Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/beXkanEfklJuPw99wdcTAXbcpxg.roa
File: beXkanEfklJuPw99wdcTAXbcpxg.roa (raw, json)
Hash identifier: IIDOlrS0lFq8bqDmNn6CI/orThmuUiI4YWBBd4LL9fI=
Subject key identifier: 6D:E5:E4:6A:71:1F:92:52:6E:3F:0F:7D:C1:D7:13:01:76:DC:A7:18
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 08ADA61B
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/beXkanEfklJuPw99wdcTAXbcpxg.roa
Signing time: Tue 28 Jun 2022 06:52:40 +0000
ROA not before: Tue 28 Jun 2022 06:52:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 46.8.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145597979 (0x8ada61b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jun 28 06:52:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6de5e46a711f92526e3f0f7dc1d7130176dca718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:24:0b:f4:2c:ed:cf:5c:8b:a9:5a:54:03:
19:82:6f:0b:7e:ff:c0:37:6a:c3:07:ef:25:72:59:
d7:94:4c:7c:da:2f:98:24:44:fe:0e:d7:c3:07:5a:
d2:40:81:41:e9:e0:64:74:f3:8e:75:72:93:fc:03:
db:88:ce:92:eb:1d:18:0a:8e:71:3a:db:2a:9f:ca:
35:8a:81:90:e2:1a:24:70:ce:d2:7f:7c:41:53:76:
3e:80:96:15:22:17:5d:9a:be:e2:b3:26:2f:2e:45:
a7:a5:da:11:84:d3:13:ec:f9:0c:13:e1:a3:5b:d3:
66:9f:28:49:7a:03:ae:df:39:ef:a5:1e:75:03:1f:
0c:59:c0:9a:f6:16:64:70:a1:00:e1:6c:62:c7:40:
35:62:84:ad:3d:bb:a5:f7:bc:0c:26:60:7d:f7:e1:
b6:8d:09:df:12:30:bb:e1:96:0f:61:6e:6e:7f:02:
95:dc:8e:bb:ea:9a:43:14:bb:2b:48:59:24:e9:95:
7d:f1:4b:01:5d:0f:2a:80:d8:bc:da:2c:5f:5a:53:
ad:1b:b6:58:5d:b1:74:cf:8d:31:57:78:d2:37:d9:
0b:dd:8a:2a:30:03:f5:0f:ec:de:b4:e7:02:da:f8:
b5:47:43:49:ac:f2:7e:ec:82:15:51:da:cf:31:b3:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E5:E4:6A:71:1F:92:52:6E:3F:0F:7D:C1:D7:13:01:76:DC:A7:18
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/beXkanEfklJuPw99wdcTAXbcpxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
39:09:8b:e4:37:78:97:eb:4a:dd:5d:de:94:5b:61:ad:20:6c:
dc:7c:7f:aa:6b:1d:fa:ae:a2:b8:89:c0:25:b2:97:1a:57:ec:
a9:b3:f1:88:1a:58:d3:cb:a6:88:07:47:49:62:72:68:da:4c:
a5:cd:f2:ee:15:0e:36:61:df:30:dd:c8:8a:ac:e9:1f:c1:0c:
a1:2f:64:0e:a6:2a:4b:8e:d4:a8:13:ae:13:07:5e:54:77:44:
9a:a4:e1:8f:b1:2a:98:40:40:96:76:c4:b6:2e:f3:1a:ee:36:
ab:0e:42:c5:7e:47:b7:87:82:cd:da:b0:f3:e5:7c:6b:2c:60:
96:8c:4e:53:62:13:44:4a:d0:fa:e2:2b:ee:f9:3b:ca:4e:05:
80:de:a9:78:28:1f:c1:df:01:cd:af:98:ac:af:a2:03:10:95:
48:c9:41:90:82:93:a6:c9:68:ec:e3:59:6b:a9:d8:2c:75:c5:
d8:00:3c:16:88:f3:c2:22:d9:6d:ac:3b:a3:b7:61:32:ec:c0:
f3:af:74:40:89:ae:51:46:f0:69:ab:ae:78:d3:69:4b:fc:97:
59:4b:3c:45:b8:8f:0d:56:3f:57:e1:ac:a2:d0:3b:d1:56:86:
86:5c:d3:ed:ac:c6:48:9d:ee:c3:66:db:7d:45:85:2b:29:11:
88:83:d1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:38 2023 by rpki-client on console-fra.rpki-client.org