Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/Knxodn9avRHKqDUDk_SFGtJSElY.roa
File: Knxodn9avRHKqDUDk_SFGtJSElY.roa (raw, json)
Hash identifier: lrLg1r5hvVJ2hlZXYx1gwy8BPayelRcjf30SK06WGG4=
Subject key identifier: 2A:7C:68:76:7F:5A:BD:11:CA:A8:35:03:93:F4:85:1A:D2:52:12:56
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 018891AE3149BF3D3709F36AA9496433BE92
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/Knxodn9avRHKqDUDk_SFGtJSElY.roa
Signing time: Tue 06 Jun 2023 17:08:12 +0000
ROA not before: Tue 06 Jun 2023 17:08:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 46.228.131.0/24 maxlen: 24
46.228.136.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:ae:31:49:bf:3d:37:09:f3:6a:a9:49:64:33:be:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jun 6 17:08:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a7c68767f5abd11caa8350393f4851ad2521256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9b:8b:3c:bb:16:ea:2c:83:77:37:c3:98:37:
2a:33:29:56:5c:57:68:19:72:34:7d:92:00:ff:42:
55:5f:26:1b:3e:63:48:d6:cb:80:bf:6b:bd:05:e0:
b9:8f:09:e2:d8:05:b5:be:97:e2:2a:46:25:d4:53:
85:f2:58:d4:53:3e:dd:b4:94:be:3f:4f:2b:ab:a1:
95:81:3a:b4:f4:63:46:dc:4d:11:7e:aa:00:b1:9e:
ab:10:9f:12:0f:a4:f0:61:b7:a8:31:c0:1c:ec:c5:
8f:a1:20:29:c0:1b:90:d9:79:bb:ff:f9:f6:77:48:
74:27:ce:45:b5:19:7d:8e:fc:76:03:14:67:06:f1:
96:8f:14:5c:27:a7:e0:37:cf:ef:59:21:61:d3:2e:
8b:70:c7:dc:b0:4d:21:c4:bf:18:64:f6:d9:56:36:
93:fb:1b:73:35:fb:4a:be:39:b9:97:66:36:36:d4:
f2:e7:fd:1b:42:ed:87:1a:ea:4f:bc:d4:98:10:35:
c1:c8:ac:73:f9:e4:42:43:b7:2f:99:51:81:36:f1:
bf:13:9f:88:2b:9a:28:a6:fa:e9:41:1a:d0:6d:bd:
fd:78:99:c2:ba:5c:08:b0:3d:c2:88:12:73:ad:b5:
4d:2e:ec:a9:67:76:8d:aa:f7:78:d8:aa:64:43:b4:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7C:68:76:7F:5A:BD:11:CA:A8:35:03:93:F4:85:1A:D2:52:12:56
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/Knxodn9avRHKqDUDk_SFGtJSElY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.131.0/24
46.228.136.0/23
Signature Algorithm: sha256WithRSAEncryption
90:12:12:41:bf:8f:f1:50:46:8e:12:98:fe:9a:b2:07:15:87:
1c:46:ae:15:c2:5f:c8:08:54:9f:61:aa:1e:49:7d:8a:3b:f5:
e3:50:25:41:37:ab:00:0c:4d:19:ae:77:b4:6c:d9:9e:1f:e0:
3f:ac:a4:2c:bd:fb:17:d6:cd:a1:18:67:f8:f8:1a:94:4d:6b:
24:fd:60:3b:43:87:a7:cc:42:53:d9:b9:08:cc:c5:4c:0c:7d:
c8:fe:cd:7d:b9:94:09:af:f3:b5:15:6c:c5:fe:26:9c:8e:63:
5b:f3:68:42:b2:1b:4a:bb:d0:8e:e0:c1:94:5e:0e:e9:ed:56:
27:7b:a9:65:ef:7a:bb:0f:d2:46:e7:3c:8b:06:60:87:b8:e2:
6e:b7:ae:6e:c4:ef:73:00:de:d6:00:17:ea:94:39:3d:39:dc:
ea:b1:64:64:02:59:2f:04:cd:23:b5:48:c5:49:d3:e7:13:41:
b6:e7:b0:01:9f:bc:17:51:f3:06:29:8a:18:79:2b:f8:16:18:
42:e1:fb:74:41:06:29:4b:89:34:68:10:81:0a:0c:c8:c1:61:
62:b6:24:2b:bd:7a:e5:d5:df:cd:2d:09:7f:7e:2d:5a:ff:b4:
b6:56:1a:ef:d4:96:a7:5b:b0:de:cd:66:c9:d8:f2:a2:ab:b0:
94:31:42:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:42 2025 by rpki-client