Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/XkAz68z0Bv2SykVMtsDjdljx7ZY.roa
File: XkAz68z0Bv2SykVMtsDjdljx7ZY.roa (raw, json)
Hash identifier: h8NTxuNWAauoNdDIv7jYQ27Jft+9JVByGQvOeq86FyE=
Subject key identifier: 5E:40:33:EB:CC:F4:06:FD:92:CA:45:4C:B6:C0:E3:76:58:F1:ED:96
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 03F51DD5
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/XkAz68z0Bv2SykVMtsDjdljx7ZY.roa
Signing time: Thu 16 Jun 2022 12:39:44 +0000
ROA not before: Thu 16 Jun 2022 12:39:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204613
IP address blocks: 46.23.96.0/24 maxlen: 24
46.23.98.0/24 maxlen: 24
46.23.99.0/24 maxlen: 24
46.23.111.0/24 maxlen: 24
46.23.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66395605 (0x3f51dd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jun 16 12:39:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e4033ebccf406fd92ca454cb6c0e37658f1ed96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:9e:bc:25:f2:62:ba:54:4e:ee:74:25:19:
24:5c:fe:71:ce:a4:39:9d:8a:17:da:49:f2:35:6c:
f5:17:e7:bd:72:04:b1:c7:18:91:d8:27:80:32:c0:
5f:21:34:a5:79:fc:15:12:2a:4b:4e:d5:c3:a2:ae:
b2:28:33:31:07:54:e2:95:69:ee:9e:53:64:1a:05:
38:b5:6b:29:38:eb:4b:36:35:f9:f8:32:ef:89:2b:
db:20:8f:c5:e8:8b:4e:e4:1a:b0:b4:95:e7:20:6d:
fa:b8:1a:76:ae:50:0f:16:69:36:0d:93:a9:92:3d:
ed:e7:81:34:1e:6e:18:e6:f2:45:fc:00:f6:fc:87:
f5:6c:05:28:61:6e:29:e1:e8:16:8c:be:58:75:d2:
33:63:63:47:e0:6b:98:f4:74:25:ad:f6:23:17:c0:
a1:9c:cb:41:66:f0:8e:7c:79:90:57:f7:d0:e0:7e:
0f:65:c1:7d:4e:66:01:34:13:77:ee:96:cd:94:c0:
6f:89:55:de:d5:0f:17:92:4d:2e:36:c2:35:d6:df:
0a:47:1d:ec:ca:76:58:88:9e:a7:e0:13:00:c3:49:
2f:a5:e1:58:44:c5:a3:24:b3:65:18:9e:ff:51:d1:
df:13:6c:22:66:dd:1c:cc:d8:88:90:7c:e4:b7:db:
ec:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:40:33:EB:CC:F4:06:FD:92:CA:45:4C:B6:C0:E3:76:58:F1:ED:96
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/XkAz68z0Bv2SykVMtsDjdljx7ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.96.0/24
46.23.98.0/23
46.23.108.0/24
46.23.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a0:a5:e4:95:89:a0:b8:a7:7f:5a:8b:28:47:dc:2e:35:45:
39:3c:6f:c6:af:23:4a:c6:83:7e:87:be:49:3b:28:bd:ef:95:
62:58:ca:2e:be:8a:83:7f:ab:58:96:66:72:1a:54:43:a4:9c:
1d:0d:96:87:30:27:a7:54:a8:a8:20:52:11:d1:63:cf:1d:d3:
0b:61:a0:13:43:94:35:35:2f:1c:d8:06:10:b0:72:9e:68:01:
49:fe:79:5a:33:88:fe:d7:23:9d:fd:e1:ed:f3:a4:32:11:f6:
d6:ea:ab:7c:5a:e7:e5:7b:1e:83:43:04:ec:e1:a8:a6:21:6f:
20:dc:d2:c2:ad:9c:8b:32:dd:02:5e:57:b5:44:25:24:c0:52:
49:48:8d:be:55:11:1c:e1:1f:a5:d6:01:b6:fc:3c:43:8c:7a:
64:18:63:b8:47:aa:03:a2:3b:17:d8:40:07:24:e9:c7:cc:0c:
71:8a:ee:51:33:0b:c1:a4:7c:a9:7a:3b:95:4b:85:38:29:72:
44:20:80:3f:74:66:26:ee:4f:be:57:46:e8:0a:2a:c6:55:42:
3b:c3:3a:da:c2:78:78:bf:4e:23:3e:78:a7:c2:e1:90:a8:7c:
d9:88:03:b5:e8:fa:15:0d:87:08:c2:e3:ab:a8:dc:f4:35:7a:
4a:57:95:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org