Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/a6EhRfGL9NkqqxbqgREQa8M4GAo.roa
File: a6EhRfGL9NkqqxbqgREQa8M4GAo.roa (raw, json)
Hash identifier: An6Hmrb1Cf2us+T2vmas2YDg70w4NJduOxczgRnm6bE=
Subject key identifier: 6B:A1:21:45:F1:8B:F4:D9:2A:AB:16:EA:81:11:10:6B:C3:38:18:0A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0188B06CD98346D2B169E155A812F5ED4181
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/a6EhRfGL9NkqqxbqgREQa8M4GAo.roa
Signing time: Mon 12 Jun 2023 16:25:03 +0000
ROA not before: Mon 12 Jun 2023 16:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 46.162.48.0/24 maxlen: 24
46.162.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:6c:d9:83:46:d2:b1:69:e1:55:a8:12:f5:ed:41:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 12 16:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ba12145f18bf4d92aab16ea8111106bc338180a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5f:14:7e:d2:80:4c:01:df:8e:92:48:b1:a0:
99:f1:53:81:f6:46:85:ca:73:fe:b0:b5:5a:c6:ec:
7f:0e:53:e2:2b:8e:1f:ac:19:95:34:57:c3:8a:cf:
2a:d2:c9:02:13:fb:10:55:72:54:0d:b1:11:35:4f:
5e:d3:9c:bb:52:b0:df:dc:04:22:fb:8d:98:5f:dd:
76:ed:83:21:c8:f0:be:46:46:a6:34:65:f8:08:c4:
dd:89:75:29:61:de:0e:79:c1:56:3a:40:a8:da:2e:
a7:42:18:ae:dd:87:a9:bd:5e:a9:44:9f:70:c7:1d:
23:4a:2b:c6:16:85:72:32:30:5b:0f:b0:75:4b:5b:
88:9a:05:37:47:37:9d:41:9b:9d:5d:a8:1c:a2:80:
73:cb:f8:3d:03:0d:59:d4:fc:fe:61:68:d3:97:11:
5e:a2:f2:d9:ea:df:92:29:aa:47:8b:2c:32:30:55:
6c:50:57:dd:d3:fa:b1:82:75:d2:ff:31:28:95:2e:
3f:e4:2d:16:33:3d:a6:d6:10:18:58:d6:5e:bb:da:
41:df:21:6a:f0:4e:4f:82:44:46:ea:15:b5:ba:8c:
c7:57:46:5a:84:45:ab:6c:ad:e9:a8:54:be:3e:99:
8b:96:ac:44:89:ff:dd:29:59:47:8f:0d:8d:57:19:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A1:21:45:F1:8B:F4:D9:2A:AB:16:EA:81:11:10:6B:C3:38:18:0A
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/a6EhRfGL9NkqqxbqgREQa8M4GAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.48.0/24
46.162.50.0/24
Signature Algorithm: sha256WithRSAEncryption
72:bf:d0:55:b8:d4:fd:f2:70:df:a5:68:32:75:80:34:2c:9e:
17:e7:7b:02:60:c8:d7:d4:fc:b7:8d:7c:15:ff:7d:78:ad:bf:
31:91:74:eb:88:f5:16:c8:59:ce:c4:1a:b3:ed:02:8d:9b:63:
f1:85:e6:f6:9f:b4:61:9c:38:79:44:01:cc:f6:78:74:69:b8:
59:57:27:94:6e:fa:87:8b:22:f4:4c:f0:db:96:1f:c9:2b:e1:
1f:7a:5b:77:fc:79:f1:33:b9:71:9f:09:89:c0:a9:c7:5f:5a:
e3:8a:d9:c1:02:bf:7e:6c:92:1f:47:9d:96:42:4d:a0:e9:3d:
26:10:e1:82:4e:f7:a8:fa:a2:24:4f:5d:0f:2e:2d:73:f3:22:
8b:e4:5a:e9:c9:fa:04:76:04:a2:18:ca:43:cd:ef:de:9f:74:
70:01:86:a5:8c:b9:a1:f8:00:68:74:b7:82:6b:d3:f4:e2:18:
27:a4:4d:91:16:05:c3:a4:8b:22:8b:2f:60:4c:d0:66:d3:30:
1b:62:1d:0d:c9:4f:56:0d:3a:bc:7d:31:d7:7c:c2:8c:04:a9:
15:de:41:11:ad:7d:cf:bc:71:91:30:5e:45:b0:ec:71:95:e4:
ce:d1:9c:6b:74:df:23:ae:ce:1c:57:6b:44:d3:aa:ba:5c:6b:
29:74:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:40 2025 by rpki-client