Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/bcZqy5uPDzvoqglpir3vDA5t54g.roa
File: bcZqy5uPDzvoqglpir3vDA5t54g.roa (raw, json)
Hash identifier: /rWn/imqNJgelO/MaqmsYDO41HneJBJikQJR3hT4gE0=
Subject key identifier: 6D:C6:6A:CB:9B:8F:0F:3B:E8:AA:09:69:8A:BD:EF:0C:0E:6D:E7:88
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 026570DF
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/bcZqy5uPDzvoqglpir3vDA5t54g.roa
Signing time: Thu 27 Jan 2022 10:30:46 +0000
ROA not before: Thu 27 Jan 2022 10:30:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 46.23.109.0/24 maxlen: 24
85.158.146.0/24 maxlen: 24
109.205.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40202463 (0x26570df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 27 10:30:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6dc66acb9b8f0f3be8aa09698abdef0c0e6de788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:37:68:c4:2d:fa:ec:7c:99:c2:18:e6:84:
0a:01:77:78:f5:d0:e8:fb:1b:38:fb:25:95:1a:5f:
45:86:71:96:31:8d:af:42:b9:f2:3f:58:eb:8c:f7:
c4:2f:c5:22:60:6b:a9:c4:dd:cb:c8:c5:75:07:19:
0b:79:2c:1c:5b:76:3c:f2:cf:70:96:f5:95:3e:a4:
38:33:1e:2a:6c:a4:98:1b:24:24:2b:08:69:49:b6:
52:9d:6c:e4:7b:46:b4:76:4c:4c:da:22:d0:f5:40:
2c:40:3d:21:68:f0:3c:3e:95:37:6d:6c:4b:2f:ad:
c6:8a:ca:4d:d1:3b:b7:23:a9:b4:89:a5:06:a5:1a:
33:3e:a2:48:ef:44:58:67:1e:0c:89:6a:97:9d:29:
bc:56:75:25:74:c6:46:d1:ef:69:94:06:3b:9e:2c:
52:6c:28:98:6c:cd:ff:02:0e:81:82:c1:b1:6f:01:
ea:3a:c0:dc:07:8b:ca:6b:de:82:8d:45:7d:c4:2f:
e6:72:de:fe:6e:4f:27:ab:20:c4:8c:6d:96:02:da:
65:23:62:ea:43:42:86:89:0d:ad:3f:58:18:de:8e:
c4:df:9b:78:7d:ac:d9:b2:a2:53:f1:5f:00:2f:b3:
61:0e:72:3b:d7:e9:08:5b:db:a4:2f:dd:fb:91:3d:
9f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C6:6A:CB:9B:8F:0F:3B:E8:AA:09:69:8A:BD:EF:0C:0E:6D:E7:88
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/bcZqy5uPDzvoqglpir3vDA5t54g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.109.0/24
85.158.146.0/24
109.205.214.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c1:7a:a3:69:55:99:d8:0c:fa:f0:89:e6:a7:7f:9a:99:b7:
c6:84:f2:1d:82:0d:2c:4f:b7:93:f3:55:86:a0:36:9a:e5:a8:
8f:4c:4e:53:d7:20:02:d5:be:b0:b4:70:51:cb:3a:d8:7c:b2:
42:b7:0f:e3:a5:4f:35:30:f3:53:22:bb:b3:cd:d2:12:e6:8e:
58:8a:af:05:63:ea:a7:08:79:ba:f6:8b:99:ba:f7:d5:26:a8:
fe:ed:2f:9d:2f:17:9d:f4:4d:8d:57:c8:f1:b9:61:9f:fc:bb:
f1:b5:1c:8a:58:33:da:33:4c:c4:bb:98:52:43:fb:b6:e7:74:
6c:8f:81:1e:2b:46:8a:e6:81:9b:af:36:97:eb:1a:d0:d5:d8:
6b:61:ce:f5:70:e6:ff:42:7b:f4:60:89:c0:74:d3:5e:bd:9c:
59:cb:9c:0a:ab:a6:b4:19:68:6f:be:b0:b9:33:41:49:6c:f0:
b1:47:ee:ab:54:e8:b7:f9:2a:aa:48:08:81:d4:32:14:ee:3c:
11:04:db:ea:c0:12:88:e2:58:29:ea:72:ab:3f:97:f1:45:7c:
2a:72:ec:f5:21:56:25:62:77:d1:d7:23:ec:01:d3:8d:9c:4b:
b8:d8:33:91:80:99:15:cc:92:9c:04:13:1c:4d:b6:53:43:ee:
7b:0e:a7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:17 2025 by rpki-client