Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/zD_cYSk3j_kkYLtAWeEDg_uiBSI.roa
File: zD_cYSk3j_kkYLtAWeEDg_uiBSI.roa (raw, json)
Hash identifier: tVIlQryX2sDQLXXllfHo+0FgSh4d1iwwKrEAcm2G3o4=
Subject key identifier: CC:3F:DC:61:29:37:8F:F9:24:60:BB:40:59:E1:03:83:FB:A2:05:22
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 158DA0D7
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/zD_cYSk3j_kkYLtAWeEDg_uiBSI.roa
Signing time: Sat 01 Jan 2022 06:54:44 +0000
ROA not before: Sat 01 Jan 2022 06:54:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 46.20.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361603287 (0x158da0d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jan 1 06:54:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc3fdc6129378ff92460bb4059e10383fba20522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:96:95:93:3e:98:5c:5e:ef:b0:3b:9c:90:fa:
50:d4:0a:92:32:b0:65:28:55:75:c6:2e:dd:00:28:
9a:67:1b:5e:b1:0e:b8:6c:4e:72:3a:66:49:b1:e9:
2a:18:b6:3f:e1:dc:12:9c:84:43:cc:e2:94:e1:14:
f4:65:3c:d0:b1:a7:71:a0:75:4b:95:8d:0c:55:da:
ce:a3:ee:08:a2:05:22:ca:2e:71:65:d7:c2:25:5d:
fb:68:d7:31:8d:67:82:37:b4:f1:85:f0:fc:a6:de:
47:61:cb:5d:f8:19:71:1e:e3:84:25:7b:e8:f8:d0:
5a:04:94:60:11:c8:6b:02:75:cc:2f:43:6f:2f:b8:
f7:7e:f5:15:6f:3e:0d:e9:f1:18:0c:b4:4f:f9:2d:
56:c5:80:83:1e:ec:1f:60:cf:c7:f3:dc:64:90:07:
16:c8:e1:4c:82:a0:69:24:7b:38:41:e2:f2:c5:3a:
4d:d4:4d:68:01:8d:70:de:1a:b5:37:5c:1b:f5:4d:
e9:ad:39:ab:fd:9c:53:35:20:a0:fe:41:95:93:b1:
72:ca:15:cc:33:63:86:f6:eb:a5:80:50:1f:82:22:
a7:86:33:bb:37:c5:f0:1c:c8:65:af:d5:d5:05:14:
53:a4:28:63:9c:ba:f5:b5:ad:d3:a4:92:09:bf:f8:
c6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3F:DC:61:29:37:8F:F9:24:60:BB:40:59:E1:03:83:FB:A2:05:22
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/zD_cYSk3j_kkYLtAWeEDg_uiBSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.15.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ba:90:f0:89:dc:c3:c4:8b:6b:e4:0e:65:fc:4b:68:53:de:
29:8c:19:85:cc:d5:7a:09:3d:c4:2c:79:82:85:e6:2a:28:cf:
6a:96:e4:29:9e:26:62:8d:51:0d:91:53:7d:0f:6e:d3:ae:d3:
af:f4:80:33:0a:bb:a3:75:87:07:fb:8c:ec:0b:98:24:41:76:
e9:95:d5:84:3e:6a:e0:f4:9c:46:1c:ca:d5:bd:74:75:f6:6c:
57:c3:4b:4e:a7:d1:1b:61:9a:43:64:1a:12:d9:bb:28:b8:86:
59:a1:de:ff:fe:b8:1a:69:20:e7:49:9c:32:50:7a:e2:3e:b6:
0d:25:ed:13:0c:47:1b:0c:46:56:5c:15:21:7e:3b:c4:65:40:
66:f9:97:98:28:59:ab:6c:2d:34:36:ca:7f:53:0c:55:3f:43:
3c:f4:1f:93:61:af:fc:2c:ad:94:fd:9d:64:5e:19:e5:65:26:
25:d1:3e:64:92:96:7d:fa:c9:50:ee:8f:cb:3e:94:53:4e:62:
9b:5b:11:6e:40:58:2a:c8:9a:fc:4b:86:0f:1d:03:1a:12:74:
28:26:3c:30:12:27:09:52:01:fa:61:66:3e:05:d6:8f:93:e5:
f2:20:1c:53:ef:3b:49:bf:1d:c2:76:b3:b1:ac:79:6f:a4:71:
95:c0:e7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:21:05 2025 by rpki-client