Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/itBs7_89AnxC7zuylp-uFafc1Og.roa
File: itBs7_89AnxC7zuylp-uFafc1Og.roa (raw, json)
Hash identifier: K6yHTSR1whf3gf7hI3TrgTD3H1eDz0cKPzBR6IybZ5Y=
Subject key identifier: 8A:D0:6C:EF:FF:3D:02:7C:42:EF:3B:B2:96:9F:AE:15:A7:DC:D4:E8
Certificate issuer: /CN=311867bba7eeccf2b04c122ab8ec2cf1e72fc5ea
Certificate serial: 01857030313A1B78411D33864FE2A445D079
Authority key identifier: 31:18:67:BB:A7:EE:CC:F2:B0:4C:12:2A:B8:EC:2C:F1:E7:2F:C5:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhnu6fuzPKwTBIquOws8ecvxeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/itBs7_89AnxC7zuylp-uFafc1Og.roa
Signing time: Mon 02 Jan 2023 01:54:44 +0000
ROA not before: Mon 02 Jan 2023 01:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 46.17.14.0/23 maxlen: 24
2a02:2870:8000::/33 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:31:3a:1b:78:41:1d:33:86:4f:e2:a4:45:d0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311867bba7eeccf2b04c122ab8ec2cf1e72fc5ea
Validity
Not Before: Jan 2 01:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ad06cefff3d027c42ef3bb2969fae15a7dcd4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:3e:cf:42:2d:f7:0d:08:93:c1:1b:fc:52:
46:69:21:59:0b:f2:4a:dc:28:fa:22:40:fa:4b:eb:
3e:98:69:24:7f:39:37:32:14:cb:77:27:93:87:f5:
fe:f2:8e:4c:70:71:7f:bf:a8:b7:ad:c5:7b:49:8c:
74:ce:31:0c:50:86:be:c4:43:24:5e:18:74:42:65:
c8:22:0d:f8:29:d6:9a:8d:fb:c6:6f:56:7e:4b:96:
42:43:20:40:40:9a:fa:04:de:7e:b4:27:0f:fe:bd:
35:11:d1:1b:a7:02:8d:cd:4d:db:32:92:47:61:6e:
04:bd:e1:b3:18:dd:f8:a4:49:91:58:47:62:11:7a:
74:d1:b6:32:0f:1a:ce:ac:15:70:79:a1:8d:a7:97:
c3:d8:a8:bb:6c:cc:cb:49:7e:cf:15:c0:93:68:c4:
be:0d:23:bd:88:56:47:f7:bd:81:54:3b:c1:4b:38:
01:bb:fc:db:5f:68:7e:77:b0:4d:64:b4:5d:cc:d2:
d1:98:f5:75:ca:1a:74:e2:2c:f9:96:50:69:71:84:
6a:65:85:d5:33:da:b4:01:9a:00:5c:89:36:c4:8f:
c8:cc:ba:ec:74:74:ab:b5:5f:11:34:2b:d3:8b:67:
1a:56:b8:40:4d:23:67:92:c6:ea:28:c2:53:06:09:
06:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D0:6C:EF:FF:3D:02:7C:42:EF:3B:B2:96:9F:AE:15:A7:DC:D4:E8
X509v3 Authority Key Identifier:
keyid:31:18:67:BB:A7:EE:CC:F2:B0:4C:12:2A:B8:EC:2C:F1:E7:2F:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhnu6fuzPKwTBIquOws8ecvxeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/itBs7_89AnxC7zuylp-uFafc1Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/MRhnu6fuzPKwTBIquOws8ecvxeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.14.0/23
IPv6:
2a02:2870:8000::/33
Signature Algorithm: sha256WithRSAEncryption
46:fb:53:ef:9b:fc:50:47:4c:c9:eb:95:6b:1f:b6:b1:1a:99:
fa:84:9f:57:f4:8f:bb:6e:31:34:7f:59:e9:39:61:63:12:6b:
9a:b1:97:c7:73:c0:7d:83:cf:57:84:ee:6b:97:dd:58:69:85:
5e:7e:c1:4b:2d:b6:62:5d:ca:a8:f7:28:58:a9:e9:de:c2:96:
64:91:06:0e:96:e3:6c:01:18:a6:48:bb:c7:7d:3b:90:84:df:
65:f9:0c:c7:7b:2a:5e:cd:e9:5c:aa:8f:1a:9e:88:e4:c9:6a:
43:71:fd:2f:8c:22:c3:1f:e0:11:6e:62:2e:e5:6d:d8:bf:14:
0a:21:52:e8:16:94:91:0c:2d:90:0b:69:65:e9:cb:17:78:da:
a7:94:68:5b:e4:cb:70:47:a2:ee:86:96:62:bc:35:f5:e5:c0:
9d:01:cc:e3:92:86:e0:04:ad:5d:50:ac:b3:b7:3e:63:08:fd:
ef:20:b2:78:a0:0a:63:71:00:c2:a1:66:3f:3b:23:69:03:05:
74:02:5a:48:bc:b5:91:c5:26:0e:79:8e:33:77:e8:09:31:3c:
87:f8:95:bb:85:27:97:09:91:b5:78:a4:89:04:1f:bd:79:51:
b0:20:92:64:47:76:72:96:42:ce:76:62:8d:ff:14:c8:44:1a:
a1:36:ed:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:02 2025 by rpki-client