Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/QJcTaImyQ9K9l4V6s4o49TmL0lM.roa
File: QJcTaImyQ9K9l4V6s4o49TmL0lM.roa (raw, json)
Hash identifier: frCyKB0kkriluMhvGpHEjJ5S8DanG4nbMLf9tHXNFGk=
Subject key identifier: 40:97:13:68:89:B2:43:D2:BD:97:85:7A:B3:8A:38:F5:39:8B:D2:53
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01841321CCD45B35B12EB350AB49B700E40C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/QJcTaImyQ9K9l4V6s4o49TmL0lM.roa
Signing time: Wed 26 Oct 2022 07:11:32 +0000
ROA not before: Wed 26 Oct 2022 07:11:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25185
IP address blocks: 46.47.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:21:cc:d4:5b:35:b1:2e:b3:50:ab:49:b7:00:e4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 26 07:11:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4097136889b243d2bd97857ab38a38f5398bd253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7b:ed:a3:0b:58:a2:77:a4:89:8f:b1:4f:f4:
89:a6:65:51:cb:f6:04:5f:52:b0:15:44:60:70:ca:
da:b5:f2:60:dc:5b:bf:ce:12:da:5c:75:25:a3:ce:
48:f5:da:d1:e9:ef:0c:b8:18:12:d9:da:85:13:3c:
fb:18:a2:0f:62:64:c5:71:72:dc:8e:59:e0:c5:4b:
6d:b7:44:22:17:c8:20:63:af:9d:d7:ab:db:be:79:
57:37:29:08:9d:e1:97:ee:e9:f3:37:b2:77:15:8c:
34:35:25:d2:02:9e:4a:9b:6d:d0:fd:c6:d4:68:db:
b7:59:94:cf:9c:ea:a2:06:52:ff:7b:80:8d:7d:43:
0c:37:72:a0:e5:73:51:6e:b0:7c:90:6a:c2:9c:09:
b5:67:c9:05:f6:67:63:8d:c8:75:f4:73:22:83:74:
d7:a3:8a:be:e2:ed:99:40:ec:9f:52:2c:f4:8f:3f:
6c:19:fa:ef:07:2b:5c:52:b3:bd:7a:b0:5f:19:7a:
03:c0:4e:4a:d3:20:3c:c7:e0:df:14:cc:a5:20:6b:
0a:e0:5a:50:d5:05:0e:33:62:95:f5:be:5a:f9:ec:
b2:a4:3d:65:17:32:3f:d2:7f:65:69:36:af:b9:61:
94:2d:8c:ce:13:59:25:08:39:63:b2:23:e5:74:93:
53:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:97:13:68:89:B2:43:D2:BD:97:85:7A:B3:8A:38:F5:39:8B:D2:53
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/QJcTaImyQ9K9l4V6s4o49TmL0lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.47.245.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e4:34:d4:03:94:5d:38:10:c1:40:10:66:d4:c0:fb:11:b8:
0b:78:0f:f0:c4:99:51:f0:4f:c4:62:79:6f:26:07:eb:af:ad:
48:50:0e:cc:ef:02:48:49:ef:ae:ef:f1:5c:46:6a:cf:5f:63:
93:76:c0:98:20:b2:ea:36:13:05:8e:f8:ba:29:19:a0:8e:75:
61:9c:d8:59:1d:22:75:b2:0d:ed:20:50:60:d2:85:1a:a8:b9:
2b:55:6b:cb:26:a4:57:29:01:89:49:8e:a6:85:4f:11:69:9e:
ce:7b:74:5a:b5:bb:23:7a:fa:6e:d1:5e:27:c9:e4:38:ec:36:
b1:7a:db:ca:df:26:50:70:51:7e:d5:9e:ca:8a:01:4c:f0:b7:
c4:e3:1b:bf:1b:fb:31:c6:eb:8f:3d:41:71:3d:83:75:f4:ce:
f5:39:f4:20:fe:fc:5f:80:31:c4:07:3c:53:37:04:4e:1c:43:
2b:f2:a4:20:45:46:df:e8:5c:e5:d3:fd:1a:bb:42:cd:47:b2:
70:54:e2:b8:81:46:db:97:cd:7a:62:5f:84:7d:25:f6:54:74:
e1:60:2f:37:81:26:ec:48:1a:bd:bb:8b:20:99:8e:70:e0:b7:
e4:17:29:7f:c1:5c:3e:2f:90:84:3f:85:ff:48:ff:03:ae:80:
70:25:a7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:41 2025 by rpki-client