Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/VIOTqE95nNRvRgihWHgGw7nnSfA.roa
File: VIOTqE95nNRvRgihWHgGw7nnSfA.roa (raw, json)
Hash identifier: qqOjrf20fZTB2uQRdBjncPKpXOcAcA+Hp9ShOG8MBCM=
Subject key identifier: 54:83:93:A8:4F:79:9C:D4:6F:46:08:A1:58:78:06:C3:B9:E7:49:F0
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 018ABB9C9AF90C6FCB9261DC5EFDE6785D2A
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/VIOTqE95nNRvRgihWHgGw7nnSfA.roa
Signing time: Fri 22 Sep 2023 06:38:37 +0000
ROA not before: Fri 22 Sep 2023 06:38:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 46.228.131.0/24 maxlen: 24
46.228.136.0/23 maxlen: 24
46.228.135.0/24 maxlen: 24
46.228.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bb:9c:9a:f9:0c:6f:cb:92:61:dc:5e:fd:e6:78:5d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Sep 22 06:38:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=548393a84f799cd46f4608a1587806c3b9e749f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:ef:67:7a:a8:0d:12:5a:20:37:13:c6:69:
18:c5:49:ad:48:09:26:6e:b8:d1:32:d5:b6:c3:a4:
80:1d:bb:be:df:32:91:5e:75:72:ff:42:e6:e1:19:
92:21:91:ee:2d:36:99:5f:72:20:6a:71:6a:34:28:
e3:8a:db:f0:4a:4e:5a:df:40:bf:9c:d9:30:6a:1e:
b6:c0:39:76:9b:41:bf:50:51:c8:60:a2:e9:bb:f3:
b0:95:0e:0b:e1:96:92:ad:b5:e6:25:bc:96:ec:c0:
53:50:68:ba:e7:56:ec:dc:bb:67:53:07:2a:a0:f4:
dd:2e:f7:0d:e7:af:63:6b:29:45:2f:2e:8e:24:ee:
40:79:aa:2a:65:36:ae:09:0f:19:92:80:8e:f4:81:
80:99:67:64:6c:c5:7e:bf:7d:d2:cf:ce:28:45:2b:
4c:37:e6:1b:07:3c:34:41:9d:08:ba:13:cf:7a:e2:
21:aa:ae:ff:30:8e:03:0d:27:ce:7f:79:31:d2:da:
01:ee:eb:2b:a8:40:51:a7:fe:5c:60:6f:35:30:c8:
7c:d1:19:91:e3:3a:0f:25:c2:21:63:8a:03:b5:d8:
89:46:fb:31:16:5c:8f:3c:f4:b2:60:9a:b3:f7:0a:
2c:56:de:7c:2b:e1:4f:eb:52:5e:6c:ea:c0:71:c6:
8c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:83:93:A8:4F:79:9C:D4:6F:46:08:A1:58:78:06:C3:B9:E7:49:F0
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/VIOTqE95nNRvRgihWHgGw7nnSfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.131.0/24
46.228.135.0-46.228.137.255
46.228.140.0/24
Signature Algorithm: sha256WithRSAEncryption
46:fe:fa:42:89:9f:f9:32:e0:96:1b:68:23:ba:cc:d0:0e:e9:
39:e8:54:61:bf:07:cf:65:cb:21:76:45:65:94:6d:c5:d7:31:
c7:01:d5:5d:1f:3e:9c:f0:6b:d7:88:c0:51:02:8f:24:d4:87:
aa:0a:26:57:31:cb:24:a2:84:43:1b:be:12:e6:57:20:cb:c7:
d8:cd:4b:70:ed:78:a4:1b:c5:ad:0f:89:af:9f:e7:22:cc:45:
c3:f2:53:9f:64:46:6e:85:9e:19:55:35:ac:ed:d9:35:6e:5e:
2c:98:4a:8f:df:90:6d:be:ae:70:f6:ca:8d:30:e1:70:17:d5:
c6:7c:8e:cb:97:1d:c5:ba:96:08:13:eb:cb:95:9d:b7:f3:5e:
df:cb:d4:6e:7b:91:90:d9:53:a2:1a:5b:53:00:18:bd:6f:d7:
7a:aa:a2:3b:73:35:53:f1:7f:9a:16:da:29:d1:9d:68:c0:76:
a4:1e:7a:fb:5a:72:0d:e3:b8:a7:8f:d3:99:85:52:21:54:83:
cd:42:66:a3:d0:7e:db:77:ae:5d:bb:37:82:d5:12:23:d9:8a:
39:16:dc:4f:51:c0:7e:cb:46:63:56:2f:dc:93:09:c0:c4:d8:
35:1d:47:44:b4:7e:c1:70:f4:02:62:6f:34:69:91:f2:ed:c5:
0f:51:a0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:27 2025 by rpki-client