Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/_PvuqC3g7V7xzyUD9KVye2JnMbM.roa
File: _PvuqC3g7V7xzyUD9KVye2JnMbM.roa (raw, json)
Hash identifier: K+CP4ZUyvRgzkpfDztnRU2QZBS3QaRbjCbLhO+02odk=
Subject key identifier: FC:FB:EE:A8:2D:E0:ED:5E:F1:CF:25:03:F4:A5:72:7B:62:67:31:B3
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 01856F795D18BA0D9AC870A914CFCBDAC089
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/_PvuqC3g7V7xzyUD9KVye2JnMbM.roa
Signing time: Sun 01 Jan 2023 22:35:02 +0000
ROA not before: Sun 01 Jan 2023 22:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48045
IP address blocks: 46.46.64.0/18 maxlen: 18
94.240.128.0/19 maxlen: 24
94.240.128.0/22 maxlen: 22
2a09:65c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:5d:18:ba:0d:9a:c8:70:a9:14:cf:cb:da:c0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Jan 1 22:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcfbeea82de0ed5ef1cf2503f4a5727b626731b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d2:be:c9:95:f4:b3:1a:c9:50:04:cd:c6:0b:
0f:fa:50:67:1d:a8:45:c4:0d:d9:84:46:ac:fa:0f:
87:5c:e2:87:53:09:e0:32:ae:0a:0d:f4:d2:d7:fe:
6c:b7:75:09:fd:46:e3:7e:e0:35:52:f9:28:c6:49:
fe:60:62:b1:16:50:07:39:88:c8:da:cf:04:33:27:
96:b6:39:9c:b3:0f:62:d6:27:0c:63:50:f3:ad:be:
08:70:1f:fd:47:86:68:6e:15:a6:7a:1a:e1:09:99:
24:9a:ad:fa:83:d5:72:c1:20:b0:68:43:2a:db:a1:
24:1f:09:73:1c:94:af:85:d4:9c:04:b6:d8:b0:c1:
b2:11:95:13:c7:34:79:2d:7f:ed:0f:96:c4:bf:13:
d7:f7:68:bd:e5:b0:f6:d0:cc:fe:45:3b:c9:fc:19:
89:a6:33:17:79:7f:dd:6f:fc:f4:64:5d:95:12:52:
c2:54:31:e6:c0:7c:f2:4f:62:5f:42:1a:bf:1a:db:
ef:8b:6c:8c:00:d9:86:5d:67:45:da:19:d2:35:50:
8d:a5:a7:0d:49:1a:38:5d:67:15:4e:e3:76:e5:14:
91:be:d4:52:d6:4f:c1:90:51:c6:54:c8:01:97:36:
a8:3f:52:ec:9c:71:31:cb:86:89:23:0b:ff:f3:9b:
79:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FB:EE:A8:2D:E0:ED:5E:F1:CF:25:03:F4:A5:72:7B:62:67:31:B3
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/_PvuqC3g7V7xzyUD9KVye2JnMbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.46.64.0/18
94.240.128.0/19
IPv6:
2a09:65c0::/32
Signature Algorithm: sha256WithRSAEncryption
59:63:1f:d4:b2:a0:b2:17:5e:89:ed:18:0d:27:c8:be:b1:07:
2f:b6:98:8e:86:61:fd:1e:91:65:f5:70:61:67:36:34:3c:27:
d8:eb:43:27:ab:21:45:7a:8e:24:f4:2e:e9:41:cd:02:39:30:
d5:82:ea:29:77:72:fb:b1:b2:ce:86:5e:84:43:b5:13:97:eb:
49:a7:4d:70:9e:47:24:fe:13:63:c6:9b:05:a0:d2:f4:c0:7f:
59:1f:b4:73:ec:05:80:be:2c:ac:9b:66:1b:e6:52:54:a4:79:
2b:bf:a1:8d:f0:90:44:b8:86:b9:a9:f8:07:02:f1:4a:e0:3c:
1a:00:b3:4f:7b:74:ad:7f:81:1b:3f:af:7f:2a:01:51:35:51:
bc:38:df:05:99:bc:67:69:db:d3:c4:77:9f:e9:56:df:e6:5b:
a5:e2:f6:ce:ba:8f:f8:da:29:e8:35:1a:6d:47:00:5e:9b:cd:
5f:10:4b:b9:f0:f5:d4:20:f0:6f:58:4a:cb:44:7b:19:9f:39:
de:82:12:6c:90:fb:fd:35:5e:c0:06:31:fb:2f:fa:77:ce:ef:
97:50:a4:ba:29:02:bc:52:f7:7e:46:b2:9c:6d:0e:3c:e4:77:
8d:28:ea:8c:83:cf:96:63:31:4d:67:22:dc:5e:60:b5:de:63:
13:58:8b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:00:14 2025 by rpki-client