Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/1prJyt8lCgujjMwfN5sYJLK0kVY.roa
File: 1prJyt8lCgujjMwfN5sYJLK0kVY.roa (raw, json)
Hash identifier: I4tJpNMNmFcoER/CerfGLnxZGVD+ZWbltgrrhHrfz8Q=
Subject key identifier: D6:9A:C9:CA:DF:25:0A:0B:A3:8C:CC:1F:37:9B:18:24:B2:B4:91:56
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0188B06CD8FDF854D9A2CA0394C511DCBBF9
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/1prJyt8lCgujjMwfN5sYJLK0kVY.roa
Signing time: Mon 12 Jun 2023 16:25:03 +0000
ROA not before: Mon 12 Jun 2023 16:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.1.0/24 maxlen: 24
46.162.10.0/23 maxlen: 24
46.162.51.0/24 maxlen: 24
46.162.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:6c:d8:fd:f8:54:d9:a2:ca:03:94:c5:11:dc:bb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 12 16:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d69ac9cadf250a0ba38ccc1f379b1824b2b49156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:68:37:d4:56:aa:ab:e1:bb:c6:ee:58:1c:16:
1e:5d:a0:81:1b:2d:48:0e:5c:67:7f:d3:b3:82:bc:
a6:c4:ac:d1:1b:d6:3d:46:7b:db:d5:92:ba:d6:06:
cc:18:b9:b5:25:a9:10:90:d4:b9:60:ec:4e:6f:72:
b6:75:ae:36:19:37:96:1c:ff:5f:f0:20:59:d6:e5:
e3:4c:fa:5a:70:10:48:d5:58:ac:96:29:2d:42:db:
6b:2b:a7:dc:12:c1:b5:68:ce:bb:88:35:3b:93:8c:
74:77:b6:59:ec:1d:a9:e0:9c:17:16:e0:80:8a:84:
37:95:d6:a3:06:56:d0:1e:03:ff:e3:b3:48:b7:6e:
4b:03:75:8d:4a:de:75:d2:13:9f:85:46:65:85:cc:
e5:08:a4:40:ca:3d:84:3d:27:c4:d6:21:77:47:5e:
15:94:b6:32:13:63:c5:85:12:20:a0:41:5b:32:df:
e7:26:f4:01:62:a3:8d:e2:e5:da:8a:81:17:3f:a0:
d7:43:92:08:aa:46:5b:e0:ba:96:e0:27:48:ed:36:
bc:43:c2:16:2c:d2:cd:31:87:ce:1b:55:c8:0f:dd:
82:50:83:7d:35:af:e1:51:0a:91:92:e4:e1:99:99:
77:33:41:56:de:e0:c7:53:8f:e2:0a:46:c5:11:c8:
26:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9A:C9:CA:DF:25:0A:0B:A3:8C:CC:1F:37:9B:18:24:B2:B4:91:56
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/1prJyt8lCgujjMwfN5sYJLK0kVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.1.0/24
46.162.10.0/23
46.162.49.0/24
46.162.51.0/24
Signature Algorithm: sha256WithRSAEncryption
86:14:58:33:f1:31:06:42:6d:cf:27:9e:97:82:28:05:19:15:
14:4d:46:7f:fa:6e:8d:63:56:b7:f6:e4:93:8d:25:32:5e:8e:
95:a1:b3:17:ad:82:7a:4e:e5:0e:54:db:62:45:ca:72:b6:e0:
a8:fc:33:1e:d1:89:84:44:b2:a6:f8:28:e2:4d:7a:e9:2c:01:
d1:1c:73:e9:12:9b:80:84:0f:8f:3a:ad:1e:f6:77:95:26:16:
52:e2:2e:a9:eb:f9:5e:a7:36:5e:00:48:95:fb:ba:c4:9f:7c:
9e:8f:44:f4:29:08:fd:5c:d9:29:a9:4a:fc:80:8f:ef:7f:08:
fe:b5:c9:b4:95:88:02:05:a3:20:8f:b9:1f:e6:e5:77:f5:d0:
30:90:7d:32:5c:3c:10:de:0a:f4:89:3b:ed:0e:61:96:af:b7:
bf:26:b8:1c:ad:11:f8:b9:2c:b8:e9:23:a8:7d:06:2f:5c:45:
e0:2a:cb:43:30:51:9b:ab:15:68:e6:2d:f5:32:24:d1:c3:79:
96:23:86:fa:81:b1:ed:7a:8a:aa:43:9b:69:09:f7:45:0d:cd:
d9:1b:5e:87:d8:a9:cd:dc:5c:7b:a2:42:fb:2d:8d:40:d7:b1:
8c:d7:97:b9:44:91:46:b1:be:a1:43:53:d5:34:02:95:65:1d:
c9:b7:67:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:50 2025 by rpki-client