Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/KJ_5cvOfXT0x7GoW3zBoLjV9eSo.roa
File: KJ_5cvOfXT0x7GoW3zBoLjV9eSo.roa (raw, json)
Hash identifier: QOx6KtnfcsKWuib2J/tcw6R1rjvB762pLM2FWMPEjI4=
Subject key identifier: 28:9F:F9:72:F3:9F:5D:3D:31:EC:6A:16:DF:30:68:2E:35:7D:79:2A
Certificate issuer: /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial: 4492B22F
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/KJ_5cvOfXT0x7GoW3zBoLjV9eSo.roa
Signing time: Sat 01 Jan 2022 15:02:23 +0000
ROA not before: Sat 01 Jan 2022 15:02:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51483
IP address blocks: 46.254.136.0/21 maxlen: 21
128.0.192.0/21 maxlen: 21
185.74.224.0/22 maxlen: 22
95.142.64.0/20 maxlen: 20
46.235.112.0/21 maxlen: 21
46.235.119.0/24 maxlen: 24
2a00:1100::/32 maxlen: 32
2a00:1100::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150464559 (0x4492b22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Validity
Not Before: Jan 1 15:02:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=289ff972f39f5d3d31ec6a16df30682e357d792a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:84:7a:0c:99:3f:8b:c0:00:74:08:e1:8d:48:
29:f9:7d:35:fc:96:1c:c0:93:33:8d:38:fd:b6:9b:
1c:f2:9e:74:f3:2f:da:84:71:8e:cb:7b:e2:b2:2e:
b2:98:d8:23:7d:73:e5:ed:2d:5d:9f:cc:09:65:96:
ae:2c:7b:a5:a7:d6:dc:87:38:08:7a:d5:10:93:61:
ff:0a:30:86:39:5f:2e:5d:24:f3:5a:34:11:83:37:
70:71:d4:56:22:9d:04:e5:bf:87:c0:8d:b3:b9:86:
3a:87:cc:cd:73:8e:18:0a:62:46:64:e5:a6:fc:a9:
d7:c9:38:32:8d:c6:1b:13:72:74:bc:d9:e1:e8:69:
8a:ec:c5:52:5c:d6:e1:41:7c:b5:91:6d:3f:73:b6:
01:05:f9:d2:55:93:96:69:00:32:79:fc:9e:2e:c8:
53:cc:ac:57:5e:98:ff:b5:fb:ca:a9:98:ac:86:2e:
9e:f6:ce:0a:db:d1:52:ef:00:7f:f4:f4:aa:9b:47:
76:c3:74:cb:02:6d:3e:22:60:04:cc:5c:c8:21:f4:
75:e4:6d:d8:f6:a6:55:39:dd:ec:f4:6f:f3:29:da:
bd:d3:e7:a9:b2:b0:42:07:78:d2:4c:11:3f:86:31:
3f:58:ca:db:9f:87:c5:39:29:7c:c7:da:a6:2c:dc:
a8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9F:F9:72:F3:9F:5D:3D:31:EC:6A:16:DF:30:68:2E:35:7D:79:2A
X509v3 Authority Key Identifier:
keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/KJ_5cvOfXT0x7GoW3zBoLjV9eSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.112.0/21
46.254.136.0/21
95.142.64.0/20
128.0.192.0/21
185.74.224.0/22
IPv6:
2a00:1100::/29
Signature Algorithm: sha256WithRSAEncryption
9c:28:ef:08:1c:5f:8f:ac:c6:22:05:4f:20:ba:10:74:ac:67:
82:c9:b3:dc:8b:b4:4a:7c:9e:54:56:fb:ce:03:55:88:fd:12:
5a:45:80:3e:4d:74:e3:20:f3:75:1e:29:b2:e2:f0:c3:98:20:
86:98:6c:4c:40:83:a3:05:de:32:aa:b4:0c:c2:00:11:ea:9c:
1f:05:01:22:43:8c:ed:26:92:26:fe:6e:72:7b:77:c1:dc:5f:
90:55:c7:25:b0:02:77:6a:b5:d4:6b:da:6f:72:10:77:b5:7f:
a0:e5:45:00:47:c4:c1:b8:5d:e9:4c:04:e1:a5:95:87:0e:ef:
91:3a:f0:02:d0:6e:46:9e:a7:db:13:36:68:8c:9a:95:0c:a2:
ed:cc:4b:04:e4:07:03:f6:70:4e:d7:be:0e:4d:21:74:48:f9:
59:c8:b8:1a:e7:a6:7f:da:66:70:33:86:74:8b:a1:34:ab:32:
94:4a:00:f8:00:42:c5:85:f0:a2:2a:07:65:f1:57:b2:66:f7:
7b:ff:73:d3:df:7e:a5:f8:d9:71:d3:11:7b:3b:b1:ea:45:af:
04:91:c8:73:10:68:40:4d:1b:fb:84:b2:c9:ec:c8:a1:f1:88:
bc:29:73:20:a9:64:98:89:55:0a:21:6d:80:85:de:c7:69:61:
30:d4:21:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:17:51 2025 by rpki-client