Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/XbiaEqcds3glr5M1iY9lQo5A_6E.roa
File: XbiaEqcds3glr5M1iY9lQo5A_6E.roa (raw, json)
Hash identifier: uXldnmZmRiooGTa73dAh6xaGJEDPx4xm3K7s2r31oCY=
Subject key identifier: 5D:B8:9A:12:A7:1D:B3:78:25:AF:93:35:89:8F:65:42:8E:40:FF:A1
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0186557ABF1D0AF804AA80BACE3E8B71C6E3
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/XbiaEqcds3glr5M1iY9lQo5A_6E.roa
Signing time: Wed 15 Feb 2023 14:29:12 +0000
ROA not before: Wed 15 Feb 2023 14:29:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29551
IP address blocks: 46.162.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:7a:bf:1d:0a:f8:04:aa:80:ba:ce:3e:8b:71:c6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Feb 15 14:29:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5db89a12a71db37825af9335898f65428e40ffa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:7d:32:33:22:ca:78:7d:a4:8c:2a:cd:1e:
1c:8a:fe:6e:c4:a3:d6:86:18:44:c0:98:19:bc:89:
e2:e2:15:96:3b:09:6c:7a:39:1b:03:66:e8:d8:4b:
51:35:1c:3e:6f:47:62:d8:7f:e9:a1:bb:fa:20:f8:
7c:c6:b2:eb:00:b0:c9:fe:62:36:08:25:f9:9d:a2:
1f:72:12:27:5c:f8:e6:df:b3:73:9f:f6:4f:a6:c3:
5c:bb:a7:b5:14:d6:a8:a9:2e:bc:e4:fe:e0:c4:94:
ba:b2:fa:a7:8b:71:18:65:75:f6:54:84:2d:4c:3b:
f6:31:b6:c0:6b:7a:9e:b3:03:e9:51:23:25:12:41:
d7:01:9e:d1:63:93:7c:da:45:aa:13:83:3b:8e:74:
1b:a3:37:0c:76:0d:6a:75:a7:2c:6e:c9:be:5f:e7:
91:4a:e9:28:d8:d3:67:7f:5e:2e:83:a7:c3:88:10:
8d:fc:aa:2c:72:a0:8e:ae:72:0c:bc:f7:2b:0a:88:
68:ce:6f:c1:f8:f1:d9:7f:bc:e8:a2:99:5f:57:a1:
4c:1a:14:e1:38:38:d4:f0:36:24:bd:9e:43:9f:23:
ca:e7:60:b5:0c:7e:ab:f6:b9:0f:0a:ff:eb:84:1c:
87:10:5f:23:2f:37:c1:94:62:66:03:5e:1e:0d:6b:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B8:9A:12:A7:1D:B3:78:25:AF:93:35:89:8F:65:42:8E:40:FF:A1
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/XbiaEqcds3glr5M1iY9lQo5A_6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.57.0/24
Signature Algorithm: sha256WithRSAEncryption
09:9e:38:e8:0c:49:10:cf:16:ab:02:ff:f5:60:4b:a2:9e:f9:
6e:29:0d:ca:f5:19:ef:88:6c:04:aa:b3:9f:e5:f3:a4:a2:7f:
30:5c:83:44:ad:72:61:a7:64:6d:35:3f:8a:91:d2:c8:38:88:
bf:fe:49:e7:1e:01:db:38:b8:8c:8b:f8:40:c2:c1:27:4a:1d:
7c:28:40:40:31:b7:48:5d:d0:1a:67:e3:5c:28:6b:a3:9b:76:
33:ca:e1:b0:5b:95:c2:e2:26:ad:7c:c7:51:9b:a7:3f:e7:e2:
4c:3c:30:a2:11:5b:a7:3a:fa:b2:a9:33:91:83:d6:e1:e4:54:
05:a7:71:9d:2d:c5:3f:a2:45:7a:2e:37:b3:93:bf:0e:3b:fb:
39:60:6d:70:9a:84:6b:7e:01:96:aa:9f:99:d4:5d:9c:2b:42:
92:b9:5f:0f:47:75:c6:49:d9:5a:ea:6d:19:8e:d9:4a:3a:cd:
25:42:b4:dd:02:c6:73:c3:9d:8f:36:8a:67:57:cd:99:5b:33:
41:fd:76:d9:56:67:75:e8:5d:90:42:16:45:1c:56:3e:ec:de:
c7:d5:42:62:f8:90:70:ff:ee:22:09:80:8a:60:8e:9e:19:d4:
2a:43:dd:bc:6a:5f:24:0c:4d:a8:03:a0:b1:2b:17:bf:4c:da:
5a:74:88:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:56 2025 by rpki-client