Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/RL6FFc7-Wjb83dTW6RkpSfARFms.roa
File: RL6FFc7-Wjb83dTW6RkpSfARFms.roa (raw, json)
Hash identifier: SQ8y7d1sQUxab1FS7WA7ywZXFwY0fJtjHQfS15pkkJ4=
Subject key identifier: 44:BE:85:15:CE:FE:5A:36:FC:DD:D4:D6:E9:19:29:49:F0:11:16:6B
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01831D8C0D466CA103CE523E54C17AF73244
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/RL6FFc7-Wjb83dTW6RkpSfARFms.roa
Signing time: Thu 08 Sep 2022 14:41:01 +0000
ROA not before: Thu 08 Sep 2022 14:41:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208046
IP address blocks: 46.23.110.0/24 maxlen: 24
109.205.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1d:8c:0d:46:6c:a1:03:ce:52:3e:54:c1:7a:f7:32:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Sep 8 14:41:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44be8515cefe5a36fcddd4d6e9192949f011166b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b8:da:38:0c:58:36:69:fd:74:ff:a4:c3:f5:
ee:20:0a:14:25:0f:6e:75:2c:d1:cd:23:47:ae:2b:
15:c6:7d:47:7e:c7:30:53:62:8c:6c:94:fe:16:60:
ea:48:85:ba:21:3c:1d:79:e4:0c:40:43:26:47:eb:
65:bc:9e:c0:bc:c4:54:e1:14:d7:11:84:85:eb:02:
56:0e:48:49:50:be:98:ca:21:12:46:40:38:15:81:
5d:bc:7f:90:37:dc:84:ee:dd:81:6b:98:0f:62:b8:
b1:52:fd:c8:80:79:5d:3e:6f:75:cf:62:b8:eb:ea:
4d:ef:60:4e:02:ba:5f:9b:71:4a:7e:cb:77:1b:8b:
44:47:1a:9c:4e:c2:49:6b:c8:a8:ef:dc:57:3a:13:
d6:8c:e8:3b:ff:fa:e5:7b:70:2a:46:12:15:31:48:
d3:40:50:53:75:f9:ab:0a:73:8e:46:44:11:d6:dc:
69:bb:38:2b:59:2c:4d:dd:06:5b:ef:f8:44:77:7c:
92:51:e4:94:73:19:a0:8c:c0:5c:be:1d:d0:4f:27:
ac:f5:30:74:b6:d6:14:c7:ab:92:02:81:e4:52:60:
06:ff:dd:42:a9:6d:62:7d:88:14:5f:3f:e5:b3:d8:
ef:cd:10:89:45:bf:26:33:f2:df:56:98:4e:f6:9a:
7a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BE:85:15:CE:FE:5A:36:FC:DD:D4:D6:E9:19:29:49:F0:11:16:6B
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/RL6FFc7-Wjb83dTW6RkpSfARFms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.110.0/24
109.205.214.0/24
Signature Algorithm: sha256WithRSAEncryption
70:0a:0a:d8:4d:2c:89:6c:ab:cf:6f:4a:23:19:fe:dd:a6:c4:
42:b5:4a:e4:42:52:34:16:49:b9:86:a9:68:c8:16:15:8e:2a:
e2:af:e9:2d:b8:37:d6:f2:1b:0d:29:14:66:a0:41:d8:bc:1c:
a1:34:79:0e:de:64:ae:5e:83:45:93:61:40:2f:1c:1d:f9:da:
b5:a0:78:2f:81:0f:30:34:68:63:68:22:7a:e3:c7:18:31:ae:
58:a7:64:ab:35:b9:f4:0b:ae:2b:e6:22:b7:87:bb:16:8f:98:
25:56:b7:ac:d7:f7:01:9f:d6:c3:43:f9:2b:a9:03:41:db:0a:
0c:fd:ee:1a:a0:9e:21:e6:f0:b3:f6:6d:a2:68:40:1f:3c:eb:
ef:c4:47:9e:13:b5:2f:30:cb:e2:43:0b:6f:83:e1:9c:01:52:
5c:50:1e:d0:6f:e6:8a:25:b7:1a:86:11:f2:09:6a:76:ff:82:
82:48:83:6e:17:16:7b:c3:e4:c5:14:99:f7:ba:d0:0a:1e:d3:
32:65:b2:63:85:75:7b:31:e0:1f:a6:ca:a8:40:0f:cb:01:87:
1c:65:be:9a:43:bd:e3:61:07:f3:c7:fb:32:f8:e1:dc:c2:7a:
60:e6:58:8d:3f:58:e0:8d:28:44:9f:7b:03:96:8a:84:8d:4e:
24:2e:ce:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:19 2025 by rpki-client