Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/Nh5Me_sVJ1K2ANDyEAseDBmRJF8.roa
File: Nh5Me_sVJ1K2ANDyEAseDBmRJF8.roa (raw, json)
Hash identifier: fkw4HjklkeaHYTp3l8M3EzO0Q5aGre4pGW7fhY7q79Q=
Subject key identifier: 36:1E:4C:7B:FB:15:27:52:B6:00:D0:F2:10:0B:1E:0C:19:91:24:5F
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 018571D7C13C6FFAE008C9367AB9BA50256B
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/Nh5Me_sVJ1K2ANDyEAseDBmRJF8.roa
Signing time: Mon 02 Jan 2023 09:37:23 +0000
ROA not before: Mon 02 Jan 2023 09:37:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58053
IP address blocks: 46.28.78.0/24 maxlen: 24
46.28.78.0/23 maxlen: 23
46.28.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c1:3c:6f:fa:e0:08:c9:36:7a:b9:ba:50:25:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 2 09:37:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=361e4c7bfb152752b600d0f2100b1e0c1991245f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:74:1b:9f:4f:e1:29:49:24:d2:bd:c8:c7:5c:
d5:e6:7d:b3:43:88:9b:d6:f3:18:db:bf:24:d5:47:
ad:26:03:44:09:3e:db:6a:2b:79:29:47:4b:bb:43:
62:70:54:5f:10:7a:c5:1c:76:f4:b5:97:29:16:13:
d3:7f:8e:3e:42:06:4b:a9:81:af:10:58:22:8d:3c:
e5:3d:f7:ce:67:9d:b6:ae:3d:8e:62:a6:fa:1e:ab:
eb:45:a7:0d:63:2c:04:03:e4:c5:5e:0d:cb:38:ff:
b4:15:e0:b1:3e:ce:6b:fb:79:9a:34:6e:8e:24:20:
e3:84:ee:07:7e:0a:d7:64:ef:5b:13:2b:4a:fc:01:
f8:f6:06:b1:23:4f:3d:30:28:9f:29:df:ed:dd:94:
ff:59:60:8f:96:70:f4:ea:82:cb:38:60:57:61:75:
21:e0:b8:44:79:8d:6d:c2:fd:1d:cc:65:ac:36:ef:
b6:0d:35:27:4b:a2:d2:cf:a1:34:02:96:d6:af:e4:
74:bf:20:11:8d:3f:91:f5:42:5f:a7:6a:05:18:8f:
fd:af:61:10:34:58:d0:22:6a:f9:32:91:a4:5e:ee:
26:61:66:42:ca:d6:b2:57:76:7e:76:81:40:0d:b6:
ce:f5:00:52:46:fe:3e:22:ca:6b:8f:ad:3d:71:95:
6a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1E:4C:7B:FB:15:27:52:B6:00:D0:F2:10:0B:1E:0C:19:91:24:5F
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/Nh5Me_sVJ1K2ANDyEAseDBmRJF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.78.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:d6:22:5f:72:a4:50:bf:39:e0:af:a2:ea:34:73:25:c9:a3:
c8:a4:26:27:b7:d3:41:53:c0:b2:8d:1f:4d:3d:00:7c:f6:72:
ca:20:16:03:13:aa:d9:aa:cc:16:33:6d:d4:c9:d8:31:a4:01:
c6:65:15:f5:d8:f8:90:71:35:43:01:a3:fa:92:0a:80:2d:3e:
ed:99:2d:9e:85:51:28:45:97:8c:79:46:c9:a3:1b:06:1c:80:
11:66:e8:93:07:8c:48:0d:43:5b:c5:51:02:b0:06:35:4f:30:
ab:7e:1a:9f:18:80:70:5b:04:d8:a6:ba:33:0a:87:3c:ea:a6:
d0:4a:f7:a2:06:3c:5c:c1:46:e4:6c:e2:f6:b4:fc:0b:a9:ac:
87:db:e2:f3:2d:4d:32:24:01:f2:45:ee:00:c3:1d:03:25:cd:
27:80:bd:8f:00:8f:79:29:31:5e:1b:37:d3:80:f5:55:7a:90:
76:72:4b:6b:5f:71:42:e8:ce:bf:f6:b5:9e:b9:06:06:27:2a:
e6:bb:ec:ea:c8:1c:da:e9:4f:c6:a9:b4:e8:66:9a:35:28:51:
6d:df:8e:19:da:97:b4:db:fe:03:0e:de:38:7f:df:2a:89:97:
af:dd:c9:ea:2c:bb:bc:fd:8d:1b:81:84:62:76:cb:13:1c:2c:
4a:e3:d0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:48 2025 by rpki-client