Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/RAfO95SgpCnUHTGQpZyoTur1Xmk.roa
File: RAfO95SgpCnUHTGQpZyoTur1Xmk.roa (raw, json)
Hash identifier: QYEMCYDSguGRvuimTPcIW0gXxeJSwYEW0V+LA1UaS14=
Subject key identifier: 44:07:CE:F7:94:A0:A4:29:D4:1D:31:90:A5:9C:A8:4E:EA:F5:5E:69
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01850767FB4BD22F893CA220AC48A4EEA48B
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/RAfO95SgpCnUHTGQpZyoTur1Xmk.roa
Signing time: Mon 12 Dec 2022 17:35:33 +0000
ROA not before: Mon 12 Dec 2022 17:35:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204197
IP address blocks: 46.23.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:67:fb:4b:d2:2f:89:3c:a2:20:ac:48:a4:ee:a4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Dec 12 17:35:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4407cef794a0a429d41d3190a59ca84eeaf55e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:c2:08:7c:99:bb:66:c3:80:18:9b:b3:a9:
79:71:a8:4d:04:9d:42:07:6a:55:0c:2b:63:df:ce:
2c:ad:41:c5:f6:5a:09:c2:fc:ce:bb:cf:6e:51:e2:
f6:21:d7:c3:fc:f6:1a:9f:29:67:33:e1:0e:4c:6b:
4b:82:57:3d:3d:ee:e0:55:d3:ad:82:5b:ae:e8:13:
a2:13:1e:f0:e3:7b:11:bb:a1:03:ae:7e:a6:34:62:
46:87:a5:be:1d:8e:e2:bf:a7:7f:ef:93:9c:83:d1:
de:05:d9:5f:f4:13:63:91:54:ee:30:9d:22:a5:c4:
17:d8:67:54:e3:35:0d:06:f5:ef:11:12:51:4e:37:
9d:72:ff:15:f2:83:b1:32:50:bb:9c:ae:2a:43:7f:
a4:0c:13:9b:48:4d:d5:2b:95:a2:7c:41:9a:00:f0:
6f:53:d2:e4:21:1d:c6:23:fc:22:44:bb:f3:5b:9a:
69:71:01:39:4e:44:33:27:58:7c:54:5d:8d:8b:95:
c3:a7:b8:da:a0:79:80:6b:d8:43:70:ce:08:95:57:
38:a2:7b:ce:64:70:bf:d6:cc:f5:c9:fd:03:71:cc:
5c:a7:5d:6b:60:04:94:7c:f8:8b:36:b7:44:72:2c:
64:2d:9a:3d:5f:2f:2e:b6:16:40:fe:1d:98:77:31:
9f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:07:CE:F7:94:A0:A4:29:D4:1D:31:90:A5:9C:A8:4E:EA:F5:5E:69
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/RAfO95SgpCnUHTGQpZyoTur1Xmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.100.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:58:b6:b5:22:79:20:f6:55:33:93:5c:f3:74:d4:8f:80:2a:
ab:7f:e8:03:0e:35:1d:08:e8:59:45:f9:bc:c8:a9:90:5a:27:
12:de:99:f9:8b:4f:d3:e3:55:55:ca:84:26:ee:8f:05:da:e8:
7e:b2:4f:2b:13:73:6b:26:18:85:37:42:d7:9c:4f:82:00:4e:
94:16:71:77:cf:c6:91:e4:c0:4a:af:cc:85:35:f4:54:3e:ed:
fa:d9:f0:e3:50:a9:46:b5:f9:e8:fe:91:b4:f0:90:45:a7:74:
0c:d8:7f:00:98:09:33:9b:7a:40:1e:8d:0d:32:f8:3d:7b:a8:
32:b0:ef:08:89:be:3b:cf:2f:15:77:90:aa:95:3a:f7:c3:22:
70:18:03:8a:fc:5a:07:d8:08:a1:b4:b3:fa:50:31:76:bf:fa:
5a:57:ef:90:78:f3:f9:ea:fd:da:48:cf:a9:bf:cf:51:58:1b:
69:6f:1c:b9:65:b2:26:5c:50:e5:4c:58:8d:67:16:79:55:f9:
ef:5c:b0:7e:7b:66:60:49:48:c2:00:ad:d1:46:b4:94:9b:e0:
10:a2:05:62:73:ee:b7:da:8f:09:91:a0:58:b6:99:dd:f2:b0:
7a:d7:91:66:65:5f:ef:1d:cf:28:6f:8b:d4:fa:6a:cf:c4:92:
24:96:cc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:30 2023 by rpki-client on console.sobornost.net