Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/KE7uC9B2W9F8VaLEZQNseoMjGqI.roa
File: KE7uC9B2W9F8VaLEZQNseoMjGqI.roa (raw, json)
Hash identifier: UEvvNcuC2QYROZKRNsjd8f5CHmAJhwXjEzto4LmWTJk=
Subject key identifier: 28:4E:EE:0B:D0:76:5B:D1:7C:55:A2:C4:65:03:6C:7A:83:23:1A:A2
Certificate issuer: /CN=7c1bbb08037a876230406fa67379f980b5ab3276
Certificate serial: 6F86C4
Authority key identifier: 7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/KE7uC9B2W9F8VaLEZQNseoMjGqI.roa
Signing time: Sat 01 Jan 2022 01:57:42 +0000
ROA not before: Sat 01 Jan 2022 01:57:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51088
IP address blocks: 46.175.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7308996 (0x6f86c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1bbb08037a876230406fa67379f980b5ab3276
Validity
Not Before: Jan 1 01:57:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=284eee0bd0765bd17c55a2c465036c7a83231aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:ca:39:54:72:91:95:5b:c8:9c:e2:af:2a:
1e:f6:fa:21:20:79:c0:36:b5:7f:30:1f:1d:f5:76:
e8:77:c9:c2:ac:5d:27:45:af:db:90:45:31:69:54:
29:f4:ed:9b:69:2d:96:55:2c:9f:48:13:2a:c3:c5:
d4:85:6e:66:dc:4e:2f:1c:e2:1e:d1:ca:6f:65:34:
4d:af:db:c0:84:cc:26:94:eb:a7:2e:cc:df:e3:a0:
ca:b7:30:e6:06:e9:7b:71:fe:37:25:e3:6e:1a:12:
dd:19:5a:ff:e8:45:e8:7c:dd:a5:ab:66:2d:cb:ee:
bd:33:b0:9c:f2:08:72:0d:70:a8:93:a1:db:f8:46:
87:9c:b3:f6:83:53:c8:2c:45:80:bb:55:82:e1:83:
bd:0d:c0:0e:73:52:9e:73:4e:af:8f:df:f1:14:01:
d3:42:c6:4c:33:71:22:54:e2:c2:da:1f:0c:b1:16:
7c:48:69:ca:7d:01:37:eb:42:d5:2c:61:fc:c8:39:
df:fa:29:59:fa:8b:6f:a7:ef:c3:13:35:c7:93:93:
f8:67:b3:dc:d1:ec:47:e6:6c:ec:cc:ce:83:57:ca:
37:fd:67:fb:3a:84:96:e3:aa:e8:d4:e8:0d:ab:1c:
db:fd:1e:da:c5:e1:d2:8e:f0:e5:73:7e:c0:fb:4f:
a1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4E:EE:0B:D0:76:5B:D1:7C:55:A2:C4:65:03:6C:7A:83:23:1A:A2
X509v3 Authority Key Identifier:
keyid:7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/KE7uC9B2W9F8VaLEZQNseoMjGqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.131.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:79:30:27:b1:10:9a:7f:05:f6:c4:0b:c3:4b:a1:87:d3:83:
7c:1d:ca:e7:71:3b:e5:85:ad:c2:33:e7:1c:d9:ac:b4:6e:24:
c7:95:4c:47:b0:c4:0a:6d:06:8f:f4:c4:4d:c0:11:b3:a9:bb:
3c:90:47:ca:58:9d:86:84:49:99:c1:f9:34:77:9b:76:31:70:
84:92:89:61:84:61:93:6b:fb:aa:b9:11:0b:71:c0:ab:32:f7:
d0:2a:fa:80:f7:86:ee:5c:8e:d6:d0:46:6d:6c:61:df:a8:68:
74:8d:11:e5:9d:bd:f0:5f:ef:86:65:47:81:6c:7c:12:33:7a:
ea:bf:da:98:ca:d8:12:c8:1d:aa:b1:41:2a:0f:06:24:59:84:
a1:05:20:aa:3f:af:c8:b5:1b:67:b3:1a:8c:fc:be:fc:e9:2e:
7b:89:87:93:6e:ac:05:74:e7:d0:85:79:a4:a5:1e:04:b4:b4:
78:c7:e5:85:f4:c8:98:0c:45:41:5a:79:3f:2a:9b:7d:c9:90:
da:4f:15:c1:f9:fb:24:c9:97:23:83:1b:68:93:a1:39:73:89:
59:38:26:7d:08:44:f1:19:e6:f0:6f:d1:2b:83:f0:10:ae:37:
f4:4e:1b:8a:89:03:d7:22:28:07:30:b2:c2:62:8d:36:9f:b7:
b7:ad:75:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:05 2025 by rpki-client