Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/9IoxA9oCCs44k1_Fx6d55HCu0BA.roa
File: 9IoxA9oCCs44k1_Fx6d55HCu0BA.roa (raw, json)
Hash identifier: JUUp3WG6VP6uzEXdqn//DinxJObyXEFoH4VfTscgJQc=
Subject key identifier: F4:8A:31:03:DA:02:0A:CE:38:93:5F:C5:C7:A7:79:E4:70:AE:D0:10
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 10583204
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/9IoxA9oCCs44k1_Fx6d55HCu0BA.roa
Signing time: Sat 01 Jan 2022 08:03:42 +0000
ROA not before: Sat 01 Jan 2022 08:03:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1273
IP address blocks: 46.190.137.0/24 maxlen: 24
46.190.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274215428 (0x10583204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Jan 1 08:03:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f48a3103da020ace38935fc5c7a779e470aed010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:4a:ab:9c:21:3b:45:39:91:ae:1e:f7:d9:
39:c2:ba:74:7b:57:9e:66:86:77:6a:ce:b0:a7:18:
07:32:c6:4a:d6:d0:06:99:b2:20:03:29:73:8d:6a:
2e:25:97:51:0b:9e:95:ff:85:6f:d9:98:d6:1f:2e:
e1:47:0d:f9:6e:c6:ad:9b:9a:fb:15:81:1f:19:13:
39:7f:8a:43:13:52:1d:f1:20:28:f0:06:59:f8:95:
c4:d2:9d:12:d6:26:80:24:5e:a6:aa:f1:18:23:e4:
35:5a:18:63:a5:24:8c:da:50:36:27:f3:8d:0f:00:
20:de:df:84:dd:e0:ac:88:82:7f:96:30:95:97:54:
5d:92:f0:0b:20:b9:98:27:25:c0:aa:69:d2:dd:5e:
16:93:49:6a:af:d9:a4:3e:11:fe:af:8c:52:df:a2:
84:cc:77:4d:ab:5a:6f:2e:fd:02:01:79:5e:b1:47:
9e:c3:c6:1f:11:c6:b4:06:11:46:90:3f:1d:f2:4d:
67:9d:69:2f:0b:52:d5:aa:e5:ed:e4:9b:3a:fd:9e:
e1:df:a5:27:33:c7:c7:2e:18:36:e6:db:a7:e3:2f:
55:5c:9e:79:ba:b5:26:10:ec:78:8b:2e:d6:76:d5:
64:5b:a3:a0:da:98:6d:bf:93:f3:27:1f:2a:ae:9e:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8A:31:03:DA:02:0A:CE:38:93:5F:C5:C7:A7:79:E4:70:AE:D0:10
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/9IoxA9oCCs44k1_Fx6d55HCu0BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.190.137.0/24
46.190.254.0/24
Signature Algorithm: sha256WithRSAEncryption
42:de:84:3f:97:0b:d7:f2:0c:42:e3:f8:1e:b9:8c:6e:86:78:
5a:64:47:70:c9:38:8a:19:bd:c1:13:61:dd:4e:32:3a:47:4c:
3b:fb:76:ca:d4:a6:1c:69:60:7c:aa:5f:3f:0e:8b:98:1c:f1:
1a:60:61:d4:38:25:1c:1c:75:b0:93:5d:ba:06:01:12:c6:33:
57:ba:75:5c:80:a5:33:02:40:e3:7c:9a:73:c8:ff:f1:39:96:
32:a8:c3:3d:c6:71:40:c4:ce:70:97:f6:ca:18:7f:4d:a6:97:
fa:f4:83:63:ab:a4:01:4d:2c:ac:13:33:42:32:9a:45:ca:82:
04:a1:be:96:f5:b3:6a:77:ae:27:a7:a2:53:d0:97:a3:db:d8:
ed:ac:ca:f1:5a:81:3f:24:5f:a9:22:02:00:1f:7a:2e:35:e0:
99:33:ac:08:b3:16:80:8c:d1:d6:40:61:c3:2c:8a:c1:c0:c6:
07:f5:5c:0b:6f:c9:c0:bc:55:a0:2c:a3:e7:8e:9e:ee:2e:b5:
ed:82:9e:c3:63:73:e8:20:eb:02:1b:09:59:ec:c7:39:f6:65:
c3:2f:cf:c1:90:b1:c4:7b:81:fa:31:c0:54:70:8a:84:f3:0a:
2d:af:a0:51:6b:ab:67:2c:1c:0e:ae:9b:39:f6:dd:51:a2:0e:
6b:f1:aa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:16:04 2025 by rpki-client