Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_rq938ehxVw_yTv4vimxZJy1mes.roa
File: _rq938ehxVw_yTv4vimxZJy1mes.roa (raw, json)
Hash identifier: 8ZpTT2WdTQU1H+zchhTRuqwR3SDtwn52N58rUMX2D9I=
Subject key identifier: FE:BA:BD:DF:C7:A1:C5:5C:3F:C9:3B:F8:BE:29:B1:64:9C:B5:99:EB
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A94A78B
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_rq938ehxVw_yTv4vimxZJy1mes.roa
Signing time: Sat 01 Jan 2022 16:07:22 +0000
ROA not before: Sat 01 Jan 2022 16:07:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210154
IP address blocks: 46.254.135.0/24 maxlen: 24
151.237.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177514379 (0xa94a78b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=febabddfc7a1c55c3fc93bf8be29b1649cb599eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:25:4a:ab:fe:f0:1b:c9:e2:f6:7b:fa:21:
24:9f:64:c4:c0:ad:f3:de:ee:bc:f5:f3:0a:75:a1:
54:84:73:2a:68:ce:dc:80:48:25:87:25:4f:e4:80:
7c:e5:4a:63:c8:49:d2:bb:20:3d:5d:64:3f:b4:f6:
ba:73:f3:3f:de:75:2a:49:09:cc:4f:e5:1b:6b:f9:
93:fa:b8:53:f4:08:2e:e8:7c:49:ba:66:b8:75:dd:
17:ce:a6:ec:29:fe:0d:41:d4:1b:44:6e:98:b5:98:
de:8e:23:45:4e:77:4a:c8:71:93:b5:7c:31:84:d7:
49:43:96:de:01:6b:60:32:0e:6f:db:2d:ec:c1:33:
22:cc:d5:8e:49:b4:86:90:5c:8f:84:28:35:7b:0a:
0a:30:fc:92:31:1e:2b:64:51:53:43:b6:0e:5b:de:
5c:d5:2c:41:ff:64:87:7c:5f:d7:2f:c1:fb:2d:8d:
5a:37:a3:63:ea:d8:ce:1e:54:97:2e:82:df:eb:fb:
57:58:0e:39:d7:fa:12:29:bc:9f:f8:f1:be:00:8b:
b2:c4:37:a1:f1:a8:3e:85:eb:83:99:63:6b:fb:d0:
d4:e3:b0:30:83:60:79:7c:9f:fa:4d:6b:be:34:5c:
1f:1f:9e:80:49:82:26:07:8a:1c:4c:79:ac:4d:f4:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BA:BD:DF:C7:A1:C5:5C:3F:C9:3B:F8:BE:29:B1:64:9C:B5:99:EB
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_rq938ehxVw_yTv4vimxZJy1mes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.135.0/24
151.237.21.0/24
Signature Algorithm: sha256WithRSAEncryption
21:72:96:87:83:bd:c9:09:6d:35:f5:70:93:39:de:7f:63:fd:
7c:4e:a1:59:75:81:8d:91:ef:42:1f:93:b2:8c:17:4b:d5:2d:
e4:49:2a:f5:56:44:e1:46:a0:63:a9:41:04:b9:11:ca:35:5b:
77:0d:78:2e:d8:e3:3c:5d:d0:90:a6:a6:5a:df:23:9c:d4:9d:
a2:e0:ad:db:ea:3b:40:53:4c:5e:54:c8:59:78:fd:93:77:c0:
78:c7:bc:a6:04:21:d8:b5:da:2b:37:e8:f5:f5:9c:5b:09:a5:
27:30:a0:87:34:9b:93:1a:22:ee:14:7b:d1:c3:fb:90:22:66:
67:12:9c:23:40:86:28:05:2a:27:82:b2:52:71:53:2d:75:c6:
fc:a7:8b:ea:f5:36:da:73:99:6d:db:0e:3a:75:34:c6:f3:63:
ea:a5:ce:1c:47:e0:3a:7c:f5:b4:be:2d:4d:3c:c1:98:4c:f0:
99:d4:b4:6a:69:d7:8f:84:db:41:37:2e:01:7d:c0:14:54:04:
67:48:56:b6:e5:c1:4f:b3:3c:23:d6:48:3a:53:c1:95:60:bf:
79:12:ce:b4:8e:09:3a:a5:3c:e4:87:37:75:d4:3a:2f:7e:e4:
c3:b8:b6:d8:a1:53:0f:fe:7a:51:36:a2:48:83:16:d7:44:ac:
a7:5b:24:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org