Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/W12iuiRjm6crG6ZE9xWvmexIPAA.roa
File: W12iuiRjm6crG6ZE9xWvmexIPAA.roa (raw, json)
Hash identifier: e4aGBIn9cN4DFUUkzC9kbTDikQWOt2+oLc2fBmIA6pI=
Subject key identifier: 5B:5D:A2:BA:24:63:9B:A7:2B:1B:A6:44:F7:15:AF:99:EC:48:3C:00
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01823C550D6EEFF764709F9D22117B8D0013
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/W12iuiRjm6crG6ZE9xWvmexIPAA.roa
Signing time: Tue 26 Jul 2022 21:06:23 +0000
ROA not before: Tue 26 Jul 2022 21:06:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398083
IP address blocks: 46.3.80.0/21 maxlen: 22
46.3.216.0/21 maxlen: 22
46.3.224.0/21 maxlen: 22
46.3.120.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3c:55:0d:6e:ef:f7:64:70:9f:9d:22:11:7b:8d:00:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 26 21:06:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b5da2ba24639ba72b1ba644f715af99ec483c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:22:de:e9:e3:2b:37:6a:30:34:d0:38:2d:b8:
71:ed:82:88:bc:8f:7b:c5:fa:55:35:dd:a8:ea:a6:
ab:c2:25:de:8d:e0:23:5d:39:84:d0:a5:39:b3:1c:
02:20:9c:f6:dd:a1:4d:e8:60:09:2c:85:be:72:b7:
fb:47:ba:72:ca:bf:57:53:b9:ce:cb:e0:53:1b:db:
72:64:59:11:48:26:2c:ef:b9:a6:2e:35:a5:14:c4:
45:4f:30:5a:62:67:32:3a:c6:2a:30:63:f9:99:66:
c9:be:75:10:86:b7:6a:66:d2:64:a5:b9:08:58:95:
bf:0b:a3:22:ea:8d:f3:74:26:bb:b0:14:31:13:c0:
24:b0:37:6f:db:5e:20:1c:8f:c4:a3:00:e8:63:4f:
b6:1b:ee:91:2f:3e:43:75:8a:49:7e:1e:89:b3:97:
f1:96:75:86:d9:a3:da:c4:c3:74:87:05:97:3f:55:
37:db:22:17:ca:0e:06:62:2a:0e:10:d0:b9:5b:f1:
5a:7c:7d:ac:16:d0:6a:b8:cb:0a:e2:db:17:b5:11:
58:bb:dc:4b:47:d0:d9:3e:93:13:22:7d:19:f9:62:
ec:37:0b:11:0d:4a:75:48:93:a9:cd:53:e6:b2:c4:
0a:51:ae:8a:65:a3:e2:ea:7a:cd:e1:cc:89:f6:6d:
b5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5D:A2:BA:24:63:9B:A7:2B:1B:A6:44:F7:15:AF:99:EC:48:3C:00
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/W12iuiRjm6crG6ZE9xWvmexIPAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.80.0/21
46.3.120.0/21
46.3.216.0-46.3.231.255
Signature Algorithm: sha256WithRSAEncryption
1f:8f:c7:a8:d1:71:aa:08:18:c7:de:49:56:2a:12:15:d6:86:
13:78:79:be:e3:be:f8:ac:b6:fa:03:b1:d9:3c:1e:4b:d9:d5:
37:19:dd:97:99:79:95:73:c4:34:3d:f1:e8:68:f4:bc:7a:b0:
97:4c:0e:24:7f:58:0a:0e:6a:a3:21:79:50:48:d1:7e:d5:ff:
89:2c:68:c7:a5:19:96:d9:9c:39:db:31:b4:e0:a9:fb:e9:34:
51:58:8a:ff:8b:00:e1:fd:a1:4a:7b:a6:e3:45:33:0b:81:eb:
89:43:be:47:f8:94:5e:12:71:10:90:9d:b6:ac:3d:d4:46:65:
eb:3f:e7:83:ed:c3:c4:f8:0a:9a:70:d1:7f:2f:a4:40:93:47:
09:74:2a:2d:4f:b7:92:19:45:7c:20:db:c5:25:0a:69:b1:99:
5e:e2:1c:24:5a:ca:ed:d0:60:bb:29:d0:de:f4:eb:09:e1:51:
3c:40:1d:94:84:fa:33:cb:99:c6:f5:b3:91:8f:e7:58:c7:d4:
ff:09:bf:55:c7:f0:fc:4d:73:e0:ed:15:9a:28:23:5c:f3:ce:
ff:0b:f5:7a:3b:07:03:c1:f8:9f:4c:af:5f:78:e7:0c:8a:ad:
83:83:48:0a:8c:68:48:ea:ea:44:ed:c5:7a:79:12:70:f1:fc:
24:3d:f3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:16 2025 by rpki-client