Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/LZsHrchauMrAhVOYv9A1W0XU3_I.roa
File: LZsHrchauMrAhVOYv9A1W0XU3_I.roa (raw, json)
Hash identifier: Y31OcWnY49O1HUieC4iVJrh3aAFvkr92m4bs50MEW/4=
Subject key identifier: 2D:9B:07:AD:C8:5A:B8:CA:C0:85:53:98:BF:D0:35:5B:45:D4:DF:F2
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 019411FECFA451928A806F98E3441809964D
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/LZsHrchauMrAhVOYv9A1W0XU3_I.roa
Signing time: Sun 29 Dec 2024 10:38:19 +0000
ROA not before: Sun 29 Dec 2024 10:38:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43395
IP address blocks: 46.209.248.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:11:fe:cf:a4:51:92:8a:80:6f:98:e3:44:18:09:96:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 10:38:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d9b07adc85ab8cac0855398bfd0355b45d4dff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:5b:4d:16:5d:ad:5f:e4:9c:34:ae:54:da:
4b:31:f1:d1:c9:13:f6:f3:04:7a:bd:88:ae:d6:96:
46:06:c8:e4:2b:f4:eb:a7:77:ca:f2:5b:84:5c:40:
a4:b8:de:e4:0a:54:45:73:ec:8c:d6:c5:28:de:3c:
70:c4:7a:03:33:bb:c3:ce:1c:a0:24:ff:42:b3:4b:
a6:c3:88:03:75:ae:a2:e8:f3:6f:d4:bc:4a:82:1d:
64:8f:f3:c4:a0:8b:79:f2:ed:d8:c4:5f:64:7e:39:
7a:6a:1b:d9:c3:8e:2a:d9:54:f7:54:e7:a8:0e:01:
80:5a:e5:fc:83:18:35:53:c1:67:e2:65:1d:cd:71:
e8:8d:3c:94:5e:6f:63:14:de:c3:52:e2:42:69:f7:
7a:22:8a:1d:78:d0:40:b0:06:01:32:1e:14:8e:11:
8e:ed:3c:9b:4c:df:d6:77:bf:d4:fa:31:23:35:e3:
c5:92:d7:90:39:1c:a2:4c:a8:32:95:da:26:0b:df:
bb:b6:07:03:16:1e:37:46:9c:b8:8c:ca:63:79:18:
ba:20:59:1d:30:42:87:79:7f:3e:eb:9b:aa:cb:e8:
75:ff:89:dd:24:61:3d:89:77:c4:78:9d:f1:99:c2:
01:46:da:eb:d8:10:90:89:43:b9:ae:a6:74:fe:0d:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9B:07:AD:C8:5A:B8:CA:C0:85:53:98:BF:D0:35:5B:45:D4:DF:F2
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/LZsHrchauMrAhVOYv9A1W0XU3_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.209.248.0/23
Signature Algorithm: sha256WithRSAEncryption
05:23:2b:6f:d6:02:4b:30:cb:1f:20:87:10:8e:f4:50:6b:5f:
24:dd:90:50:51:b7:6d:33:8d:5f:1b:ca:8f:c5:2b:ca:85:94:
2c:68:a7:fe:7e:3f:81:6e:f8:b1:a4:c1:2f:fd:1c:d2:84:84:
4c:e3:d0:8d:1e:e6:b7:8d:71:77:32:3d:01:ae:3a:4f:d4:43:
07:35:92:37:a5:15:e0:f1:96:91:02:13:dc:2c:0f:9a:a3:c0:
e4:15:61:5c:d7:b4:cb:eb:5c:22:9a:9d:5b:3b:e3:bf:de:7c:
ee:ba:2b:e0:8f:72:d3:16:22:62:85:af:be:3d:ef:f8:ff:9a:
a8:c9:ba:1b:7d:f2:b9:d6:f5:d4:4c:09:ce:fd:eb:e7:65:67:
2a:a1:8d:6d:4c:f1:ef:97:a5:13:b9:03:a1:a9:df:18:05:5f:
12:a7:c0:9e:b3:8a:e8:4e:e3:7f:97:ac:bc:ff:38:fa:67:25:
ea:a8:84:d8:3e:3e:60:94:da:ab:59:cc:48:4f:e4:fa:db:04:
6b:73:18:78:a5:bc:10:8f:96:36:a8:d5:b0:e7:c4:fa:67:f9:
9f:4a:96:ad:47:0c:7e:ad:f1:dc:a0:e4:0c:6c:ad:7b:a6:15:
84:85:61:14:06:94:8e:e4:18:d1:2f:97:75:4b:68:45:a9:01:
08:e0:14:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:27:30 2025 by rpki-client