Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/d43j2XMK_h27NZQ1Y7aa6G7Efl0.roa
File: d43j2XMK_h27NZQ1Y7aa6G7Efl0.roa (raw, json)
Hash identifier: /7WDnhVtboLI0vmyv8eXBtJrjYoetBKrO9GeBiqStSA=
Subject key identifier: 77:8D:E3:D9:73:0A:FE:1D:BB:35:94:35:63:B6:9A:E8:6E:C4:7E:5D
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01879D4FBDAFE6E9CCF965B3897645C370BB
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/d43j2XMK_h27NZQ1Y7aa6G7Efl0.roa
Signing time: Thu 20 Apr 2023 06:17:41 +0000
ROA not before: Thu 20 Apr 2023 06:17:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 46.162.16.0/24 maxlen: 24
46.162.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:4f:bd:af:e6:e9:cc:f9:65:b3:89:76:45:c3:70:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 20 06:17:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=778de3d9730afe1dbb35943563b69ae86ec47e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:af:e4:b3:48:69:b6:4a:1f:7b:00:c3:63:47:
1a:0e:a9:79:40:f6:15:9a:1c:2e:c7:59:88:e5:fa:
8a:54:cf:f0:8e:98:d3:34:ec:53:3c:12:49:60:83:
26:0c:f3:88:6b:a9:26:db:56:1a:d4:f2:a7:8f:01:
1d:35:08:41:90:04:6d:d3:57:27:45:5d:36:0f:e2:
33:03:44:f6:64:4b:01:20:4d:01:39:4b:71:b3:0e:
7b:ec:64:45:94:8f:f9:f0:3d:5c:85:d0:81:49:31:
80:e3:e0:4b:d3:17:0e:22:52:1d:39:ad:bb:e9:44:
7e:9e:71:a4:46:e6:a9:c4:e1:ab:26:92:fe:5e:d4:
56:56:25:29:41:cd:66:57:6a:16:2e:99:e5:c7:eb:
01:8d:45:72:32:28:e5:dd:20:5f:fa:5a:72:a6:42:
aa:bb:40:35:21:64:9c:4e:42:67:05:80:23:35:35:
b0:d1:7f:04:9c:73:92:c8:95:ab:66:ef:d4:30:e3:
c4:84:d6:b0:19:c8:da:28:ba:e4:41:24:e7:b9:3f:
ae:24:11:ba:e2:03:98:e1:8a:be:45:6b:d9:f4:dd:
91:15:fd:a1:9f:56:29:f7:83:f2:50:28:60:b7:d7:
c1:a8:f4:fb:f4:b8:6f:01:9a:69:93:0e:48:43:9c:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8D:E3:D9:73:0A:FE:1D:BB:35:94:35:63:B6:9A:E8:6E:C4:7E:5D
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/d43j2XMK_h27NZQ1Y7aa6G7Efl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.16.0/24
46.162.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0d:f5:2f:5e:5b:bb:d6:47:6f:42:31:99:57:54:de:36:2e:
86:7c:a2:97:f2:0b:8e:d8:83:d3:5d:8b:24:ee:00:5d:cc:24:
66:b5:1d:ad:64:0d:1b:98:57:a4:1b:e2:8e:e7:4c:80:a5:ba:
95:3b:b5:d8:fb:77:a1:04:a9:c5:06:10:63:ec:2d:47:67:0d:
1c:e0:16:e6:8d:c4:5a:4c:3c:c3:34:da:8a:ce:54:e9:75:04:
4c:52:7a:53:e8:74:62:ed:a0:bc:fc:35:64:2b:f7:b0:07:fe:
bf:9d:7b:cc:5c:85:4f:d4:ef:7a:a8:7f:0c:d4:bb:9c:b9:65:
72:c0:8e:02:72:03:0a:9a:22:c5:3c:18:98:74:4f:31:74:ab:
1b:01:4f:3a:6f:15:61:ef:05:15:de:a4:e7:33:b4:d9:f3:fb:
88:ee:12:32:65:dd:07:eb:3c:b4:24:72:a0:16:a5:86:86:5e:
87:5c:e9:20:99:3b:09:85:a0:cd:1a:80:71:c7:80:90:95:2a:
56:9c:48:1f:13:67:d6:eb:bb:73:2c:2b:9f:34:47:66:85:eb:
aa:bd:ce:ce:f3:76:f2:04:0e:02:45:b0:97:60:ba:5c:50:3f:
ea:a4:6b:e7:64:15:e7:0c:c9:d7:aa:e2:5b:08:d3:cd:d8:49:
85:93:93:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:27 2025 by rpki-client