Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/hFv59nvLfVl0A1NahuXg9XSaxyE.roa
File: hFv59nvLfVl0A1NahuXg9XSaxyE.roa (raw, json)
Hash identifier: 7dZ99/5WIzIHGxvUJCKWI0BoVNV4RQHVBFcTY/sZQiU=
Subject key identifier: 84:5B:F9:F6:7B:CB:7D:59:74:03:53:5A:86:E5:E0:F5:74:9A:C7:21
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0C7F1066
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/hFv59nvLfVl0A1NahuXg9XSaxyE.roa
Signing time: Sun 26 Jun 2022 11:57:22 +0000
ROA not before: Sun 26 Jun 2022 11:57:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47374
IP address blocks: 46.254.129.0/24 maxlen: 24
46.254.128.0/24 maxlen: 24
46.254.131.0/24 maxlen: 24
46.254.130.0/24 maxlen: 24
46.254.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209653862 (0xc7f1066)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jun 26 11:57:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=845bf9f67bcb7d597403535a86e5e0f5749ac721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:b7:cb:bc:b3:e5:b4:cc:54:cb:79:70:0d:
7d:f6:a8:19:ac:86:24:89:01:6d:b0:47:ab:c8:45:
7f:9c:c1:60:31:2b:83:af:29:48:62:ed:f7:4d:b5:
eb:f6:8b:d6:4f:e4:2a:7f:6c:68:0c:3c:90:35:bc:
22:3f:9a:0c:72:86:cf:f3:4f:6e:ce:5d:a9:68:be:
6d:9d:54:4f:87:f4:d8:ad:00:7a:14:c4:2c:da:e2:
4f:29:2b:c5:3b:5e:8d:45:bf:c5:0a:ae:6f:b3:5e:
eb:4f:69:3d:24:4a:26:43:44:0b:58:78:82:81:7d:
48:e4:55:a4:27:7d:be:e7:43:6b:9c:99:0f:3b:7a:
49:93:9a:b4:04:84:40:a9:d8:34:69:46:a8:e1:e6:
74:8e:ac:e3:0b:01:5f:0f:6c:30:18:cf:a7:3b:57:
9f:d8:f1:64:de:ad:59:20:70:5a:1c:10:5a:c1:47:
f9:0c:ae:df:19:e7:be:b5:e5:67:b6:31:03:36:29:
c6:45:12:0b:03:5d:48:9a:a4:1d:af:cc:12:25:ff:
bd:d0:41:d6:49:1a:cf:5c:d2:37:91:78:a9:d9:f9:
64:bd:f9:5b:15:e5:0f:46:08:e0:61:6b:07:91:3b:
87:26:73:c5:06:98:48:ca:f9:ed:fc:d7:3f:f4:4f:
d5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5B:F9:F6:7B:CB:7D:59:74:03:53:5A:86:E5:E0:F5:74:9A:C7:21
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/hFv59nvLfVl0A1NahuXg9XSaxyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.128.0/22
Signature Algorithm: sha256WithRSAEncryption
70:51:84:5e:c5:fb:40:be:3d:50:06:23:59:a5:d2:5d:5f:bb:
73:1f:45:0d:89:c2:fa:6d:4e:9e:ca:73:aa:84:54:92:f7:f4:
dc:b9:a7:c8:f3:6d:8e:c4:4a:61:b6:b2:55:c4:c1:bc:4a:eb:
f7:a2:ce:fc:aa:30:8c:4b:a3:fd:51:96:fb:92:1d:99:29:6e:
98:7d:4a:22:13:7a:fe:55:7d:8b:38:67:26:38:61:8f:8c:30:
58:37:a4:1f:70:19:ed:4f:9e:3f:05:23:28:2e:80:14:b0:36:
35:1b:38:3e:de:86:20:ba:8f:96:52:84:fe:a3:92:30:4c:ae:
54:eb:13:ef:09:f6:70:4a:8d:96:7c:a6:77:68:de:86:df:a2:
8b:35:b4:f0:3c:43:68:28:d1:d8:fd:44:6d:de:36:b4:af:e0:
7b:e3:28:69:98:04:f1:12:63:b3:a3:40:11:bc:bf:a5:0e:cf:
91:f3:21:d1:23:76:53:19:0b:86:a4:11:4a:93:6c:21:b4:b1:
cf:58:77:66:15:98:0a:70:42:22:fe:03:e4:b0:a0:ed:9b:37:
b3:33:5e:f9:46:a8:ec:40:c5:11:04:ee:e1:cb:a5:39:fe:aa:
4d:4f:ba:df:aa:19:1f:70:e1:3e:be:62:0a:de:b4:c6:97:4c:
ea:1b:0d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org