Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/45-WFciXZWbu0YnD4oStwTdbfME.roa
File: 45-WFciXZWbu0YnD4oStwTdbfME.roa (raw, json)
Hash identifier: 3fMrQICwJYmvRoj39YIB976BkWxIG6j8I1SmvuILYoI=
Subject key identifier: E3:9F:96:15:C8:97:65:66:EE:D1:89:C3:E2:84:AD:C1:37:5B:7C:C1
Certificate issuer: /CN=e9fb6dd5a5cbfd84da82e2759f6955622c1ee932
Certificate serial: B1B248
Authority key identifier: E9:FB:6D:D5:A5:CB:FD:84:DA:82:E2:75:9F:69:55:62:2C:1E:E9:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ftt1aXL_YTaguJ1n2lVYiwe6TI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/45-WFciXZWbu0YnD4oStwTdbfME.roa
Signing time: Sat 01 Jan 2022 13:06:37 +0000
ROA not before: Sat 01 Jan 2022 13:06:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 62.233.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11645512 (0xb1b248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fb6dd5a5cbfd84da82e2759f6955622c1ee932
Validity
Not Before: Jan 1 13:06:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e39f9615c8976566eed189c3e284adc1375b7cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3e:00:b5:d6:11:9d:37:45:23:1f:ff:ff:34:
6b:a7:8a:2e:c3:6b:7c:8d:25:4a:40:73:da:52:4a:
3d:dc:68:52:7c:98:5c:d0:15:81:39:1a:b7:d0:d4:
d0:82:e5:16:2b:83:dd:b8:15:d1:f2:fe:e7:b7:de:
8a:2e:37:5e:92:90:ae:6b:65:a0:65:c6:25:f2:86:
6a:76:34:a8:f8:dd:a7:d0:7f:cd:8f:72:df:e5:76:
51:04:0d:6e:ba:67:9d:d0:ff:da:f7:21:8b:85:32:
dd:be:53:8a:55:d7:fe:3c:2e:26:69:53:53:77:54:
dd:b4:69:ec:ab:53:7b:b7:de:91:71:b1:9d:3e:d5:
45:d7:70:f3:f6:45:a3:f8:29:0a:c4:14:06:17:18:
a1:86:e1:11:6b:2b:d6:8f:08:a5:05:5c:e0:75:8b:
68:ac:be:df:24:88:b6:ef:cf:71:12:48:75:28:45:
d1:75:da:9d:52:ba:ac:ae:b5:51:e7:ef:d3:91:de:
fb:0e:2a:09:52:86:da:01:35:37:b7:73:76:55:62:
3d:07:53:88:ff:eb:ba:b5:8f:a8:00:c0:ba:2d:88:
bb:d5:a6:5f:39:8d:0b:22:8d:cc:e2:eb:9a:16:86:
f5:9f:65:cc:91:ef:57:1f:bc:45:29:3d:36:1d:e2:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9F:96:15:C8:97:65:66:EE:D1:89:C3:E2:84:AD:C1:37:5B:7C:C1
X509v3 Authority Key Identifier:
keyid:E9:FB:6D:D5:A5:CB:FD:84:DA:82:E2:75:9F:69:55:62:2C:1E:E9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ftt1aXL_YTaguJ1n2lVYiwe6TI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/45-WFciXZWbu0YnD4oStwTdbfME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/6ftt1aXL_YTaguJ1n2lVYiwe6TI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.46.0/24
Signature Algorithm: sha256WithRSAEncryption
20:9b:8a:81:8a:77:0b:31:d0:3c:40:91:e5:34:8d:bb:36:da:
86:96:1b:78:59:83:3d:f6:e7:c6:92:5c:13:3a:a6:2c:f5:59:
b9:bf:4e:00:38:dc:ab:65:61:50:28:7f:3d:a9:dd:e5:c6:05:
6d:be:21:91:98:04:04:d7:c8:2c:bd:2f:98:66:88:9d:e1:9d:
0b:a6:b4:ce:53:48:c8:42:b7:10:f3:25:9b:e4:09:52:8c:7d:
5d:9c:7b:d4:a6:96:b3:13:43:10:95:72:7d:b8:55:05:db:5d:
b0:60:39:0f:45:3d:a2:f0:d0:03:76:1a:9b:b2:06:a9:2e:24:
4c:d6:d3:67:f6:80:15:83:15:a2:78:62:f3:c6:80:8c:59:71:
4d:0b:3c:72:b3:1b:a4:e9:74:49:87:a8:f2:10:03:bf:27:e5:
aa:2a:9d:19:71:3e:0f:1b:21:01:eb:72:97:c3:e7:7d:fa:37:
38:19:aa:8f:bb:ff:a3:03:80:19:60:de:bc:5c:74:14:5c:05:
fd:64:bb:44:9f:cc:71:0a:6b:54:94:aa:19:fb:64:86:81:03:
bd:2f:0f:9b:67:69:ed:0e:06:79:41:2a:09:ef:56:4c:02:f4:
50:c8:20:67:9e:c2:2f:10:fa:1a:0f:4d:79:17:86:ef:2e:1d:
02:13:2f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:32 2023 by rpki-client on console-fra.rpki-client.org