:e4:5a:5c:a4:8e:11:94:03:03:76:ac:
73:a1:ab:a0:5b:f1:84:f8:28:6d:e0:07:17:5e:23:82:7e:81:
44:25:a3:96:5b:8d:1f:43:40:bc:fb:5d:79:54:c7:f5:ad:58:
8a:97:21:c0:3d:5b:bf:61:0f:8e:9b:71:56:ff:e2:f4:3a:1e:
d3:4e:4f:20:a0:c1:24:39:58:f4:d8:e1:f3:fc:44:92:ce:04:
18:2e:81:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:10 2025 by rpki-client