Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/XWAHsYbylWlf-ffMw380W9njO40.roa
File: XWAHsYbylWlf-ffMw380W9njO40.roa (raw, json)
Hash identifier: 5Bv5aGCfplH4Sn/Qf5I82eNQCWWph+e790sp5pGuJTM=
Subject key identifier: 5D:60:07:B1:86:F2:95:69:5F:F9:F7:CC:C3:7F:34:5B:D9:E3:3B:8D
Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Certificate serial: 018BB8DD8F3151B16BE305A59C03CE45BAA1
Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/XWAHsYbylWlf-ffMw380W9njO40.roa
Signing time: Fri 10 Nov 2023 10:53:29 +0000
ROA not before: Fri 10 Nov 2023 10:53:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204957
IP address blocks: 46.149.140.0/24 maxlen: 24
46.149.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:dd:8f:31:51:b1:6b:e3:05:a5:9c:03:ce:45:ba:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Validity
Not Before: Nov 10 10:53:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d6007b186f295695ff9f7ccc37f345bd9e33b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:20:b0:2c:d3:b7:00:ba:a0:00:a0:6e:0a:
fb:77:50:ac:10:78:c7:2b:4a:8a:a9:cf:e3:f6:b0:
89:40:50:6a:3b:e1:3d:02:0b:9d:84:a0:dd:38:88:
f4:a2:26:d5:32:e6:05:5a:16:93:b7:47:ec:06:88:
6a:df:8b:19:dd:45:fb:d2:a7:b3:3f:d4:e7:94:c5:
38:fd:4b:00:92:cd:73:a3:97:89:3f:a0:4d:88:22:
9d:c8:e5:bc:8d:ef:8b:81:4d:1f:47:e7:11:76:0a:
34:e0:d8:9f:e1:0a:44:9c:f6:5d:dd:62:a5:4e:37:
63:68:e1:ea:71:86:d9:d6:5d:57:09:66:fa:a3:91:
62:2a:45:6f:1b:43:da:8e:8b:61:70:32:79:c5:f3:
a3:73:d1:e7:0b:8c:d2:f3:d7:8e:1d:29:8f:be:11:
a5:5a:11:b8:d2:ce:b8:d9:d8:5e:d7:45:03:ca:be:
9e:6b:0e:ec:a3:56:1a:d5:6e:03:89:40:4b:26:8a:
f2:d0:14:7b:d4:be:2d:ab:6c:94:32:4b:e8:90:29:
e1:3c:49:d1:ad:e1:0d:c2:b2:af:9f:8c:94:40:91:
f6:08:2f:5c:ea:ab:3b:41:90:6a:c9:65:7f:7b:34:
99:a1:e8:25:56:62:28:c6:87:e4:1f:f9:2d:de:e2:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:60:07:B1:86:F2:95:69:5F:F9:F7:CC:C3:7F:34:5B:D9:E3:3B:8D
X509v3 Authority Key Identifier:
keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/XWAHsYbylWlf-ffMw380W9njO40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.140.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:7f:c3:bb:62:50:99:6f:d2:28:65:91:62:a8:3b:7b:56:ef:
93:53:77:80:0d:91:66:22:56:3f:ab:f5:2c:ca:4b:39:60:67:
e7:da:ad:d1:f0:4e:b8:b0:d7:5e:00:db:c2:8f:71:b8:ab:3c:
e2:00:86:18:d1:ac:84:13:12:c2:8a:ad:10:a4:5e:64:dc:44:
b0:00:ef:41:d5:e7:5b:08:2d:5b:33:dd:d4:f4:03:a6:ec:2f:
ba:ab:26:bd:f2:93:4c:d5:39:f2:c0:f4:00:65:0a:55:13:3d:
12:5e:a2:bc:e9:d6:c9:a1:39:53:87:c5:a0:7b:cc:70:11:1d:
76:ac:aa:65:a9:a0:e4:44:97:05:73:76:e1:35:19:e7:51:c0:
9c:b9:7a:f7:2b:01:98:cc:30:c6:5a:bc:0b:15:8d:e8:8b:84:
50:2b:68:cb:d0:69:e8:81:59:fd:5a:f1:5f:65:55:24:9d:a1:
34:a9:cf:45:40:1a:b7:1b:15:2b:0a:1d:04:18:dc:c8:23:14:
dc:58:c4:81:fe:e9:cb:1f:66:a6:40:a5:11:84:b7:73:dc:0b:
e8:48:ab:68:70:f7:f4:31:4d:79:e9:7c:07:51:cb:b6:a8:d1:
65:2c:cd:bf:18:31:7c:30:d7:88:0e:cf:e2:6c:69:39:3b:85:
a9:c8:37:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:18:31 2025 by rpki-client