Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/v7jbnbfe9boUprVvXZ7e2cAhR8Y.roa
File: v7jbnbfe9boUprVvXZ7e2cAhR8Y.roa (raw, json)
Hash identifier: pMzCj1dloP/sd5t6ExO10DpF6kqv8XkfL2qsDfqOswA=
Subject key identifier: BF:B8:DB:9D:B7:DE:F5:BA:14:A6:B5:6F:5D:9E:DE:D9:C0:21:47:C6
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 0188BA4462DFBFAA734DD1D707B20972A202
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/v7jbnbfe9boUprVvXZ7e2cAhR8Y.roa
Signing time: Wed 14 Jun 2023 14:17:03 +0000
ROA not before: Wed 14 Jun 2023 14:17:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 46.228.131.0/24 maxlen: 24
46.228.136.0/23 maxlen: 24
46.228.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:44:62:df:bf:aa:73:4d:d1:d7:07:b2:09:72:a2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jun 14 14:17:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfb8db9db7def5ba14a6b56f5d9eded9c02147c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ed:f6:d2:93:1a:61:00:46:de:39:71:dc:e9:
1f:63:d7:74:4e:be:d5:6c:d0:e5:6c:0d:06:89:0e:
58:13:b9:c4:ca:26:8c:6f:9b:d9:14:a1:37:9a:8d:
56:0e:30:5a:62:86:9e:f8:d1:42:ac:5c:74:01:e1:
cf:b5:15:ba:38:24:36:2e:b4:87:83:39:7b:79:96:
ef:b4:4e:e2:fa:b5:c4:8e:c9:d7:4e:c7:32:ca:63:
35:ac:72:5b:da:df:c5:ff:4b:ae:f5:36:17:99:56:
f0:a8:e9:3e:7d:69:a2:05:9c:ad:e2:9a:81:86:ea:
c5:ee:03:b4:dd:ff:9a:82:72:63:94:09:c6:a9:d6:
06:ce:fc:5e:43:16:72:34:af:b2:af:c9:be:80:f6:
97:82:57:0b:16:c0:27:c2:63:a7:22:67:59:14:62:
19:e5:48:ad:21:48:95:b6:6a:1c:a8:9d:40:de:bd:
19:19:bc:d6:e4:b2:b3:46:88:aa:a7:a3:48:c8:2f:
9e:56:71:b6:9f:c6:7b:8c:7b:9f:6c:cb:d7:67:e1:
38:24:f9:5c:ad:4b:5b:e1:15:2c:02:18:35:5c:ff:
73:bf:d0:02:f7:eb:f8:d7:d0:03:71:c4:42:d6:e1:
be:93:17:e5:16:9a:3a:60:c0:24:99:7e:c0:77:3e:
b3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B8:DB:9D:B7:DE:F5:BA:14:A6:B5:6F:5D:9E:DE:D9:C0:21:47:C6
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/v7jbnbfe9boUprVvXZ7e2cAhR8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.131.0/24
46.228.135.0-46.228.137.255
Signature Algorithm: sha256WithRSAEncryption
70:84:5c:71:cc:d3:e5:7d:29:25:55:e7:ad:a2:30:ff:cf:7b:
85:6a:f7:b0:3c:e0:48:86:6d:27:f7:06:11:7f:89:b7:12:c4:
52:16:52:a3:91:63:a8:67:8b:d4:3a:22:e6:bf:1c:eb:4d:65:
c8:9a:3e:7b:62:80:d5:7e:4e:ef:37:46:51:ba:46:04:40:21:
c2:b8:7b:d4:21:ff:e7:15:86:79:dc:6a:03:a8:7e:88:73:3a:
13:4e:a6:ff:82:18:05:c8:a9:c0:a5:3f:33:1b:18:7d:0c:05:
e4:10:99:18:8b:79:23:f7:d4:d5:76:81:56:8d:41:aa:a3:db:
98:9b:00:7c:9e:12:6b:e9:dd:ea:33:93:3e:8f:97:c5:3e:55:
d8:3c:d3:a7:c2:96:e1:43:b1:28:4b:84:fc:c7:e6:0f:1d:63:
8d:34:d3:a4:de:f3:04:8b:2c:d0:51:83:8d:4e:89:b8:71:3a:
e3:b3:98:ca:13:be:30:db:db:83:51:58:eb:1e:24:58:a1:9f:
46:2e:f5:f0:69:48:d2:e0:7b:66:38:76:1c:64:e2:b4:dc:59:
7e:78:d1:63:4d:f1:79:0b:36:4c:8b:78:c4:c2:85:69:cb:10:
9f:ae:0a:56:36:77:e3:66:cc:71:5f:ff:96:2c:98:81:ab:1e:
06:72:24:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:08 2025 by rpki-client