Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/sh3U1tIeqZGeqC5H4Hd5ywoTXT0.roa
File: sh3U1tIeqZGeqC5H4Hd5ywoTXT0.roa (raw, json)
Hash identifier: /wYQhJ0jM93wUEmtw/+Oo2W9y3KPVwokQYd0RMhi03I=
Subject key identifier: B2:1D:D4:D6:D2:1E:A9:91:9E:A8:2E:47:E0:77:79:CB:0A:13:5D:3D
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01852930FEE813238DB0843F36D29BE59C5D
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/sh3U1tIeqZGeqC5H4Hd5ywoTXT0.roa
Signing time: Mon 19 Dec 2022 07:02:34 +0000
ROA not before: Mon 19 Dec 2022 07:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49747
IP address blocks: 46.23.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:30:fe:e8:13:23:8d:b0:84:3f:36:d2:9b:e5:9c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Dec 19 07:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b21dd4d6d21ea9919ea82e47e07779cb0a135d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:68:e0:a1:70:4d:92:95:26:2f:59:7f:46:64:
9d:34:83:99:42:ac:fa:2d:2f:d8:f9:bb:c2:41:84:
0c:22:f7:62:66:98:d1:01:10:5a:3a:c0:5b:48:b0:
e2:d6:5d:f3:92:88:71:18:2b:46:b4:c7:db:ee:dd:
12:7a:4c:5a:b0:69:1e:19:f0:0c:04:51:b0:b3:e9:
64:ec:b4:23:dd:36:45:b7:28:51:5a:3c:0e:6f:75:
9d:9f:ed:7a:0d:b1:91:93:d5:f7:52:b3:29:3a:ea:
c0:f7:52:ff:ce:f0:7d:e3:70:46:d6:f6:bb:22:0d:
14:50:26:08:49:d5:cb:2a:44:d9:30:26:5f:4a:26:
7b:a2:38:79:52:8a:57:16:e6:18:71:c5:4a:cd:df:
31:96:57:72:3f:c1:f2:be:03:6c:e7:6d:fe:b2:2e:
83:18:81:48:57:92:5d:e2:82:ec:e6:a7:5d:50:e6:
af:49:38:2d:e0:da:f5:bd:2d:33:bd:af:bb:b6:09:
8f:30:e8:3a:24:33:8d:2d:4b:c7:b5:27:17:50:b9:
41:31:0b:82:53:07:5e:28:4a:3c:d1:c6:04:89:6a:
68:76:29:d7:56:5d:2d:ac:02:88:94:1b:e6:fb:e4:
65:9c:99:e6:6b:e2:15:84:88:58:c4:a7:24:fe:03:
e8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1D:D4:D6:D2:1E:A9:91:9E:A8:2E:47:E0:77:79:CB:0A:13:5D:3D
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/sh3U1tIeqZGeqC5H4Hd5ywoTXT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.111.0/24
Signature Algorithm: sha256WithRSAEncryption
46:65:4b:54:7f:4d:45:8a:71:43:ce:99:d8:82:78:4a:db:b9:
b2:73:d9:81:c7:c9:9d:96:c0:77:e4:b3:80:3c:4a:b9:fe:84:
8c:61:f3:a1:82:65:aa:4a:5c:76:00:d3:3a:26:97:12:94:ea:
28:8b:7f:c8:76:6a:a5:7f:c3:5d:9d:e1:33:15:31:ca:c2:e5:
10:5a:c0:18:89:38:2c:b2:11:c5:22:e8:8e:99:98:dd:6b:25:
e9:6a:23:11:37:98:f2:a0:a7:6f:df:04:59:31:5c:a3:76:9d:
c3:e7:63:2f:2c:c2:2f:dd:52:35:e1:75:85:9e:c8:cc:72:fe:
b2:b3:5c:7b:3d:05:10:19:d4:6e:3a:9b:33:96:99:07:50:b3:
78:2c:00:8e:1d:9d:b8:80:60:80:86:1a:73:df:7c:15:63:c2:
10:8c:26:98:b8:a6:34:e6:d5:82:eb:8f:36:d3:ac:b5:ed:01:
1f:6d:d7:8b:6e:ad:7b:c7:ff:7e:4a:8b:b3:dd:79:28:89:eb:
75:fa:2b:f2:4b:1d:6d:f9:59:7b:9d:4f:bd:ef:43:47:6d:c2:
03:f0:4b:2a:40:a1:6a:4f:e0:a9:8e:cf:c0:c7:f5:ae:57:35:
67:5c:44:e0:ab:89:a4:92:86:26:3b:53:b1:58:86:bf:d6:4b:
d9:a4:c5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-fra.rpki-client.org