Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dwuwkbHgEYi2UySw-RG3VQa0Yrs.roa
File: dwuwkbHgEYi2UySw-RG3VQa0Yrs.roa (raw, json)
Hash identifier: VO285fhaQ86CZbqRR7/y3wxVk/bg5068s3JUGyM2L2M=
Subject key identifier: 77:0B:B0:91:B1:E0:11:88:B6:53:24:B0:F9:11:B7:55:06:B4:62:BB
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018881FB094733AE843C1F0B4F010E547A83
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dwuwkbHgEYi2UySw-RG3VQa0Yrs.roa
Signing time: Sat 03 Jun 2023 15:58:12 +0000
ROA not before: Sat 03 Jun 2023 15:58:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 843
IP address blocks: 46.162.1.0/24 maxlen: 24
46.162.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:81:fb:09:47:33:ae:84:3c:1f:0b:4f:01:0e:54:7a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 3 15:58:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=770bb091b1e01188b65324b0f911b75506b462bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:45:5d:1f:af:68:e5:ec:25:b7:e0:7c:f5:
94:e0:7a:e7:31:e7:0f:8d:28:3f:25:ab:88:f1:df:
73:de:1e:61:5c:2c:50:08:cd:75:8c:3b:ea:77:5d:
cc:0f:ab:88:d4:cc:ca:7d:2f:c1:0f:41:d9:a6:9a:
b7:26:a8:e4:3c:d1:b0:04:eb:c7:12:ad:70:f3:b3:
85:a3:4b:c5:30:35:f3:68:54:95:3a:be:8e:73:e5:
d5:25:ab:8b:23:9a:ea:63:b3:66:f1:f6:a6:11:15:
9a:00:c9:bd:d4:bb:14:63:6a:7c:44:58:60:f6:03:
fa:98:00:36:83:48:b3:3d:0c:f2:64:9f:75:f0:57:
1e:33:38:20:08:06:d5:63:5b:bf:fd:0a:a7:32:e7:
57:40:15:62:b5:9c:6a:f3:2a:bc:0a:be:32:1a:4f:
04:50:e6:7e:45:7d:15:49:4d:ff:66:b0:eb:5d:b9:
d5:40:fc:10:c2:70:ce:44:c9:32:f6:61:ae:02:42:
d4:40:66:85:57:be:5a:a6:89:2e:af:c8:5c:5d:57:
c4:eb:7a:a1:37:c5:52:f5:25:c6:71:71:14:ab:56:
a0:81:c0:1f:63:d8:7e:2c:e6:a9:00:c8:8f:37:c9:
bb:b0:ec:e7:26:a6:3e:d0:8b:70:9f:28:19:ba:c0:
16:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0B:B0:91:B1:E0:11:88:B6:53:24:B0:F9:11:B7:55:06:B4:62:BB
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dwuwkbHgEYi2UySw-RG3VQa0Yrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.1.0/24
46.162.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:0f:fc:ed:53:c1:99:af:6b:32:4a:06:66:12:25:c6:ed:ae:
cd:b5:5b:8e:e8:44:ea:4e:2f:e4:9d:a8:83:86:bf:99:0f:3a:
91:ee:6c:44:9e:d7:66:62:73:c5:cf:53:16:39:9e:de:55:7f:
88:73:91:6c:e1:f5:9d:d1:88:d0:5d:a2:29:bd:d2:0d:1a:f1:
3f:bd:3f:4a:e9:f8:21:68:3b:87:92:d6:18:2a:fe:5d:c3:77:
7b:61:29:a4:a7:a3:d8:fa:67:ef:f3:80:22:40:e1:16:4a:63:
71:92:7b:55:48:75:3a:3b:e6:1f:e6:b9:5e:20:57:7f:f6:68:
3d:69:e9:25:b8:66:1d:c1:f6:53:4a:44:9b:1b:f1:82:fe:d6:
d9:26:b9:ee:0b:59:48:ad:c6:d5:f0:f8:ab:8b:f8:6b:6f:07:
74:c6:ef:d4:53:bb:57:d3:32:5d:43:b8:2c:9d:a4:f4:a1:2e:
03:c8:21:d8:11:2b:ed:3e:7f:8d:1d:92:27:2a:62:0d:3a:17:
64:44:dc:3f:d5:cd:7b:7b:b5:08:2c:b3:5f:93:a5:2a:6c:cd:
7a:0e:49:a2:33:04:9b:c6:0c:bd:ad:07:62:f9:e2:95:97:16:
ee:aa:5d:b7:39:9e:e7:47:01:06:3c:49:32:5f:fc:f5:1c:7b:
80:ba:f1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:57 2025 by rpki-client