Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/5L4Vuf4HDAJfsJhwX14hcqeKNN8.roa
File: 5L4Vuf4HDAJfsJhwX14hcqeKNN8.roa (raw, json)
Hash identifier: PsMFZrLWSu6RQ7WPpcHc5ox3g8MmrMeTYr0Y+TiM2Ig=
Subject key identifier: E4:BE:15:B9:FE:07:0C:02:5F:B0:98:70:5F:5E:21:72:A7:8A:34:DF
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 05FD9C6C
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/5L4Vuf4HDAJfsJhwX14hcqeKNN8.roa
Signing time: Sat 01 Jan 2022 13:55:33 +0000
ROA not before: Sat 01 Jan 2022 13:55:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206830
IP address blocks: 46.24.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100506732 (0x5fd9c6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 1 13:55:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4be15b9fe070c025fb098705f5e2172a78a34df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:9e:39:98:2d:9a:77:da:38:21:7c:20:74:
a8:47:a7:f4:db:77:73:c6:96:64:8f:3f:9e:72:05:
98:e4:f4:aa:ca:33:21:63:5d:59:07:f6:52:02:63:
08:3f:7a:6c:eb:ec:2c:22:ef:cd:82:d0:e4:f9:4c:
bc:d8:0a:c2:4d:33:87:7a:ae:b3:7b:c4:3a:01:7b:
20:61:59:96:08:0b:7d:1e:ae:1f:14:b8:42:03:a4:
f2:1d:93:55:92:6c:7c:3a:f6:d0:a9:ff:e8:3c:55:
0e:6e:ca:20:2c:95:a9:de:07:d3:d6:08:d0:e9:f9:
45:a9:0f:25:8a:82:f1:e4:1a:e1:db:86:c1:ef:56:
f3:6b:54:f0:e3:64:4d:ce:1e:77:5a:09:98:ff:ef:
85:31:5c:12:f6:bd:b6:5e:e5:ef:49:a4:27:eb:1c:
b5:57:24:d8:b1:84:c0:2d:94:71:e8:04:cf:b2:bc:
f4:1c:57:03:97:55:ff:27:59:25:b8:f3:03:b1:4b:
a0:23:74:66:ad:67:e4:5b:37:ec:16:8a:74:c9:35:
8b:fa:ad:fe:ad:47:b5:5c:af:a9:dc:2f:43:99:38:
66:02:e1:74:ea:4f:22:44:c4:f7:7b:fa:59:d1:9d:
70:b5:05:cf:1e:a3:f3:26:c7:98:0b:91:21:e3:9a:
03:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BE:15:B9:FE:07:0C:02:5F:B0:98:70:5F:5E:21:72:A7:8A:34:DF
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/5L4Vuf4HDAJfsJhwX14hcqeKNN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.24.148.0/24
Signature Algorithm: sha256WithRSAEncryption
10:12:43:17:81:3d:9f:bc:7c:8e:e9:30:45:0e:e2:cc:a2:99:
7f:97:84:ef:30:15:de:82:13:2b:fd:09:92:35:15:6e:a7:e8:
ac:9e:17:2c:fe:18:33:c2:fb:b1:16:bc:4b:17:78:01:ce:e3:
5b:ba:64:d9:54:fe:c2:c8:d1:4d:da:a6:37:58:fc:0c:01:b1:
2f:ef:c6:47:1d:38:fe:52:92:6e:72:99:a2:98:79:3c:19:b8:
25:35:4b:f5:d3:c5:00:00:dd:9c:be:7b:34:45:b6:c1:76:32:
b9:2f:64:6b:8c:ba:22:b6:6b:68:dd:a1:79:ae:ea:9c:e1:34:
02:75:5d:35:18:d7:6f:c9:75:ee:0c:0e:75:79:97:39:0c:e0:
ab:31:33:a0:0b:c4:d9:4d:97:07:37:62:90:cc:28:64:c6:0c:
73:1f:35:a3:60:39:4e:fc:fc:44:4c:ee:50:dc:86:b6:5f:b1:
97:77:a7:ba:75:23:de:33:da:5b:aa:10:01:d2:36:93:9c:2c:
a9:c9:eb:1a:1d:8b:ef:0f:d7:18:0a:0f:f6:7b:54:1d:1c:0e:
a4:1b:fd:c9:d9:8f:b7:65:d5:ec:4f:f1:18:22:9e:6f:13:9c:
cc:b7:ab:05:ca:9c:77:08:fd:54:a7:13:8d:39:73:7f:74:3e:
ba:47:8a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:27 2025 by rpki-client