Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/U6lCIPoOcTPaCuNtsuBSsM93Dq0.roa
File: U6lCIPoOcTPaCuNtsuBSsM93Dq0.roa (raw, json)
Hash identifier: imkjc9Kgf4CZRWQRc7UEUXKmQ/Q0b9XO3IJXuOmsJG4=
Subject key identifier: 53:A9:42:20:FA:0E:71:33:DA:0A:E3:6D:B2:E0:52:B0:CF:77:0E:AD
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0186DAEEF43E33B968178C9EE75384FE9106
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/U6lCIPoOcTPaCuNtsuBSsM93Dq0.roa
Signing time: Mon 13 Mar 2023 12:25:38 +0000
ROA not before: Mon 13 Mar 2023 12:25:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206003
IP address blocks: 46.23.100.0/22 maxlen: 22
46.23.110.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:ee:f4:3e:33:b9:68:17:8c:9e:e7:53:84:fe:91:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Mar 13 12:25:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53a94220fa0e7133da0ae36db2e052b0cf770ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:26:74:bc:93:3a:0d:d8:26:db:7f:be:a6:36:
a6:50:b8:33:9e:f0:b7:65:86:ed:79:5b:8a:77:e6:
62:60:08:3d:9f:34:12:0d:10:d4:f5:68:d2:d1:08:
77:d6:db:b2:0e:35:53:ea:fb:c8:f9:28:76:14:57:
46:97:5c:0b:90:73:51:d4:fa:26:12:bd:6a:03:56:
01:ca:de:ea:89:5e:c3:0f:da:88:16:6a:59:37:3e:
9d:66:da:db:8e:dd:96:f7:d0:62:88:ae:0d:97:c4:
2d:3d:2b:4b:f7:dd:ff:95:f0:50:23:bb:9e:2a:e0:
15:0e:e0:e1:43:a5:86:b2:78:36:7f:cb:b3:d6:4d:
37:d5:6d:1d:5c:03:42:35:40:e9:c3:42:41:36:d5:
41:44:9a:f1:ca:1f:e2:2c:03:da:f5:71:bc:e9:5b:
df:7a:01:6b:69:65:6b:36:90:44:6f:07:c7:09:9a:
79:e8:03:80:e4:8a:14:2b:d4:c6:d2:2d:c5:46:56:
1e:93:86:cf:09:cf:3d:4f:6c:df:8a:eb:aa:73:05:
fc:0f:9a:09:72:ea:3d:33:e8:54:22:84:26:09:ef:
f5:ed:de:20:50:9a:ec:3d:65:23:08:12:bd:44:5e:
3c:52:29:20:6d:aa:4d:8d:63:92:76:79:2b:47:11:
da:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A9:42:20:FA:0E:71:33:DA:0A:E3:6D:B2:E0:52:B0:CF:77:0E:AD
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/U6lCIPoOcTPaCuNtsuBSsM93Dq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.100.0/22
46.23.110.0/24
185.81.217.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:fc:dc:a8:4a:a6:17:09:76:ea:9b:ca:83:e5:35:37:fd:d0:
b6:6a:93:d4:c7:ba:8e:0f:6a:77:c5:5c:39:bd:44:40:8f:25:
ce:ea:72:67:c0:38:44:c7:79:6b:58:2a:a9:81:d5:6f:b8:56:
63:37:f8:a4:cc:19:bf:98:f7:2c:59:01:7d:05:29:a2:a7:4d:
4f:3e:ea:fb:a7:a2:c2:79:b1:d2:36:17:3b:81:bb:b6:ef:e6:
bb:e8:21:90:ed:aa:a9:59:a4:84:17:c4:9a:63:73:9d:cc:38:
ff:45:4b:bf:91:fe:6b:50:b9:32:4a:e8:fa:2f:9a:f6:62:cb:
4c:81:5b:2d:06:f2:21:53:25:d7:7b:cc:6e:03:b6:e8:91:29:
9d:d8:1d:7a:be:b7:1e:aa:a6:58:f0:62:13:b7:34:a8:3e:4d:
a5:8b:71:e0:21:30:e0:a0:38:11:94:fa:fb:92:61:79:95:9b:
72:50:e0:a9:b7:3b:bd:24:50:3f:e2:34:43:67:a7:46:28:59:
1d:fd:6b:81:2b:b3:a5:11:02:65:b0:ae:a3:33:48:6a:14:81:
61:eb:f7:98:f7:8a:47:98:ed:41:c5:49:16:f0:2f:36:89:3b:
46:41:b6:dd:f2:87:0f:8a:61:fc:f9:9a:37:24:2a:ee:97:04:
dd:1a:bb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:32 2025 by rpki-client