Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/iib1Zo4XOavSbTzXD01J11dHA7Y.roa
File: iib1Zo4XOavSbTzXD01J11dHA7Y.roa (raw, json)
Hash identifier: FVTE0T4cmQGmQR3EYvmeYxl3hb9ArIhvbs7ujhrgmFI=
Subject key identifier: 8A:26:F5:66:8E:17:39:AB:D2:6D:3C:D7:0F:4D:49:D7:57:47:03:B6
Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial: 018409849E79D633978818A76509BC3B6D85
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/iib1Zo4XOavSbTzXD01J11dHA7Y.roa
Signing time: Mon 24 Oct 2022 10:23:17 +0000
ROA not before: Mon 24 Oct 2022 10:23:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 46.255.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:84:9e:79:d6:33:97:88:18:a7:65:09:bc:3b:6d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Validity
Not Before: Oct 24 10:23:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a26f5668e1739abd26d3cd70f4d49d7574703b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:6c:4d:7f:0a:3b:10:6f:fb:2b:ca:03:0b:
f8:fe:9b:4b:9e:bc:f3:21:f7:6f:12:3b:9f:5c:7c:
42:d6:95:8e:50:08:cd:6e:91:be:fa:4b:04:41:ac:
28:93:31:64:65:71:e9:b6:a4:6c:e2:d9:f6:d9:3d:
1b:b6:82:3d:69:f3:1f:e0:f8:90:8b:84:df:b0:f4:
49:c6:b2:d2:a8:e4:e6:62:4e:16:89:1e:34:dc:d2:
d9:95:b8:9a:84:9f:96:6a:43:94:4e:f0:05:f8:46:
1a:81:59:da:cf:34:2f:7a:93:e6:87:c0:da:aa:b5:
91:0d:ee:0d:7a:d0:5b:41:f5:3c:c5:4f:f1:51:c9:
8e:2e:7a:88:9b:8a:58:40:99:7a:ee:37:c1:16:58:
95:60:1d:46:15:f3:24:d7:de:b6:9d:55:fa:ad:0c:
38:95:52:df:4d:6d:e5:e6:8c:6a:b5:b8:9a:91:4f:
ca:7d:74:f1:70:65:a3:94:a3:0c:ef:e5:33:73:db:
2f:d3:e1:6d:de:92:f0:8c:dc:b9:0f:27:28:92:c7:
d4:c8:9b:5a:59:cb:c8:50:21:de:8e:31:b6:81:89:
63:9b:ad:0e:3c:3b:39:7f:3f:61:89:5c:19:e5:a1:
16:ad:e7:9e:72:de:2e:58:29:12:66:60:7a:f9:57:
9a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:26:F5:66:8E:17:39:AB:D2:6D:3C:D7:0F:4D:49:D7:57:47:03:B6
X509v3 Authority Key Identifier:
keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/iib1Zo4XOavSbTzXD01J11dHA7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.76.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b5:c5:3b:25:86:c1:df:ae:8f:0b:38:43:eb:43:16:66:a3:
7e:27:d6:3f:69:72:d1:5a:64:d1:c2:c0:ba:35:14:4d:61:64:
63:be:5d:45:03:c8:e3:69:82:c4:50:1b:5e:2b:0b:6b:a4:1f:
90:09:b8:bd:e0:bf:2f:be:2e:70:4a:cc:7a:90:5d:fb:f4:76:
b4:4e:4d:e3:74:f8:aa:1e:81:d8:f8:94:d2:ee:22:55:3a:5b:
17:47:27:48:2d:2c:59:5f:81:bb:c6:c9:b4:ea:7c:d0:9f:0a:
f1:2f:f0:bc:f9:8c:97:51:96:f1:02:a7:ca:22:e8:ee:cb:eb:
ca:03:df:ea:f4:62:25:d9:91:b9:9c:dd:c5:b9:1c:e5:6c:e1:
00:b4:84:93:d9:01:f0:02:2b:50:d4:f1:99:a5:91:2f:fa:49:
55:2f:48:07:83:8d:4c:6b:bd:1c:11:84:9b:5d:32:40:88:e0:
3f:36:eb:eb:68:58:9a:8b:6e:74:dc:8b:d1:26:ac:1a:81:81:
1f:e9:9d:a7:9d:e8:07:b3:a3:66:17:1d:0d:03:10:a8:7b:27:
8c:fa:95:84:28:2b:6b:3d:ea:3d:59:b5:46:8e:da:99:4a:bb:
e5:98:7b:b8:03:60:ea:1f:ad:1f:eb:04:ef:90:2e:11:4d:89:
c9:3a:a3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:10 2024 by rpki-client on console-ams.rpki-client.org