Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/1TV47wKTkFOz-ew_LRIEL7tbDF8.roa
File: 1TV47wKTkFOz-ew_LRIEL7tbDF8.roa (raw, json)
Hash identifier: C3eK6z5wMDS3iu3jlmwM3OoAFQ3Tc4vOrreg1arjfrg=
Subject key identifier: D5:35:78:EF:02:93:90:53:B3:F9:EC:3F:2D:12:04:2F:BB:5B:0C:5F
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 37E40E6E
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/1TV47wKTkFOz-ew_LRIEL7tbDF8.roa
Signing time: Sat 01 Jan 2022 14:56:05 +0000
ROA not before: Sat 01 Jan 2022 14:56:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211967
IP address blocks: 46.229.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937692782 (0x37e40e6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 1 14:56:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d53578ef02939053b3f9ec3f2d12042fbb5b0c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:6b:3b:d5:0d:d6:5f:89:99:72:d3:0a:f5:
e5:8d:32:c1:b8:ba:34:35:ea:92:d8:3c:54:73:c8:
59:6f:2d:d9:80:86:5c:ea:27:ef:1b:b8:8b:bb:db:
cd:b9:1e:9d:e2:c6:0b:b7:bd:de:46:a6:80:02:6f:
f3:a4:39:c6:15:45:f6:1e:1a:f0:e4:3e:81:f2:75:
af:c9:56:ae:70:96:17:98:44:87:b7:45:60:9e:b1:
89:67:7d:8a:93:14:b2:84:51:2d:12:71:0c:bd:2f:
84:ec:12:36:6d:5e:6d:40:03:62:87:69:2f:8f:eb:
5b:96:8e:1a:c0:87:a7:3c:97:97:f1:b5:8d:e5:56:
c1:1e:31:eb:a8:2d:7e:eb:b5:83:86:34:0b:30:ea:
ae:2a:42:91:58:cc:d3:73:20:1e:b3:ae:4f:9d:a5:
d3:96:c5:40:ad:45:17:27:e3:a3:2f:45:4a:4b:59:
a5:6e:0a:94:46:e7:d1:6b:a7:fc:31:50:99:7e:81:
0b:78:6c:f3:e3:6c:57:71:53:06:63:0a:bd:e7:d7:
d3:81:8f:25:a7:3d:5f:79:d0:f3:ab:c6:8e:7a:7e:
6f:71:b1:6e:17:df:2b:de:8a:4f:4a:aa:0f:4f:e1:
52:f9:ac:76:bd:65:3e:d5:50:71:f2:56:0e:6d:ac:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:35:78:EF:02:93:90:53:B3:F9:EC:3F:2D:12:04:2F:BB:5B:0C:5F
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/1TV47wKTkFOz-ew_LRIEL7tbDF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.53.0/24
Signature Algorithm: sha256WithRSAEncryption
43:bd:0f:5f:79:90:f9:6c:2b:d1:d9:5e:09:de:14:cb:67:41:
ef:73:5f:0f:c6:db:57:ce:1f:67:2e:a0:4a:bd:3c:04:fa:cd:
e2:52:55:c6:30:df:d7:c6:23:7f:9f:2e:45:5c:ff:11:d9:a0:
15:10:a1:18:de:92:1d:8b:ca:c5:45:ac:34:90:49:3d:17:f3:
f6:90:8d:94:ad:b2:ae:a3:3e:d9:c5:f8:05:37:d3:58:09:05:
19:cf:ce:53:0a:7f:b6:1d:e0:bf:3f:1d:90:17:31:44:c9:4b:
e4:1f:bb:ea:80:1e:c3:45:af:88:34:03:f6:12:3c:5e:84:97:
7b:20:27:f2:27:dc:62:07:e1:17:30:7a:89:9b:b0:d9:46:0c:
f6:ae:fe:43:8c:d3:f1:66:47:25:23:68:e5:b8:05:4d:15:db:
17:91:c1:f9:50:05:8e:6e:7e:c3:7e:7c:0c:7e:2f:01:c9:7a:
d8:ac:4a:8a:44:56:15:56:a8:7a:42:2c:39:29:f4:a3:27:3a:
aa:51:e2:da:6e:d9:0f:39:80:fb:a0:9d:9b:36:25:83:74:97:
ed:96:7b:9c:dd:bc:27:37:cb:7f:7c:19:7c:16:a0:8b:16:8a:
e7:bf:3b:44:17:39:08:05:a5:b1:26:ba:24:66:e8:21:a4:e9:
51:66:53:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:08 2025 by rpki-client