Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/AhHGm0HMaKmszoDXU-fJwezjQoc.roa
File: AhHGm0HMaKmszoDXU-fJwezjQoc.roa (raw, json)
Hash identifier: +G02ESOhO3S7MB/oGzm+PG7Ih/TwtnbH8i+6ItRRa7Q=
Subject key identifier: 02:11:C6:9B:41:CC:68:A9:AC:CE:80:D7:53:E7:C9:C1:EC:E3:42:87
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 018BD8B9DECF615EF7F565ADA9441D2C05C9
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/AhHGm0HMaKmszoDXU-fJwezjQoc.roa
Signing time: Thu 16 Nov 2023 15:22:21 +0000
ROA not before: Thu 16 Nov 2023 15:22:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1273
IP address blocks: 46.190.137.0/24 maxlen: 24
46.108.0.0/16 maxlen: 24
46.190.254.0/24 maxlen: 24
85.205.0.0/16 maxlen: 24
46.190.128.0/17 maxlen: 24
195.233.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:b9:de:cf:61:5e:f7:f5:65:ad:a9:44:1d:2c:05:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Nov 16 15:22:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0211c69b41cc68a9acce80d753e7c9c1ece34287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:93:0c:e1:e8:9b:23:bc:59:a0:b8:9e:49:79:
61:60:8f:ed:f0:e8:dd:a2:ad:fb:04:81:78:b7:f2:
14:74:19:9e:52:fd:44:a1:b3:26:dd:70:59:3f:3a:
37:21:66:4a:b2:f7:7a:0f:32:43:da:99:ee:0a:57:
b0:a6:b4:00:7c:58:0b:7d:8a:6a:7d:23:82:83:63:
e2:e1:5b:b3:11:f8:14:48:dc:90:fe:bc:68:7b:fb:
ff:0c:23:f9:44:5e:51:b3:6e:ea:65:a3:f0:0a:eb:
a3:d5:d6:2d:3e:6f:c1:83:a1:36:d9:ee:c7:3e:53:
29:22:1e:c3:fe:ed:bd:a4:11:4a:c9:38:9b:cc:d0:
ef:a5:ba:33:a3:66:62:19:3e:ba:da:15:90:0b:a3:
d1:0c:3e:c9:cb:9c:29:04:b9:6e:d3:6c:6a:5c:09:
a5:0a:b8:6a:91:b7:79:dc:db:1a:e2:75:ea:b6:48:
f4:c0:a3:56:0c:26:ae:90:23:c8:36:35:66:15:9d:
e0:62:d5:6e:52:09:3c:0d:89:bb:e1:7f:47:05:59:
f5:74:bf:c1:ff:c9:e3:2e:06:73:c7:06:b8:b0:a9:
8e:50:c5:69:33:35:c2:4d:43:27:cf:a1:2c:cd:de:
38:d4:70:47:f4:47:9c:a4:d3:ee:94:35:c7:90:4a:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:11:C6:9B:41:CC:68:A9:AC:CE:80:D7:53:E7:C9:C1:EC:E3:42:87
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/AhHGm0HMaKmszoDXU-fJwezjQoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.108.0.0/16
46.190.128.0/17
85.205.0.0/16
195.233.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:91:ac:7e:9a:40:43:50:ce:65:5b:ac:6a:98:37:01:39:35:
61:28:37:75:08:61:9e:82:30:b2:e7:60:b1:20:16:50:b7:37:
59:32:e8:ac:1c:d5:58:ca:2c:cd:5c:62:d5:38:a1:7e:3a:22:
6a:e7:71:26:b1:7c:43:19:b7:d2:1d:1c:4b:4f:64:e9:1f:05:
3c:66:10:0c:04:c8:92:6d:71:71:cf:c0:ed:25:6b:df:b8:c6:
d7:98:e6:82:b4:a6:a8:19:f1:d6:d5:24:cf:14:05:a7:8c:8d:
86:57:14:ff:41:e7:3c:0a:95:58:45:8a:10:0a:b1:82:fd:7d:
b1:ca:2a:a0:d9:1b:48:98:61:1d:83:71:3c:48:5f:22:2e:4f:
fc:93:88:65:0e:34:2c:21:54:60:30:07:34:30:9b:53:fa:43:
95:b6:70:5a:d9:95:60:b5:e3:d9:bc:0b:85:6f:6c:b6:33:ac:
47:3c:6a:3e:2a:b4:6b:17:87:ef:4b:45:1e:90:28:4b:ee:a3:
35:f9:dd:b6:d2:56:e6:b9:af:99:ac:5c:97:30:4b:25:ff:f8:
b0:f2:6f:18:6c:cf:1c:5f:1b:2e:64:ca:2b:61:37:ff:54:f9:
31:2b:cb:71:91:14:dc:0e:59:00:30:f4:d7:ba:ee:8f:1b:f4:
d0:ac:f9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:29 2025 by rpki-client