Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/FV82kZMld6M86zb7b3wXknOe56U.roa
File: FV82kZMld6M86zb7b3wXknOe56U.roa (raw, json)
Hash identifier: WlWEUlJ+Q1xa+HBZm6kJQD2oK+5bmkaS83jlb7UQw48=
Subject key identifier: 15:5F:36:91:93:25:77:A3:3C:EB:36:FB:6F:7C:17:92:73:9E:E7:A5
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0184BE6F02FB35BE4C1A104192C0EA186BCC
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/FV82kZMld6M86zb7b3wXknOe56U.roa
Signing time: Mon 28 Nov 2022 13:30:57 +0000
ROA not before: Mon 28 Nov 2022 13:30:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 46.23.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:6f:02:fb:35:be:4c:1a:10:41:92:c0:ea:18:6b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Nov 28 13:30:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=155f3691932577a33ceb36fb6f7c1792739ee7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6e:53:1b:c6:be:22:6d:e3:30:fa:9a:9f:fe:
06:90:ae:26:b8:3b:10:df:fd:20:49:00:e8:4a:5b:
19:f7:f9:95:77:28:73:a5:cf:e4:a7:48:51:6b:87:
47:c9:66:e8:53:f6:14:ce:02:26:5f:45:68:57:d7:
15:cc:63:ad:81:eb:e8:0e:26:ba:5a:14:85:27:74:
69:13:0e:68:eb:9d:f9:23:2c:e6:18:2f:b6:4d:93:
dd:f1:e9:04:84:dd:f0:8a:68:88:9c:73:8d:73:d8:
83:8e:5f:4c:1a:6f:26:39:64:c9:f2:a2:f7:62:57:
21:8f:81:2a:83:a4:a0:e1:0a:61:57:48:75:2e:77:
6a:8c:d6:39:6c:c2:01:40:69:d6:37:94:ba:0a:ac:
c1:29:e0:5b:43:d9:12:bb:b3:c6:1e:3b:60:71:1f:
a0:cd:e2:0b:13:0e:09:a3:ee:db:76:dc:ae:8c:82:
a5:42:19:d4:e3:a5:9e:3d:89:e4:22:f4:dd:02:27:
2c:99:2b:1f:48:8a:89:61:e4:41:cd:95:a9:73:1f:
1c:74:f8:37:a1:e2:ec:a9:64:ab:41:86:4a:a2:33:
9b:3f:bf:1e:0e:06:ec:67:6d:aa:c0:97:f2:83:76:
44:bc:84:6a:27:f5:b9:53:0b:44:ff:28:8f:0d:26:
a9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5F:36:91:93:25:77:A3:3C:EB:36:FB:6F:7C:17:92:73:9E:E7:A5
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/FV82kZMld6M86zb7b3wXknOe56U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.108.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7a:ef:f8:ba:2e:b6:43:d1:44:21:b4:3b:41:9f:7b:1b:86:
6e:10:1d:91:20:a1:38:3d:e1:57:82:da:bc:af:fb:de:f0:9e:
d7:1e:c7:a9:a0:be:73:ba:87:aa:60:58:ea:1e:40:e7:c8:e6:
6e:78:5e:6b:0c:e7:6f:e5:1c:b5:03:d1:ee:e2:4b:30:33:c3:
18:95:f6:a0:a8:3a:32:6a:08:6b:ee:6c:b4:ea:92:0e:fc:c4:
31:f0:35:db:b2:78:c8:a6:e5:de:d6:3e:49:ae:b2:c5:af:c6:
68:47:68:67:de:d8:1d:fb:f2:ab:b8:63:96:12:40:56:8b:98:
a2:15:3c:f2:ff:44:93:13:87:a3:e0:05:dd:38:d7:b6:0c:31:
c4:1c:b2:dd:61:a7:9d:cc:4b:ae:c5:c1:a3:3a:5c:56:03:ab:
57:a9:5a:13:cb:ca:de:ac:4a:72:1f:bd:fc:8c:06:43:dc:d8:
b1:d5:71:d3:bc:2c:c2:22:62:5b:0a:cf:08:16:9b:a0:84:14:
f7:7a:aa:30:cc:00:eb:9c:4e:1a:b4:65:07:a6:c9:a1:67:af:
2d:d7:e2:10:87:d4:4a:e4:33:c7:79:a3:47:1c:b0:a9:cf:54:
d9:ea:d1:cb:6d:c1:e7:53:b5:c3:e8:03:b1:fa:0a:50:4d:66:
16:27:bc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:19 2025 by rpki-client