Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/2D_gWtiDosl2ZJlpnuevohVjFsw.roa
File: 2D_gWtiDosl2ZJlpnuevohVjFsw.roa (raw, json)
Hash identifier: RfIKvzf7/W5C3pEq/tE2l7BqhwMJYaE4zQhejT0YAN0=
Subject key identifier: D8:3F:E0:5A:D8:83:A2:C9:76:64:99:69:9E:E7:AF:A2:15:63:16:CC
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0188B9C8C8E5D515F47EA76F717A03F1A466
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/2D_gWtiDosl2ZJlpnuevohVjFsw.roa
Signing time: Wed 14 Jun 2023 12:02:03 +0000
ROA not before: Wed 14 Jun 2023 12:02:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 46.162.15.0/24 maxlen: 24
46.162.14.0/24 maxlen: 24
46.162.13.0/24 maxlen: 24
46.162.12.0/24 maxlen: 24
46.162.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:c8:c8:e5:d5:15:f4:7e:a7:6f:71:7a:03:f1:a4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 14 12:02:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d83fe05ad883a2c9766499699ee7afa2156316cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:27:08:cb:67:ed:90:51:5e:39:d2:a4:82:05:
5c:cf:6c:9a:2d:5d:8e:b2:13:b8:89:fa:9a:2c:a3:
c6:b6:32:61:32:ad:d9:bc:b4:c8:86:d8:46:e5:bc:
de:f0:c8:ea:8c:0a:61:1e:8b:09:10:d1:5c:4b:d6:
32:f5:1f:ee:38:56:e0:e8:80:26:58:50:f7:3c:22:
ec:3b:a7:8f:83:4a:a6:40:1b:e9:2e:82:7a:d8:3b:
9c:da:1a:0e:62:00:82:1b:a2:4d:5e:83:c0:5d:bf:
fe:3b:62:8a:c4:8e:5f:d7:13:11:71:36:04:8a:f3:
cd:48:bc:10:ae:61:4c:0d:25:00:32:a1:56:01:c5:
0c:a0:50:bd:e2:e0:64:ce:df:bf:17:40:3e:5a:0f:
f6:c7:24:14:7f:4c:67:15:a8:70:c8:2a:e8:99:d7:
0e:9d:0b:01:40:4f:99:c1:92:30:35:38:af:6c:d4:
47:2e:7a:df:08:43:88:48:87:c9:4b:b4:4d:66:21:
36:11:5b:38:da:d8:57:03:70:c3:57:cd:dd:1e:81:
67:65:db:3a:f5:f8:d7:cf:9a:17:d1:77:d0:98:73:
1e:df:da:5d:4f:e2:72:a0:37:dc:c9:4c:64:d5:66:
2a:ef:45:7d:ce:3f:7b:8a:fb:76:40:29:83:4d:78:
99:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3F:E0:5A:D8:83:A2:C9:76:64:99:69:9E:E7:AF:A2:15:63:16:CC
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/2D_gWtiDosl2ZJlpnuevohVjFsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.12.0/22
46.162.51.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:32:eb:a6:ec:5e:96:eb:dc:09:14:71:0b:b6:33:8c:61:e6:
11:40:cb:0c:14:89:d4:65:1d:a0:51:08:61:1c:19:2e:d0:11:
98:a9:7b:7b:ff:d8:5f:f8:ad:a9:4f:90:b7:c5:76:40:90:ba:
37:e3:44:b9:8c:a1:99:2d:42:4f:35:8d:41:a3:31:20:9f:aa:
6c:25:25:75:ec:91:3c:8a:c1:df:ba:d3:ee:74:49:e9:1a:54:
98:62:dd:98:c6:4e:c7:9e:91:25:66:73:d8:49:0d:24:93:86:
9b:62:6e:a7:62:28:70:b5:a5:b7:7a:58:cb:c2:03:bc:31:28:
ea:8e:55:06:75:e0:d1:3f:3d:c7:e8:59:16:10:b6:08:b9:94:
45:b1:bb:71:91:62:60:3b:a7:65:32:3d:2a:5b:a1:19:49:78:
4f:dd:5e:6d:1c:e6:7e:f5:e4:c3:87:97:5f:a4:2b:38:69:a4:
d7:cd:a3:97:9c:7f:bf:8e:88:30:66:b6:c6:3b:e2:0a:db:0c:
0b:ba:38:26:f2:9d:58:6d:b6:4c:0d:a6:e0:b6:e4:05:bc:35:
29:af:e0:2e:43:1b:28:25:01:54:5f:7a:69:01:b4:1f:f2:5e:
6d:db:58:bc:c4:48:49:19:4e:36:cc:ae:3e:b1:96:79:3d:e7:
0f:8b:2c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:24 2025 by rpki-client