Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/K29hAPIaZ9wfGDimjKtHae8L9ks.roa
File: K29hAPIaZ9wfGDimjKtHae8L9ks.roa (raw, json)
Hash identifier: VB67XH6dYeh6YYkKj9m9NSV07QqTaA297yvtXr7mX8Q=
Subject key identifier: 2B:6F:61:00:F2:1A:67:DC:1F:18:38:A6:8C:AB:47:69:EF:0B:F6:4B
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0186599EED9C4E0D052E090FBA0193CE0E6D
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/K29hAPIaZ9wfGDimjKtHae8L9ks.roa
Signing time: Thu 16 Feb 2023 09:47:13 +0000
ROA not before: Thu 16 Feb 2023 09:47:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29551
IP address blocks: 46.162.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:9e:ed:9c:4e:0d:05:2e:09:0f:ba:01:93:ce:0e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Feb 16 09:47:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b6f6100f21a67dc1f1838a68cab4769ef0bf64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:be:61:b8:54:6d:75:91:a6:3d:9a:b2:77:e8:
81:21:46:de:a8:47:48:b1:a6:45:38:15:e4:4d:b6:
06:3e:34:7c:ec:5e:a7:33:dc:cb:17:32:83:09:85:
ad:ed:f2:d8:66:d0:57:b5:44:24:9b:93:08:3a:bf:
dd:15:25:5d:35:ff:9b:bf:02:78:72:4f:38:5a:1d:
c2:4a:bb:be:10:bb:91:4b:98:ba:50:1d:4b:87:0b:
cf:58:ca:03:6a:09:90:9b:68:fb:59:82:b5:b3:82:
e3:79:cc:5b:ba:65:2e:8d:5a:db:5e:62:bf:16:92:
ed:53:fd:4b:26:ab:3d:02:fb:c1:1d:55:32:aa:0c:
11:a6:43:10:3d:77:c0:41:d8:42:8b:fc:e4:f3:b7:
4a:86:d9:87:e2:f4:1f:b1:92:bd:88:a4:c7:9e:e8:
79:b4:6c:e0:96:cd:d9:39:a1:1d:d7:12:80:83:59:
c0:a9:91:93:e2:79:cc:66:09:67:39:79:70:1b:fb:
9c:90:43:c1:89:ac:5d:12:1a:55:2c:98:0a:3b:51:
a4:bb:2e:24:c2:2f:7b:f2:8c:76:6d:0d:8e:49:57:
4a:8a:74:98:1d:e3:a7:06:8e:02:a8:18:4f:e7:86:
cf:ee:ff:bc:70:57:d3:9e:ca:d6:da:13:c2:06:bd:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6F:61:00:F2:1A:67:DC:1F:18:38:A6:8C:AB:47:69:EF:0B:F6:4B
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/K29hAPIaZ9wfGDimjKtHae8L9ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.57.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:07:c1:63:3f:57:d2:2b:ea:25:db:0f:8c:81:b3:6b:ef:10:
a7:3c:c1:4b:c0:c7:e6:24:36:54:47:ba:52:0a:13:bc:2f:56:
d7:64:48:55:da:05:7e:80:1c:0f:72:21:a5:e6:b0:21:eb:4e:
43:7b:72:df:7f:51:48:f9:84:bb:22:17:5e:d0:38:ac:f7:6e:
ef:e3:7f:e2:dc:39:96:fb:74:e2:34:8a:7f:ff:e3:25:be:bc:
22:b3:26:66:a5:e6:5c:ae:39:60:e5:65:65:04:ac:38:7c:c3:
a8:f5:45:d8:81:a7:cb:61:00:eb:4f:ae:88:73:8e:80:9c:1b:
48:63:87:4f:cc:ad:8c:ef:d9:02:b3:09:a5:5b:a8:05:2c:89:
e2:60:25:ec:06:e2:94:ff:1a:93:00:f5:b4:9c:d4:1c:9b:c3:
10:6e:da:fd:4c:fc:a6:52:bb:de:70:b6:2f:98:42:df:e3:64:
fe:4b:77:45:f5:a6:a4:5f:fd:3d:ff:23:e6:f6:91:2b:25:8b:
77:a0:9f:a2:a6:72:36:e4:81:00:7f:64:bb:78:d7:38:c5:09:
e3:73:69:05:53:ab:d1:13:e3:be:d4:7e:a7:6f:3e:e2:74:3a:
8b:09:f6:a2:52:40:2c:eb:b3:88:6c:c4:f1:29:78:b5:47:84:
db:1a:86:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:34 2025 by rpki-client