Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/h4_YE8GCHtThqlGOSsLbuXCaKMs.roa
File: h4_YE8GCHtThqlGOSsLbuXCaKMs.roa (raw, json)
Hash identifier: Ke8dEih37ZA64u4PaimLvZe0/7w5NpuwR/Yr0PSF4B4=
Subject key identifier: 87:8F:D8:13:C1:82:1E:D4:E1:AA:51:8E:4A:C2:DB:B9:70:9A:28:CB
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 0185728C7AF057F3BF0485522178BF2EC6EF
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/h4_YE8GCHtThqlGOSsLbuXCaKMs.roa
Signing time: Mon 02 Jan 2023 12:54:47 +0000
ROA not before: Mon 02 Jan 2023 12:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208892
IP address blocks: 46.22.171.0/24 maxlen: 24
80.82.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:7a:f0:57:f3:bf:04:85:52:21:78:bf:2e:c6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Jan 2 12:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=878fd813c1821ed4e1aa518e4ac2dbb9709a28cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:40:ac:6d:c9:d7:66:c8:04:4f:af:46:98:
f5:7d:a0:54:22:bc:ef:8b:a0:33:c2:70:64:5d:ec:
0e:cc:9f:4e:f6:62:db:2f:1e:1b:ba:fa:83:38:54:
56:3f:3c:cb:19:20:25:7a:c2:04:63:d7:b2:35:65:
4a:70:6b:dd:49:81:a0:25:a3:ae:2c:53:fd:8b:bf:
a2:ce:21:a2:5b:a4:fc:03:b8:90:85:b0:f2:83:58:
60:06:f5:c3:11:8a:14:0f:cb:b2:de:2c:0c:91:66:
d8:07:06:5c:df:14:2a:a0:68:64:65:eb:e9:ba:42:
45:98:81:e3:ad:4c:44:48:c7:a1:a9:ca:28:d9:90:
ca:a1:b4:ae:cb:a8:7e:c2:2d:a1:14:52:e9:44:30:
42:e9:0c:29:d7:55:e0:1c:86:98:45:97:5d:29:ad:
2d:88:66:61:4d:98:9e:07:1b:c4:2f:d0:20:48:0b:
f1:49:d7:cb:fd:e8:97:45:5b:cd:fd:0e:ad:2a:08:
88:f8:4a:22:dc:fd:a5:68:92:af:69:dc:f5:8f:ad:
72:be:b4:c0:a5:72:48:79:67:05:78:9d:a7:03:87:
88:cd:a6:4f:b9:6d:e2:0c:90:25:d3:0f:f8:a8:11:
42:a0:0e:3b:11:d5:db:88:e3:f8:73:ab:81:bb:b1:
db:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8F:D8:13:C1:82:1E:D4:E1:AA:51:8E:4A:C2:DB:B9:70:9A:28:CB
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/h4_YE8GCHtThqlGOSsLbuXCaKMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.171.0/24
80.82.23.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a7:fc:e2:11:4d:79:8c:d1:bd:64:31:7d:2c:19:88:84:fe:
7f:1b:c9:56:69:b7:97:0f:99:5b:a4:8e:d9:85:71:97:b1:ee:
9c:0b:fb:8a:25:58:73:57:10:fd:1b:50:74:57:bc:ff:07:1a:
97:99:0f:9d:db:b3:9f:b0:e9:57:40:f7:de:c0:e8:55:c9:3e:
8c:d1:c8:37:5a:d5:b7:af:81:65:43:1b:46:48:5d:cd:d9:d3:
05:59:6c:dc:eb:08:7b:f4:fd:44:f1:44:1b:cd:cb:11:ca:9d:
b0:7c:3e:74:8f:f7:94:73:97:ed:bb:45:5a:66:30:f8:9a:84:
3f:b5:35:b6:d6:7d:12:12:9e:76:4a:f4:14:e6:d4:ef:57:1c:
93:b4:42:45:99:10:11:51:d5:c0:8a:cc:60:79:d6:24:3b:e7:
45:87:27:83:a0:af:92:9f:8a:47:fd:a2:0d:f8:a3:75:9c:f4:
2d:2d:b2:71:27:13:74:d5:6f:24:b1:e1:59:21:b1:47:e6:3c:
a1:62:33:3c:d7:f0:d7:53:3e:45:59:c1:e0:e4:28:72:3b:0a:
27:ec:0e:95:88:36:94:8c:f5:e4:76:b0:87:b1:5b:88:5b:17:
39:e2:7a:0b:7a:e9:5c:30:a2:cb:4f:8c:66:e5:46:1c:0a:5d:
a8:c4:fb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:03:22 2025 by rpki-client