Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/7jU7owSL25Gw1XRKjhDvXOX82rQ.roa
File: 7jU7owSL25Gw1XRKjhDvXOX82rQ.roa (raw, json)
Hash identifier: BwpWhl9p61QpRAv0/RCRBSSD8Llr5u25QkKESPFkKb4=
Subject key identifier: EE:35:3B:A3:04:8B:DB:91:B0:D5:74:4A:8E:10:EF:5C:E5:FC:DA:B4
Certificate issuer: /CN=311867bba7eeccf2b04c122ab8ec2cf1e72fc5ea
Certificate serial: 0184498AE4800499E053A1D4F134022BFABA
Authority key identifier: 31:18:67:BB:A7:EE:CC:F2:B0:4C:12:2A:B8:EC:2C:F1:E7:2F:C5:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhnu6fuzPKwTBIquOws8ecvxeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/7jU7owSL25Gw1XRKjhDvXOX82rQ.roa
Signing time: Sat 05 Nov 2022 20:45:50 +0000
ROA not before: Sat 05 Nov 2022 20:45:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 46.17.14.0/23 maxlen: 23
2a02:2870:8000::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:49:8a:e4:80:04:99:e0:53:a1:d4:f1:34:02:2b:fa:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311867bba7eeccf2b04c122ab8ec2cf1e72fc5ea
Validity
Not Before: Nov 5 20:45:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee353ba3048bdb91b0d5744a8e10ef5ce5fcdab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:05:b1:02:bb:e0:e9:f6:62:eb:b1:a2:34:26:
e0:6b:3c:33:c9:a0:2d:af:84:6a:87:b3:25:d9:c2:
83:ee:6b:70:eb:93:99:ac:55:6c:a3:54:2b:aa:99:
70:00:4b:c5:61:da:50:e3:b1:77:5a:0f:26:d5:58:
51:b6:f6:2d:ce:78:d6:e7:02:02:04:a4:44:eb:f4:
57:c5:30:18:9c:93:a0:30:cb:0c:00:fc:40:46:18:
02:3d:55:de:e1:09:94:db:0e:9d:89:41:c9:5c:5e:
ef:3d:1b:a0:36:11:87:f2:92:49:53:c0:9a:2e:24:
f1:59:f8:c1:45:e9:bb:24:f8:20:bc:30:64:17:32:
f5:95:93:8c:0e:e7:19:49:99:a3:5f:da:11:1e:8a:
ef:25:e2:dc:6c:12:14:b1:13:9e:3c:d3:87:b7:0d:
e3:ba:ae:7d:ae:6c:88:dd:22:35:00:c0:d0:39:8d:
7d:0f:a5:6e:ef:60:e6:7a:9c:c1:46:3e:0f:e3:c6:
e3:b6:40:ef:3a:57:b6:31:cf:4b:82:69:df:1a:f6:
68:5b:bc:b8:5a:b0:e4:6c:e8:7d:a9:d1:fb:32:52:
0e:16:44:68:ce:77:8c:1d:0e:b8:db:e0:86:80:f0:
4b:30:ea:50:cd:00:1d:a0:32:5e:1c:b0:bc:71:ef:
1e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:35:3B:A3:04:8B:DB:91:B0:D5:74:4A:8E:10:EF:5C:E5:FC:DA:B4
X509v3 Authority Key Identifier:
keyid:31:18:67:BB:A7:EE:CC:F2:B0:4C:12:2A:B8:EC:2C:F1:E7:2F:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhnu6fuzPKwTBIquOws8ecvxeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/7jU7owSL25Gw1XRKjhDvXOX82rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/MRhnu6fuzPKwTBIquOws8ecvxeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.14.0/23
IPv6:
2a02:2870:8000::/33
Signature Algorithm: sha256WithRSAEncryption
1d:17:d5:4e:ff:26:38:8d:e3:66:34:18:72:45:57:53:5c:0a:
8a:5c:c2:e5:ca:8d:ed:ba:10:c4:67:6c:66:a3:1c:05:7e:ce:
36:9a:43:b1:23:66:db:7c:2d:e6:43:55:16:04:65:72:13:d4:
5d:3e:2c:d1:f2:c6:a8:c5:76:7d:4f:0e:2e:df:52:7d:f5:2f:
bc:3b:b2:b8:0e:f2:f1:f3:41:59:89:b4:5c:58:c5:b0:4d:3e:
a2:b2:47:f9:cb:82:38:ea:44:38:32:97:1a:56:44:22:2a:58:
56:ce:40:ed:e7:d6:05:57:11:81:1c:da:19:4c:62:ac:9b:0a:
51:c2:14:f7:af:65:e8:ac:d2:f2:f5:45:7b:f2:b0:4f:0c:50:
b4:17:89:3f:c4:d7:24:6e:87:11:88:3c:9d:92:0a:c4:53:94:
ba:e3:b9:ee:d5:21:d2:25:1f:6b:c5:17:65:93:3c:74:f4:ea:
a4:6b:0d:aa:8e:20:70:84:10:20:ac:63:9d:c5:c4:76:d9:4c:
cc:6f:40:22:0d:eb:2d:61:6d:71:4e:1a:7c:66:42:58:4f:77:
ca:b0:11:a1:8c:50:0c:3a:17:cb:a5:59:17:ab:b6:7d:fe:08:
e4:d9:f6:62:1a:23:99:ba:12:10:1a:64:58:fa:7b:8c:79:06:
ca:2a:ca:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:36 2025 by rpki-client