Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/xlHEndZd2JISt49US4G6LrDyLtU.roa
File: xlHEndZd2JISt49US4G6LrDyLtU.roa (raw, json)
Hash identifier: JHWMuOc3c4ulkC5aTFXn/Is8m4XHp0/J4mZRYuuvW9k=
Subject key identifier: C6:51:C4:9D:D6:5D:D8:92:12:B7:8F:54:4B:81:BA:2E:B0:F2:2E:D5
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 01857079A9A4C67A1141A4CE48806A0ED939
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/xlHEndZd2JISt49US4G6LrDyLtU.roa
Signing time: Mon 02 Jan 2023 03:14:59 +0000
ROA not before: Mon 02 Jan 2023 03:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 46.228.136.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:a9:a4:c6:7a:11:41:a4:ce:48:80:6a:0e:d9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jan 2 03:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c651c49dd65dd89212b78f544b81ba2eb0f22ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:31:e5:68:05:7b:9b:87:cf:dc:e4:b5:b6:
74:03:f7:fd:10:bb:47:ae:27:a2:0f:6e:8c:8a:8d:
55:04:17:3a:ea:7c:cb:ab:73:e9:82:58:22:89:31:
52:d3:91:96:26:27:c2:41:5a:1a:45:c2:ac:68:a7:
87:ac:66:7c:1c:5e:2c:71:73:b1:bf:1b:4e:35:85:
46:03:be:a9:0a:a1:39:cf:7a:bf:74:64:cb:df:05:
5d:57:b2:e4:1f:de:db:c4:45:f7:52:ba:c4:7b:b2:
a6:74:20:49:2d:bc:2c:7a:a9:5a:79:32:92:11:f9:
ef:f6:29:be:42:55:4d:cf:e5:57:29:9e:2b:8e:e8:
c9:13:15:52:8f:79:aa:fb:3d:f6:a7:32:6e:a5:e5:
fb:7f:bd:52:8a:1e:20:0b:2c:b1:d2:7e:55:00:fd:
33:ae:6a:4c:59:74:f7:6d:d3:cb:30:52:72:b4:bf:
2f:68:ea:c8:62:10:c8:ab:8a:ae:3b:9c:b3:da:b8:
96:0e:94:57:79:b0:b0:e8:bb:5c:99:93:14:15:bb:
92:f6:76:7f:36:0f:b1:f8:7d:d8:50:af:ee:64:28:
5f:04:81:a5:e2:2f:e5:f3:ce:aa:15:7f:4f:78:c5:
d8:57:b2:13:11:62:73:36:7a:ea:95:e3:19:ae:87:
07:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:51:C4:9D:D6:5D:D8:92:12:B7:8F:54:4B:81:BA:2E:B0:F2:2E:D5
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/xlHEndZd2JISt49US4G6LrDyLtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.136.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:ea:a7:a9:9c:e1:37:20:e7:5a:db:ea:d8:7a:a5:61:e3:95:
b2:51:42:80:4c:74:05:1d:df:f1:13:07:c6:7b:77:ca:f6:c9:
80:76:b5:02:36:65:f1:78:94:5e:2e:70:4f:9e:77:21:23:f2:
ef:fa:e1:bd:1f:44:6c:0f:3a:b3:97:e5:c9:2a:8e:87:28:5c:
a3:f2:e4:63:b2:bc:e2:49:97:ae:56:06:6e:7e:60:25:51:1d:
09:6e:a5:da:16:1f:61:b4:47:e8:8f:1e:a7:66:89:6b:00:ea:
70:27:25:45:bd:03:b8:99:2c:be:6e:71:31:d0:7c:bb:17:97:
ab:33:a2:60:ae:c4:ce:63:bc:9d:d6:c9:b5:18:b6:f5:7c:e0:
b4:e7:b0:26:10:53:3d:7e:78:cd:e3:d7:5c:16:ef:34:79:66:
12:b0:b0:cc:ab:71:26:6c:85:52:cb:67:3f:23:e1:61:c0:35:
76:b0:70:ed:60:b0:45:fa:17:ca:e0:d9:42:89:71:7c:81:ca:
7e:53:1d:e9:aa:46:80:d5:75:e0:b3:7f:fa:4e:31:7b:a4:08:
64:fc:92:90:62:71:fa:15:6b:94:2a:f1:fd:6a:af:58:1a:f7:
f6:e5:79:c8:99:4b:41:ed:4b:fe:bf:34:5a:07:5e:fb:1c:e3:
ed:51:c7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:48 2025 by rpki-client