Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/3A2_KDc-AL6HHp8sYywLQZL7C58.roa
File: 3A2_KDc-AL6HHp8sYywLQZL7C58.roa (raw, json)
Hash identifier: Uw2g41rNgvXqiMC8+lYPmwN95BBYzl3vIJFtuPgnwj4=
Subject key identifier: DC:0D:BF:28:37:3E:00:BE:87:1E:9F:2C:63:2C:0B:41:92:FB:0B:9F
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01889235AFE6B934FF972081DE3CE97AAF64
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/3A2_KDc-AL6HHp8sYywLQZL7C58.roa
Signing time: Tue 06 Jun 2023 19:36:11 +0000
ROA not before: Tue 06 Jun 2023 19:36:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199459
IP address blocks: 46.162.8.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:92:35:af:e6:b9:34:ff:97:20:81:de:3c:e9:7a:af:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 6 19:36:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc0dbf28373e00be871e9f2c632c0b4192fb0b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:72:e0:25:c4:f4:c3:0c:dd:ca:c0:dd:28:d5:
d5:0a:7f:35:6d:d9:95:94:cd:8f:20:65:0e:e2:3a:
6a:56:30:2f:30:56:06:c5:38:1f:a9:eb:49:ae:d3:
30:56:41:01:91:e7:f1:39:fc:e6:d0:e6:03:39:d8:
ba:1a:69:79:34:88:de:64:93:1c:c1:16:23:af:ae:
78:91:c6:90:75:00:cf:9d:98:d5:e1:88:81:4a:01:
ea:ca:e7:2d:d9:c9:5b:de:82:75:f0:56:10:f1:b2:
1e:be:e7:15:6a:26:fb:cf:84:7e:da:81:3a:a8:fe:
5a:ed:fc:83:78:9b:98:5f:55:4a:3a:f7:a3:7b:68:
09:ae:89:ce:f9:b3:f9:26:bf:20:38:7c:09:57:2b:
54:af:d6:70:56:b1:d9:b7:94:9a:e7:ed:fe:8e:b1:
d9:aa:a9:d1:e2:ca:5b:09:2c:ad:a5:02:ef:8d:33:
57:7a:e6:3f:aa:77:19:68:68:3b:de:cc:55:aa:3e:
a5:b0:ba:76:79:92:c0:5e:f5:95:d7:cb:c8:41:cb:
55:45:98:a3:ab:4a:1d:47:47:fc:0f:f4:b0:c7:7a:
14:df:45:93:a8:cc:f2:26:45:af:f3:cf:3e:00:68:
9a:83:e5:7a:bf:a1:10:72:0c:bc:b4:fe:1c:3d:dd:
5f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0D:BF:28:37:3E:00:BE:87:1E:9F:2C:63:2C:0B:41:92:FB:0B:9F
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/3A2_KDc-AL6HHp8sYywLQZL7C58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.8.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:66:36:70:b7:64:e8:dd:77:5b:4e:e5:3d:e6:ec:d7:35:62:
89:13:2c:55:f1:f8:73:07:50:69:b4:59:be:e3:86:ed:ad:d7:
96:3c:97:43:51:dc:d1:ee:5c:3a:f9:4a:59:56:b2:fd:6a:23:
31:28:ab:be:5b:92:0b:0e:e1:61:cb:09:9b:b6:13:b6:ef:49:
b1:99:cb:75:7d:13:ed:12:63:81:ef:09:8f:66:f1:b0:76:22:
cd:d9:09:ab:22:07:88:89:70:78:e1:97:f0:a4:93:54:c2:41:
83:df:b5:36:65:9e:79:09:e7:7f:30:38:92:f2:9e:71:02:39:
bb:52:80:06:20:a6:4d:ee:c7:47:36:2f:c3:a1:39:59:8f:ed:
83:93:1b:57:c4:bb:61:9c:50:13:8a:ad:f6:25:74:da:af:aa:
11:31:5f:dd:1b:10:c1:e7:21:07:7d:30:05:f4:6d:04:5a:78:
c7:74:69:0b:49:6f:3d:a7:ec:2b:77:b6:18:26:41:a9:b3:44:
b5:10:3c:28:3c:99:6b:35:86:0d:ca:09:06:72:14:46:91:c1:
ed:e0:99:e9:d1:eb:ad:09:f8:5b:e7:61:8d:52:54:ec:02:69:
9b:b9:e7:69:e0:e8:ff:8a:01:5d:28:38:c6:41:6e:01:f3:46:
e4:58:d7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:41 2025 by rpki-client