Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/AEYODlJxCrYnAaLjJ-uW5ED5gbg.roa
File: AEYODlJxCrYnAaLjJ-uW5ED5gbg.roa (raw, json)
Hash identifier: UFZaeMDLx7dYFyuuQrkWsUP/oW6gM/gU3zJbKQiOBUM=
Subject key identifier: 00:46:0E:0E:52:71:0A:B6:27:01:A2:E3:27:EB:96:E4:40:F9:81:B8
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187E35A0FBDCB131FC54063D5FD51934663
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/AEYODlJxCrYnAaLjJ-uW5ED5gbg.roa
Signing time: Wed 03 May 2023 20:42:22 +0000
ROA not before: Wed 03 May 2023 20:42:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 46.162.1.0/24 maxlen: 24
46.162.28.0/24 maxlen: 24
46.162.26.0/24 maxlen: 24
46.162.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e3:5a:0f:bd:cb:13:1f:c5:40:63:d5:fd:51:93:46:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 3 20:42:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00460e0e52710ab62701a2e327eb96e440f981b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fc:1a:c3:09:12:87:68:9a:cd:30:54:9a:7d:
18:51:86:c5:85:da:b9:c3:61:2e:fc:b8:15:1e:cb:
53:a0:5f:80:2a:bb:93:f9:71:59:9c:9f:c0:cd:99:
71:aa:24:02:3c:c5:1e:98:44:cb:c4:53:6e:3a:a7:
ad:5b:c6:44:07:68:2d:93:29:92:8c:d5:5f:82:07:
8e:cf:f0:18:5e:8c:32:f8:63:db:fc:ae:5b:96:ef:
5a:ba:36:74:8d:c7:c2:fc:f7:9a:5c:fe:5e:b3:14:
3d:30:43:0c:f2:95:18:44:54:f1:36:40:18:75:c8:
81:59:a7:24:09:4f:ed:04:d0:b8:84:04:bb:03:96:
2c:4a:02:2d:2b:0a:d7:d9:43:a5:55:95:5a:ec:29:
85:50:75:29:a5:40:3d:36:a6:7b:24:68:d7:2a:a5:
32:a9:55:8e:17:ce:89:c4:a3:51:44:42:43:b1:a3:
5b:e4:69:8c:bc:67:a9:b4:aa:06:c1:59:18:e3:7d:
62:38:e0:d7:b3:a5:f6:71:9e:4d:bb:aa:ae:86:a3:
c1:49:fb:15:ae:82:b6:52:fa:07:be:ee:85:85:a9:
9d:2b:a6:9b:e9:b3:f9:de:1f:fe:4c:cc:2b:b9:85:
05:fc:2d:fb:e5:c5:c9:6b:de:24:e6:9f:94:96:85:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:46:0E:0E:52:71:0A:B6:27:01:A2:E3:27:EB:96:E4:40:F9:81:B8
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/AEYODlJxCrYnAaLjJ-uW5ED5gbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.1.0/24
46.162.26.0/24
46.162.28.0/24
46.162.30.0/24
Signature Algorithm: sha256WithRSAEncryption
90:dc:d6:78:b0:09:41:e5:a0:41:73:a6:19:f2:9b:b5:08:b9:
37:18:5d:b0:23:18:90:77:bb:c0:bc:15:b4:a6:06:50:b3:bb:
4b:09:14:62:dc:49:5f:d9:71:d9:24:31:a0:e7:8b:a6:6b:f8:
2f:de:45:8d:e8:98:fa:83:a6:03:9f:f3:1c:4a:6f:10:42:30:
f8:06:03:73:9c:79:12:ef:45:0d:77:0d:67:6d:ae:3f:76:f2:
2b:2d:97:fb:5c:dc:01:3f:ac:28:1e:e2:46:39:2a:37:64:87:
27:29:24:85:a2:c6:d4:c3:4f:8a:72:e9:2c:a0:ee:b0:3c:2a:
56:7c:08:51:93:d0:b1:81:04:59:1b:71:7c:13:21:50:a5:53:
aa:8a:b3:a7:aa:3f:6e:00:bc:9f:ad:3f:ae:da:1e:47:b2:af:
d6:6f:83:56:19:c9:cf:6d:11:9d:2e:34:95:e6:c1:01:89:8c:
65:3c:85:d1:1a:85:5a:ca:30:9d:bf:58:fa:ac:6c:c2:16:4f:
49:3d:57:39:99:d1:1a:95:8e:d7:95:6e:7b:ba:0f:8a:04:4c:
d2:a0:bf:2a:7c:b8:de:2b:2d:0a:20:a2:eb:e7:17:42:ce:8e:
0e:a6:ff:5a:ab:eb:7f:22:7e:33:f6:32:41:db:f5:51:86:8f:
c1:5f:19:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:55:36 2025 by rpki-client