Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/q8JlJMDRYJgtW_OU5uFA7hWz09Q.roa
File: q8JlJMDRYJgtW_OU5uFA7hWz09Q.roa (raw, json)
Hash identifier: pHG9IGMY5DYztMjuB+mMQyiujKAwQ7EM2o4lHxfk8Iw=
Subject key identifier: AB:C2:65:24:C0:D1:60:98:2D:5B:F3:94:E6:E1:40:EE:15:B3:D3:D4
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01880FE9534A34B4CBF32DE9CA5F10F9DF5F
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/q8JlJMDRYJgtW_OU5uFA7hWz09Q.roa
Signing time: Fri 12 May 2023 12:22:09 +0000
ROA not before: Fri 12 May 2023 12:22:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.30.0/24 maxlen: 24
46.162.28.0/24 maxlen: 24
46.162.57.0/24 maxlen: 24
46.162.55.0/24 maxlen: 24
46.162.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:e9:53:4a:34:b4:cb:f3:2d:e9:ca:5f:10:f9:df:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 12 12:22:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abc26524c0d160982d5bf394e6e140ee15b3d3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:08:f8:c6:86:82:1d:54:87:bd:5d:f5:f7:f2:
bc:4b:6c:87:4d:87:80:40:ec:7c:06:de:1e:75:52:
06:e2:bd:23:c8:00:97:bb:44:2b:a3:18:c0:34:0d:
02:f2:08:54:8a:e8:34:4f:f9:c8:aa:13:07:a6:46:
5b:df:5a:90:07:7b:c0:21:f1:b0:d0:fe:4a:a1:b1:
29:02:f4:6b:01:55:f7:49:f4:39:90:16:de:d2:47:
e8:ad:9c:4f:19:60:43:f2:df:c0:90:b7:ee:b2:85:
82:9a:4b:b6:9d:ad:a6:93:b4:08:22:ff:31:46:8f:
6b:4c:78:4d:08:4d:3d:9d:c2:c0:4a:ac:eb:ba:09:
bd:fb:3f:73:44:aa:36:4a:58:1f:07:bd:15:20:f9:
83:5d:bb:d9:26:26:28:9f:c7:45:c4:45:2d:13:a0:
6f:41:0d:8e:c6:98:5b:5f:93:6e:37:a8:25:12:9e:
9b:cf:fc:65:59:46:26:3f:67:33:75:22:10:46:50:
83:ee:b6:2e:07:c7:6c:d3:82:c7:7a:08:fa:e1:27:
80:92:08:d5:38:0b:15:8f:9f:fe:35:8a:04:79:51:
64:1c:4b:ad:4a:77:8c:47:f7:67:d2:8a:a9:94:77:
08:63:16:ce:0e:05:94:51:91:d2:05:d6:65:6c:21:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C2:65:24:C0:D1:60:98:2D:5B:F3:94:E6:E1:40:EE:15:B3:D3:D4
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/q8JlJMDRYJgtW_OU5uFA7hWz09Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.28.0/24
46.162.30.0/24
46.162.55.0-46.162.57.255
Signature Algorithm: sha256WithRSAEncryption
10:b0:81:9e:47:ab:60:75:85:65:c1:f4:10:74:38:cd:69:4c:
8a:f3:92:8f:68:51:01:12:5d:e9:9f:c1:e6:1e:15:fe:ca:38:
4e:e6:b2:51:a3:ef:db:65:82:c9:28:14:a5:21:a5:e6:01:cb:
ad:de:f2:84:17:48:2e:f6:a4:20:13:92:6d:00:86:5e:fc:c7:
02:6c:f9:d7:49:18:14:6d:87:fa:1a:69:57:fe:d3:d0:4b:dd:
0d:4c:80:e4:2f:f4:5c:33:92:9e:7f:77:c3:3b:df:53:80:e3:
5e:a3:79:e9:57:23:5b:51:bd:45:2e:54:d2:3f:0d:be:36:cb:
cb:c2:31:1e:b9:22:ac:f7:f2:e3:63:c2:b3:71:f4:ac:fd:16:
1a:07:6b:bf:2a:a6:f4:46:fb:ab:9f:44:51:57:54:1a:90:08:
67:b1:f1:e8:fc:3f:8b:ae:04:e5:53:b8:63:4f:d0:9b:a6:a7:
26:3f:ed:f4:7f:12:13:4b:b6:ad:ec:8a:87:0a:48:8d:bb:28:
d4:3f:bb:af:37:77:a1:94:a6:fb:9c:f2:13:23:bc:31:4a:c6:
26:d2:ad:ae:bf:4a:03:e4:ff:3e:90:39:cf:50:22:40:49:53:
f7:d2:02:98:59:f3:12:d0:8c:fc:12:f0:80:a4:a6:3c:e6:15:
b9:68:dd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:35 2025 by rpki-client