Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/JlECNicmzxvGX6lqTOMgRkD-rcQ.roa
File: JlECNicmzxvGX6lqTOMgRkD-rcQ.roa (raw, json)
Hash identifier: FTOMSP0Qrt6mjICiDEN63i5HURjyMALV6ZSEyczAkJs=
Subject key identifier: 26:51:02:36:27:26:CF:1B:C6:5F:A9:6A:4C:E3:20:46:40:FE:AD:C4
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0189E59906A2BA81BDECCAB18B1A540A870A
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/JlECNicmzxvGX6lqTOMgRkD-rcQ.roa
Signing time: Fri 11 Aug 2023 17:15:58 +0000
ROA not before: Fri 11 Aug 2023 17:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 46.8.195.0/24 maxlen: 24
188.130.224.0/22 maxlen: 24
46.8.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e5:99:06:a2:ba:81:bd:ec:ca:b1:8b:1a:54:0a:87:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Aug 11 17:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=265102362726cf1bc65fa96a4ce3204640feadc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ab:1e:51:b2:32:f3:49:ee:a0:d6:29:0f:99:
28:64:77:1c:ee:b9:3c:2f:87:5d:6e:8b:0f:47:64:
ac:36:f8:96:3c:6b:a9:12:53:fa:05:3e:15:7c:0f:
f6:60:e9:7d:20:ec:5c:1d:f6:61:b9:db:7a:9f:50:
cf:ec:5a:09:40:1d:b7:45:e7:e9:1a:e9:1b:f0:f6:
f5:7d:11:ff:7a:ae:36:8c:74:d1:a7:7b:8e:53:dc:
1c:e8:c8:ec:e8:47:80:32:96:4e:f1:a9:ee:de:04:
a3:dc:05:91:26:67:d6:b2:e2:9c:d5:ea:82:b3:32:
a6:2a:c4:b5:13:2a:71:79:77:d0:0f:42:ef:42:a1:
5e:b4:c5:83:cf:d7:8a:19:b5:ab:7b:b9:85:84:2c:
ff:b0:51:e6:82:bb:f5:f5:82:e0:81:aa:8f:0b:20:
3b:b9:f4:e3:7c:b2:21:33:8c:e0:df:5c:5c:9a:a6:
77:7b:a5:4a:59:23:62:14:93:53:0d:95:62:5f:d4:
ac:1a:b2:cc:cc:a6:5a:9d:59:55:d3:48:09:5d:de:
a5:97:1a:5d:f4:ce:ef:cf:88:a9:95:c3:14:a9:cd:
ac:79:3f:36:47:e8:af:c8:6d:e0:ba:a3:db:fb:be:
24:1d:f6:6c:37:8a:d7:48:36:95:ba:2a:f9:55:30:
8c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:51:02:36:27:26:CF:1B:C6:5F:A9:6A:4C:E3:20:46:40:FE:AD:C4
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/JlECNicmzxvGX6lqTOMgRkD-rcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.100.0/22
46.8.195.0/24
188.130.224.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:b0:c3:ab:ab:b6:dc:8f:fc:29:81:5e:de:c8:9c:42:3c:b9:
8c:65:cb:eb:61:b9:6e:2f:be:f2:29:76:92:7e:9d:74:3e:3a:
32:7c:d8:96:c4:4e:a5:4b:2f:36:6f:23:87:a7:92:f6:21:74:
ce:25:53:3c:a8:35:ec:dd:f3:9b:5c:a1:1c:47:95:de:e8:f9:
b4:08:e2:3a:e4:12:0c:e4:1e:bf:3a:c4:03:84:70:38:2f:f5:
3f:58:4d:af:1f:af:dd:32:3a:ed:aa:ef:6c:ba:b0:13:5d:2f:
cc:30:52:a2:b2:da:de:ab:97:e6:fe:f0:45:8d:25:4a:07:b9:
ef:b0:5c:99:f8:88:8a:01:26:8d:66:19:9d:b2:ce:7d:e1:6e:
1a:f4:50:ea:01:ba:0a:0c:65:e5:2d:e4:28:b8:80:c5:1f:7a:
2e:da:73:88:79:b1:4d:dd:ea:84:ce:86:fb:6e:f0:df:11:d7:
7c:25:37:15:a9:a4:e4:be:eb:b6:6e:9e:19:7f:f0:bb:87:55:
98:56:35:0b:3e:0a:22:d1:f2:1d:d7:47:76:30:23:37:5c:65:
6e:c0:be:4e:88:7e:f3:9e:73:f2:a0:98:fe:9f:c2:3b:32:02:
3a:13:95:c3:83:19:44:ac:61:9f:8e:3a:08:74:fe:9e:33:09:
12:ac:31:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:21 2025 by rpki-client