Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/PvLg8lVCScCt7HiIw65BhfQuCgM.roa
File: PvLg8lVCScCt7HiIw65BhfQuCgM.roa (raw, json)
Hash identifier: GcgX7aoSIEiwW3lFue17FCR62KwX0oUjXl/PaKtL1CQ=
Subject key identifier: 3E:F2:E0:F2:55:42:49:C0:AD:EC:78:88:C3:AE:41:85:F4:2E:0A:03
Certificate issuer: /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial: 35B8A3D7
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/PvLg8lVCScCt7HiIw65BhfQuCgM.roa
Signing time: Sat 01 Jan 2022 03:54:50 +0000
ROA not before: Sat 01 Jan 2022 03:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199604
IP address blocks: 46.227.172.0/24 maxlen: 24
2a02:7a00:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901293015 (0x35b8a3d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Validity
Not Before: Jan 1 03:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ef2e0f2554249c0adec7888c3ae4185f42e0a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ea:5e:bb:7a:25:64:4e:95:49:42:53:06:21:
05:d0:2c:82:fc:13:f2:52:68:13:71:86:27:33:59:
c5:17:32:ab:79:45:78:50:32:ca:79:7d:21:71:dd:
ca:92:ef:1e:8c:46:73:90:7c:d5:68:1b:a0:05:ae:
2e:45:ab:95:97:29:c1:a9:cb:f6:1b:96:9f:a7:ad:
7c:ec:c9:50:6d:78:8b:db:20:1e:bf:c9:4f:2c:c3:
29:f5:0f:af:77:84:c0:2e:ef:ac:1a:e7:1f:76:19:
64:13:89:fd:6f:b1:82:8b:e3:61:8b:cd:38:68:77:
e2:70:c6:c5:a1:83:80:b6:20:c7:06:e0:ef:f1:11:
04:6a:e2:30:e8:2b:8a:72:a9:49:66:7b:60:70:57:
f0:5b:79:e5:d6:1c:84:a4:58:9f:88:45:ac:1e:02:
1e:48:7d:ed:3b:0e:e8:62:e0:7c:df:a0:5d:2d:3d:
de:f0:39:2e:a6:8d:81:ee:a8:2b:c8:db:eb:4a:d5:
da:f5:59:e1:98:42:69:80:7b:40:aa:ba:cd:06:56:
b9:03:5c:e5:6a:7c:a7:09:72:71:0c:f0:c4:db:04:
c3:61:32:66:b5:37:d9:17:b7:49:18:9f:62:dc:7c:
54:41:ef:55:51:28:90:29:04:6a:99:a5:f4:25:c9:
b7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F2:E0:F2:55:42:49:C0:AD:EC:78:88:C3:AE:41:85:F4:2E:0A:03
X509v3 Authority Key Identifier:
keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/PvLg8lVCScCt7HiIw65BhfQuCgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.172.0/24
IPv6:
2a02:7a00:2::/48
Signature Algorithm: sha256WithRSAEncryption
21:da:1b:03:63:43:be:0f:ab:8b:fc:99:40:41:0c:1f:f9:fc:
41:f1:5a:5d:2f:7f:90:7b:33:2f:fa:27:f8:f3:46:f8:f4:09:
8f:77:8b:d1:2b:ba:36:40:52:39:b1:f1:93:7f:73:f3:17:bf:
24:72:c0:9f:5d:9a:cd:85:b0:f2:86:21:04:e4:a8:03:22:a3:
64:87:38:45:bb:8c:22:c0:2f:0e:e1:27:49:e6:06:eb:fb:b6:
03:ea:f3:6b:48:ff:db:33:33:be:2f:38:d0:58:e7:fe:a6:79:
25:92:c2:43:aa:a8:b5:2d:df:8a:69:9c:dc:d1:2b:ae:53:9e:
63:86:8a:1b:9c:6c:4f:79:49:84:57:84:0a:ee:ba:a2:a7:5f:
3b:b5:c0:c6:cb:45:5e:fb:45:d2:88:83:3a:cc:76:e7:a7:a3:
39:6d:d9:0f:02:2f:11:f6:d4:0a:d4:a1:c7:ca:8a:a1:c7:6f:
d6:9c:67:70:15:75:c6:31:e9:fe:9f:dc:14:b3:ce:3d:5e:8d:
06:44:ed:21:e4:4b:49:2a:7d:6d:be:ae:ec:b8:fc:9b:23:9a:
6a:8a:c4:9c:2c:77:25:05:f7:bf:d3:5d:ce:35:b5:8f:8a:74:
72:db:e3:45:2a:ae:ab:d4:56:c6:d7:f1:de:0e:56:ca:a1:59:
91:02:4d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:23:26 2025 by rpki-client