Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/1-XYSnOkCqJBpo13kcAzglOfpDRQ.roa
File: 1-XYSnOkCqJBpo13kcAzglOfpDRQ.roa (raw, json)
Hash identifier: bMN4Hh3wk+Z3W4XK55oQR+LTpwj4cSN6GZCqgjWCkV0=
Subject key identifier: F9:76:12:9C:E9:02:A8:90:69:A3:5D:E4:70:0C:E0:94:E7:E9:0D:14
Certificate issuer: /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Certificate serial: 7358DE
Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/1-XYSnOkCqJBpo13kcAzglOfpDRQ.roa
Signing time: Sat 01 Jan 2022 00:53:48 +0000
ROA not before: Sat 01 Jan 2022 00:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58243
IP address blocks: 46.253.133.0/24 maxlen: 24
2a11:36c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7559390 (0x7358de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Validity
Not Before: Jan 1 00:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f976129ce902a89069a35de4700ce094e7e90d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:34:2f:59:a8:2e:ca:28:53:0e:1d:7b:4e:1c:
fd:6c:71:b6:72:ab:6c:6e:b4:07:82:f1:82:a1:1e:
df:80:72:77:a5:34:a5:0e:7b:c6:ab:b7:02:56:aa:
c2:d0:22:ac:98:86:6d:6b:91:8b:c0:e4:c0:72:16:
fd:8a:2e:e7:f1:db:83:1d:9f:25:6a:f5:87:9c:e2:
e7:44:6a:55:ba:b3:98:f1:63:05:5e:e7:4c:38:2e:
4f:8d:d4:6c:52:8f:83:11:53:57:cf:f2:11:5e:27:
04:a2:a0:77:3d:ea:6c:0f:41:70:39:61:be:5e:06:
1b:d0:f7:6a:01:62:e4:42:5d:03:6e:65:df:4f:19:
6e:74:05:82:7a:e8:98:5e:28:ff:72:f4:fc:c3:01:
f2:bf:fa:a8:dd:b5:6a:c3:2d:65:57:4f:9e:b6:f4:
6a:6c:e5:c9:df:a1:b9:93:c9:e4:48:d8:56:d5:d2:
d6:ca:72:f6:a8:63:50:66:26:b4:f1:33:d5:13:8d:
9f:63:41:26:bd:31:07:63:f7:99:dd:59:1b:3d:2c:
17:56:0e:36:d6:06:4f:19:ed:6b:35:da:e7:84:9b:
81:0b:99:a1:22:89:df:01:48:a5:81:c3:7c:49:5f:
b1:80:f0:61:9a:8e:73:d7:2d:5f:31:91:aa:3a:1f:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:76:12:9C:E9:02:A8:90:69:A3:5D:E4:70:0C:E0:94:E7:E9:0D:14
X509v3 Authority Key Identifier:
keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/1-XYSnOkCqJBpo13kcAzglOfpDRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.133.0/24
IPv6:
2a11:36c0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:9a:ef:c9:72:25:66:59:10:ef:fa:c1:66:31:78:3d:42:65:
77:49:e3:99:4a:70:e7:10:94:cd:37:f0:48:64:0d:bb:fa:e2:
35:60:2b:28:1e:43:23:47:13:6c:53:73:e6:84:92:a1:f9:44:
8f:cd:83:63:9a:d0:5e:55:64:b6:dd:d1:a2:ab:09:14:cd:35:
c1:df:70:33:08:05:f1:e1:8a:88:a1:38:19:26:e5:f1:a4:b5:
96:2e:09:1c:86:b3:c8:d0:2b:f7:db:0d:23:35:a2:15:ca:8c:
fa:ed:6d:53:45:37:bb:fa:d9:86:aa:93:c1:cb:c9:d2:a6:90:
41:a5:4b:9d:65:73:de:7e:9c:8a:11:c3:ee:b1:de:4a:f7:99:
48:60:eb:dd:a7:09:a8:74:eb:c1:13:50:27:6a:c2:60:f9:bc:
d7:33:fa:ca:1b:7d:3c:d0:fc:69:30:25:92:6b:77:0b:60:db:
6f:82:5a:53:04:79:43:80:97:19:35:3b:14:7e:9e:4e:17:67:
53:37:5a:68:b4:e5:e9:a9:62:96:73:ea:58:be:e6:ea:ac:95:
cc:46:25:9e:e4:23:7c:7e:ac:53:c1:ef:64:37:a9:85:40:6d:
cb:23:79:2c:f2:13:bf:68:a8:bb:e3:fa:30:1a:34:42:6a:60:
11:41:90:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:45 2025 by rpki-client