Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/cW8Vv4hGYZEBxeT6EALu_sUb-cA.roa
File: cW8Vv4hGYZEBxeT6EALu_sUb-cA.roa (raw, json)
Hash identifier: jTKU8rg/kbia3zFRMa2VCeRYz2r26gEhaflBiPOANsw=
Subject key identifier: 71:6F:15:BF:88:46:61:91:01:C5:E4:FA:10:02:EE:FE:C5:1B:F9:C0
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 01856DE6698E1AAC7FCB351FB699CA59CD30
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/cW8Vv4hGYZEBxeT6EALu_sUb-cA.roa
Signing time: Sun 01 Jan 2023 15:14:54 +0000
ROA not before: Sun 01 Jan 2023 15:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50758
IP address blocks: 46.31.160.0/21 maxlen: 24
213.190.12.0/24 maxlen: 24
213.190.13.0/24 maxlen: 24
2a0a:2a40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:69:8e:1a:ac:7f:cb:35:1f:b6:99:ca:59:cd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Jan 1 15:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=716f15bf8846619101c5e4fa1002eefec51bf9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:29:a9:d3:6b:53:5f:40:43:00:e6:e6:f8:a6:
41:84:31:e9:9b:be:12:61:f2:1e:c1:6a:f8:55:ab:
54:f9:f8:3b:59:41:73:5e:42:9a:cd:99:9b:d6:2a:
18:f4:59:c5:46:b1:1e:03:23:41:02:84:fd:23:f4:
d8:6b:4c:21:cc:ae:31:ac:62:c0:8c:da:33:73:db:
39:d9:43:22:67:09:d3:7d:d1:dd:79:c6:e6:a1:43:
d4:09:37:54:df:36:4e:cb:ba:e9:c3:1f:49:67:9d:
e6:66:90:7b:9d:d6:4e:ab:8f:a2:d6:10:d7:18:56:
d4:02:45:ef:ae:96:c7:6f:5d:c5:b6:33:e3:49:64:
38:f2:76:b3:ec:7a:8c:38:22:85:ca:f0:06:5a:5b:
d3:90:b7:b5:69:0c:83:17:e1:3e:bd:93:51:81:c2:
b5:ec:7d:e3:44:15:cd:5a:b2:ad:d4:c2:14:81:0a:
9c:5b:1d:c8:00:f6:a0:08:8d:ed:32:34:47:2b:4b:
23:f0:a5:bb:90:a1:54:98:86:1e:ff:79:2b:c8:e6:
a9:26:65:38:bf:67:9d:13:cd:fd:e9:b9:3c:fa:6d:
74:8b:0d:d5:1f:03:11:d6:e9:e1:27:ab:7c:33:c2:
1a:4c:e3:4d:8a:e0:00:0a:ce:83:f0:85:cd:34:f2:
ef:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6F:15:BF:88:46:61:91:01:C5:E4:FA:10:02:EE:FE:C5:1B:F9:C0
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/cW8Vv4hGYZEBxeT6EALu_sUb-cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.160.0/21
213.190.12.0/23
IPv6:
2a0a:2a40::/29
Signature Algorithm: sha256WithRSAEncryption
6f:8f:5f:28:db:12:82:1a:35:ef:a7:97:2c:e3:1f:d0:7b:6c:
e8:ba:72:f0:3c:68:63:63:3d:3e:49:41:16:af:5c:fb:27:ee:
86:84:03:f6:32:a2:f6:0e:21:72:b4:56:32:02:c8:b9:76:d6:
54:a8:16:89:2a:13:8f:be:94:54:23:c6:c6:cb:fa:56:aa:13:
d5:23:9b:5f:aa:f6:8e:63:86:ab:58:7a:8b:e1:0f:66:57:ad:
12:47:e7:46:c8:e1:12:5a:8f:41:0d:d6:73:a2:12:89:f9:fe:
61:bf:05:87:22:12:47:02:63:70:fd:6e:46:07:2d:fc:ca:7b:
3e:7a:c7:3b:ab:70:74:2f:d2:bc:e4:41:7e:93:d6:40:2e:8e:
3f:00:20:55:09:24:3e:4d:c4:b1:32:4f:ec:8a:50:84:34:57:
69:8e:b1:c6:25:12:66:66:69:09:95:ce:f1:ae:eb:b2:01:ec:
f2:93:c1:3a:14:ae:1a:3e:11:09:62:28:4d:94:a8:a8:3c:55:
20:53:60:ab:08:61:10:2b:46:a4:ea:e9:78:f5:e9:fe:91:2c:
67:ad:ab:74:6d:f8:09:ad:66:f8:79:12:76:ec:f3:75:a2:fd:
20:5a:7d:bf:ac:f3:76:38:6b:4a:46:8a:6e:aa:3a:9f:41:5e:
2e:66:5d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:40:41 2025 by rpki-client