Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/vnGeJJT-r-ZIigoqD66H_2IZEH4.roa
File: vnGeJJT-r-ZIigoqD66H_2IZEH4.roa (raw, json)
Hash identifier: s04p/R71eBi4VS2LV80wZFkfkClGTqg6sFU4nItIEBc=
Subject key identifier: BE:71:9E:24:94:FE:AF:E6:48:8A:0A:2A:0F:AE:87:FF:62:19:10:7E
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01887DCAF1534D2AFA85EBD8E7DC7E391EBA
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/vnGeJJT-r-ZIigoqD66H_2IZEH4.roa
Signing time: Fri 02 Jun 2023 20:27:12 +0000
ROA not before: Fri 02 Jun 2023 20:27:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 46.162.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:ca:f1:53:4d:2a:fa:85:eb:d8:e7:dc:7e:39:1e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 2 20:27:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be719e2494feafe6488a0a2a0fae87ff6219107e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:ca:33:c5:a4:27:6d:ae:c2:cf:66:df:5f:
8d:47:96:e2:f7:4a:94:46:40:83:3f:d8:a6:79:cc:
19:24:91:d7:be:b1:99:6d:e0:08:02:ad:77:46:12:
15:65:72:9e:2e:ab:05:35:b3:ec:d3:a0:24:cc:dc:
f7:2d:cd:7c:11:1d:f5:00:41:f9:18:d9:2f:d0:66:
a2:65:91:d1:fa:bd:de:fa:74:fd:3f:c0:57:28:e1:
47:fd:e2:f9:68:28:48:61:15:21:d7:29:01:22:e3:
3f:79:bf:30:6a:1a:9b:67:e3:05:6d:b0:23:74:cf:
de:b7:71:81:69:94:70:e0:e5:a1:86:71:33:bf:26:
7d:4e:9d:1c:e3:98:91:58:7f:64:05:3b:7a:c7:72:
04:b3:4a:68:b7:04:95:bf:af:fe:8e:1d:f9:6e:f2:
67:25:f6:98:87:7e:b4:2f:5b:30:97:15:2b:4e:30:
de:41:cb:79:3f:e4:18:84:b3:7c:a2:f7:5a:a1:9a:
17:e5:ea:1d:14:ff:bb:c1:52:f5:e3:10:53:93:5e:
a4:3c:73:db:f6:ec:a2:cc:0c:00:40:d8:00:d1:65:
58:c4:0f:74:67:77:48:c8:70:3a:4e:75:62:9a:26:
9a:cf:1f:46:d5:aa:5f:87:79:69:4e:1c:ab:5a:32:
8b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:71:9E:24:94:FE:AF:E6:48:8A:0A:2A:0F:AE:87:FF:62:19:10:7E
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/vnGeJJT-r-ZIigoqD66H_2IZEH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.0.0/24
Signature Algorithm: sha256WithRSAEncryption
17:31:2b:a0:1d:cf:09:e4:2b:a2:f4:48:ef:25:ed:ad:f2:bf:
0b:0f:9d:1e:11:8d:cc:64:b6:49:85:e2:4b:70:8d:39:67:a2:
ad:12:ba:80:9b:f8:c6:60:e1:2f:86:a5:b6:41:a6:51:9e:c9:
0d:da:29:eb:f7:72:cd:87:64:1c:00:91:87:22:2c:d0:2c:11:
fc:0c:1c:f7:e3:b6:f4:8e:6c:e6:a8:2a:d8:b7:b5:56:f0:3b:
25:56:ae:1f:2c:38:86:56:81:c4:a3:10:ee:a6:81:de:8c:e7:
f4:90:2a:d1:5f:e1:bd:3c:4e:f3:e6:07:c2:b0:f9:ab:79:91:
91:64:36:53:6f:92:e4:9a:2f:e5:f5:4f:c4:7b:1f:94:7e:7b:
8b:65:93:30:6a:82:17:cc:ae:f5:1e:fd:5d:fd:e8:ea:68:62:
9b:23:4c:93:a1:73:3e:01:a6:eb:33:a8:e1:ac:ab:1b:b0:d4:
07:a1:62:f4:0a:50:95:3a:c4:c5:72:fc:b6:bc:87:5e:b1:68:
e6:15:84:80:66:c3:e6:f5:d3:ae:f8:00:6a:09:bf:97:50:4a:
10:53:13:23:4d:61:f7:39:7c:1d:81:26:15:9d:4a:df:a6:9d:
4b:38:f8:42:59:19:35:c7:86:31:17:0e:65:54:de:30:2d:2f:
ab:bd:35:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:52 2025 by rpki-client