Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/8-svSTHVPCwBSS5wwhwoRXgJVo8.roa
File: 8-svSTHVPCwBSS5wwhwoRXgJVo8.roa (raw, json)
Hash identifier: pCNbDu4tFj5rfHxRki7oUtl+NEsc0ndPEZi+i1KLXQ4=
Subject key identifier: F3:EB:2F:49:31:D5:3C:2C:01:49:2E:70:C2:1C:28:45:78:09:56:8F
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 07F01E1E
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/8-svSTHVPCwBSS5wwhwoRXgJVo8.roa
Signing time: Thu 31 Mar 2022 12:57:34 +0000
ROA not before: Thu 31 Mar 2022 12:57:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212523
IP address blocks: 46.22.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133176862 (0x7f01e1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Mar 31 12:57:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3eb2f4931d53c2c01492e70c21c28457809568f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:21:a6:00:63:d6:dc:6f:8b:78:60:89:42:
4a:6c:b4:24:b5:d7:99:40:0d:6d:7e:e1:b0:b0:b1:
7b:55:2d:a6:39:b6:0d:91:5b:dd:cd:76:68:09:3c:
82:61:43:e5:24:41:fb:2d:43:57:9e:66:f0:db:2b:
eb:d0:30:b6:6b:d7:59:8b:82:54:82:ef:d8:2b:f1:
3a:7c:c9:7a:f0:43:eb:68:19:98:b0:04:e7:60:cd:
a8:e2:dd:d3:a0:73:7e:a4:c4:a4:fe:c7:a7:ed:24:
da:d9:52:19:10:7d:66:f5:80:1e:3a:7e:e2:a9:da:
30:26:0c:72:26:f8:90:42:4d:f5:1b:bd:04:38:f3:
bf:09:cd:e2:c1:ae:9d:f6:f2:8f:31:46:86:e5:31:
d7:5f:6f:aa:65:09:cb:38:05:cb:3a:86:7b:1d:2b:
9b:3c:6f:63:ed:65:f7:4b:89:b8:78:d3:8b:3d:d3:
c8:7c:bc:4f:40:0a:48:e1:50:a0:cd:33:01:35:b9:
3f:d3:58:ec:df:20:91:0a:e4:86:27:63:f0:10:e6:
6f:eb:8d:64:09:ff:44:ea:d5:ef:76:24:dd:27:cc:
a4:a4:9a:91:16:a9:82:f5:fd:5e:fc:95:9c:fe:58:
d0:56:77:c9:ae:9c:3b:8d:5a:c7:f1:8a:7f:9a:f2:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EB:2F:49:31:D5:3C:2C:01:49:2E:70:C2:1C:28:45:78:09:56:8F
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/8-svSTHVPCwBSS5wwhwoRXgJVo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.162.0/24
Signature Algorithm: sha256WithRSAEncryption
36:0d:56:ea:21:80:71:a3:9c:2e:09:e0:59:04:74:2d:0f:02:
3d:ea:8a:fe:79:94:e1:59:5c:f4:ab:b0:36:6f:6a:5e:8f:fb:
91:27:48:cb:e7:f9:7d:1f:ec:ae:fe:54:fd:18:af:6b:69:0f:
3d:45:97:4c:4b:a3:7a:73:ca:5f:17:d3:c3:6f:a2:de:9f:65:
fc:e2:a1:de:a0:c4:f2:c2:52:a5:e7:8b:36:2b:99:a4:b2:a2:
59:f6:22:d8:39:d2:95:aa:a0:b1:0d:0f:a4:15:c1:d8:ac:67:
c7:4b:ea:7d:1a:1d:65:5f:44:88:ad:d5:02:fe:60:f9:04:5a:
8d:f3:68:90:98:38:2b:75:34:90:69:b8:8a:d0:10:6c:26:3e:
36:5c:6d:47:63:cc:84:75:71:f9:8a:38:a3:5c:94:94:fd:6b:
dd:af:5b:ca:2f:d2:be:e5:21:34:57:61:e5:b8:d7:f0:6a:14:
ea:9c:f6:9e:66:eb:9f:ac:36:22:49:54:6a:e2:1a:15:af:bb:
db:2a:4a:6a:1b:75:f0:ef:5c:8b:b3:ee:5e:b7:33:08:83:2a:
66:05:1a:4d:82:51:84:f9:46:d1:f6:07:f0:b4:50:0e:55:11:
d9:6e:13:b3:36:bf:e6:79:82:90:99:9d:b3:53:68:02:e4:4a:
69:57:89:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:59:45 2025 by rpki-client