Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/hZcAwNDeETqUcoQ37yltavUtRto.roa
File: hZcAwNDeETqUcoQ37yltavUtRto.roa (raw, json)
Hash identifier: CprzV2qzbRNGZQ3dMYzrtgTfJO+NfdiQQFcICG7xGeg=
Subject key identifier: 85:97:00:C0:D0:DE:11:3A:94:72:84:37:EF:29:6D:6A:F5:2D:46:DA
Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial: 0186FEDE00A05339EBCEA4C70DEDBBCC8BE3
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/hZcAwNDeETqUcoQ37yltavUtRto.roa
Signing time: Mon 20 Mar 2023 11:53:27 +0000
ROA not before: Mon 20 Mar 2023 11:53:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60822
IP address blocks: 46.23.200.0/22 maxlen: 22
46.23.204.0/22 maxlen: 22
195.137.140.0/22 maxlen: 22
195.137.144.0/22 maxlen: 22
195.137.148.0/22 maxlen: 22
195.137.152.0/24 maxlen: 24
195.137.153.0/24 maxlen: 24
185.85.212.0/22 maxlen: 22
46.23.192.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:de:00:a0:53:39:eb:ce:a4:c7:0d:ed:bb:cc:8b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Validity
Not Before: Mar 20 11:53:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=859700c0d0de113a94728437ef296d6af52d46da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0a:56:13:d0:6e:1c:9c:5b:a4:12:07:fe:78:
9b:7c:3a:7c:44:b7:7c:b8:97:86:0d:f2:50:5d:64:
4a:39:b1:d6:48:20:c5:db:8d:ee:50:ff:21:96:05:
35:c7:5a:11:f5:31:60:1c:ee:06:1d:39:58:d3:a6:
ef:ee:63:57:9f:0b:37:67:fb:96:46:67:e5:28:df:
04:08:d9:89:aa:f3:8d:4e:10:68:6b:b5:6b:e2:5a:
d3:bf:14:e2:cc:df:91:ca:a8:4e:cf:84:99:86:01:
64:05:01:c1:27:c1:3c:11:ca:fa:1d:44:d7:29:54:
7d:01:2e:d5:eb:39:88:df:b8:8c:ed:25:3a:e9:37:
d4:d7:ad:d2:dc:a4:8f:10:85:f8:e0:15:3b:5e:05:
99:4c:85:ee:3f:d3:3f:34:b8:d4:a3:0b:00:c7:da:
2b:af:18:93:58:18:3b:f9:c7:e8:32:03:21:06:ed:
73:63:30:fc:af:d4:2d:2b:0c:ce:22:d4:81:51:55:
e2:d2:c4:43:10:92:24:63:e9:7e:49:2d:e7:0c:ab:
58:3f:41:16:96:8f:46:ec:9d:f8:24:bc:63:59:d9:
8d:46:c0:44:22:61:e1:ee:a5:a6:67:1c:aa:48:dc:
54:48:77:97:62:03:84:10:27:13:e9:9c:94:dc:ae:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:97:00:C0:D0:DE:11:3A:94:72:84:37:EF:29:6D:6A:F5:2D:46:DA
X509v3 Authority Key Identifier:
keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/hZcAwNDeETqUcoQ37yltavUtRto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.192.0/20
185.85.212.0/22
195.137.140.0-195.137.153.255
Signature Algorithm: sha256WithRSAEncryption
7e:a7:4c:9c:15:07:07:7a:35:46:86:e4:19:84:66:29:7a:cf:
e4:d5:e6:d0:8b:e1:da:09:98:2b:56:cd:3b:0d:e5:88:96:75:
0c:a9:e7:7e:8b:fd:79:f7:e8:14:7d:3c:0f:f7:c0:cc:3e:af:
0d:9c:3d:b5:e4:42:b6:40:6a:e4:10:c9:60:10:71:75:c4:97:
ee:df:67:c8:26:40:4c:a8:e5:56:2a:3c:3b:ae:e8:eb:dc:fa:
58:be:62:a0:47:ae:24:64:ec:ec:e5:3c:fe:36:23:61:41:6f:
dc:66:e3:3a:89:a1:92:7d:94:9d:85:2c:94:a4:54:23:54:e0:
70:21:9b:c1:6d:67:a7:23:72:12:09:20:29:f7:01:1b:e3:a9:
8e:78:ef:e7:88:96:4e:1d:60:45:10:96:9e:13:b0:20:b4:2e:
88:b6:d1:32:bf:a2:c7:88:2c:91:f6:97:1f:d6:48:3b:a6:d1:
d2:01:6b:bb:dc:b4:13:5a:29:82:8d:f7:6a:92:f8:7c:03:b1:
a1:68:cb:61:08:94:5e:11:20:5d:dd:23:9b:7e:3e:9e:3a:77:
c7:95:5a:e3:5b:ff:ae:ce:76:45:29:1f:4c:fb:ad:9c:3c:8b:
4e:76:0e:53:33:e9:f2:bf:a6:ee:c7:31:9f:f1:dd:88:09:72:
a0:34:18:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:22 2025 by rpki-client