Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-BoCEXDxKrzzrjDlduGSQZ_KpYs.roa
File: 1-BoCEXDxKrzzrjDlduGSQZ_KpYs.roa (raw, json)
Hash identifier: 8XUN8ZimvfUyWLDbc9ojsrRKAZvtuSqoTe8h44KoAvs=
Subject key identifier: F8:1A:02:11:70:F1:2A:BC:F3:AE:30:E5:76:E1:92:41:9F:CA:A5:8B
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A71B006
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-BoCEXDxKrzzrjDlduGSQZ_KpYs.roa
Signing time: Sat 01 Jan 2022 16:07:03 +0000
ROA not before: Sat 01 Jan 2022 16:07:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29694
IP address blocks: 46.254.133.0/24 maxlen: 24
46.254.134.0/24 maxlen: 24
85.187.14.0/24 maxlen: 24
85.187.243.0/24 maxlen: 24
85.187.249.0/24 maxlen: 24
46.254.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175222790 (0xa71b006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f81a021170f12abcf3ae30e576e192419fcaa58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:f3:15:1d:07:cf:8f:2e:ef:6a:50:6e:7e:
0f:29:a0:08:b0:8e:72:6a:63:41:dd:35:83:9c:d1:
40:82:2f:a4:e1:52:e0:a2:94:49:5a:9d:4d:7f:c6:
ae:ac:eb:ba:fe:7c:d5:2c:f6:83:30:6e:6d:87:3a:
37:cb:ae:02:19:8f:8f:80:0f:66:3c:2a:13:eb:01:
b0:1a:aa:fc:65:3c:ac:70:cf:c7:3a:72:ea:26:cf:
be:78:fc:52:b6:4e:2d:2d:33:be:81:bc:c9:50:97:
aa:73:f0:85:26:7a:81:23:bd:47:c4:29:ce:13:09:
2b:94:70:e7:32:df:7e:ef:66:91:61:2c:68:78:a7:
d4:17:c6:b6:84:6e:43:33:90:b9:4a:fa:28:c3:ae:
1e:52:b0:30:d9:34:27:c8:97:51:f4:96:55:92:e2:
2c:bc:64:19:0d:e0:a2:76:fd:af:30:f2:14:42:46:
9c:79:ab:f4:ef:02:d1:96:5b:12:92:64:5d:26:52:
d9:d5:fd:98:34:0e:03:c0:f2:c9:c2:35:4e:cd:cb:
4b:5b:81:32:09:b9:72:69:98:c3:77:18:61:32:b2:
7d:f7:97:f4:a5:42:ed:c1:cf:9e:cb:b3:99:4d:fe:
94:97:a1:d4:8d:c0:dd:64:a5:90:cd:fe:d5:34:eb:
b6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1A:02:11:70:F1:2A:BC:F3:AE:30:E5:76:E1:92:41:9F:CA:A5:8B
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-BoCEXDxKrzzrjDlduGSQZ_KpYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.132.0-46.254.134.255
85.187.14.0/24
85.187.243.0/24
85.187.249.0/24
Signature Algorithm: sha256WithRSAEncryption
04:26:0d:56:3a:bf:c3:49:ef:cd:43:58:7c:e5:64:2c:ed:09:
3b:93:d5:61:1c:ec:48:37:bd:79:4f:80:28:03:91:ab:90:33:
cb:28:bb:8e:52:68:13:32:51:0b:56:05:9a:34:ed:97:59:9d:
27:86:d4:41:a7:a1:94:69:5c:71:77:61:9e:25:b1:38:85:bc:
81:da:4f:0b:4f:14:8a:fa:80:eb:62:75:67:2c:32:47:17:a5:
4b:8c:6f:ec:a8:58:2c:57:0f:77:42:ff:ef:b1:85:bf:06:a1:
33:8a:b5:dd:6a:9f:de:f2:95:25:ed:e6:e3:ac:d7:62:3c:50:
00:b9:ed:b1:9e:72:18:bf:4b:ac:d8:94:c9:14:70:d3:8b:20:
68:87:32:e6:dc:a7:64:a9:9c:cf:3c:08:81:d4:5b:9e:0d:65:
39:9e:01:47:ba:86:e3:2b:d9:ed:1b:7b:cb:76:3b:51:e4:cd:
a0:a3:2d:6c:76:a1:06:73:e1:4a:ef:03:38:b4:24:60:1c:a0:
00:6b:a3:9d:d5:ad:2a:c7:02:55:be:b6:9c:e5:f9:d2:9c:5f:
58:03:76:82:b0:7a:b6:5b:1f:c3:02:e2:8f:d3:76:e7:fc:0b:
ae:df:92:1a:2d:ff:d7:16:fa:a7:05:6e:dd:4f:e8:61:d4:e7:
19:73:5f:81
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:11 2024 by rpki-client on console-fra.rpki-client.org