Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/5IMNDEps2_iBhmYwwWf2ZX63HaE.roa
File: 5IMNDEps2_iBhmYwwWf2ZX63HaE.roa (raw, json)
Hash identifier: SN70E7m7Zw+FlhTzaAA4lwaS1YKcpixBD2kVQfSykNI=
Subject key identifier: E4:83:0D:0C:4A:6C:DB:F8:81:86:66:30:C1:67:F6:65:7E:B7:1D:A1
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018C67C5DC8FACF3D032992B563610358BF0
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/5IMNDEps2_iBhmYwwWf2ZX63HaE.roa
Signing time: Thu 14 Dec 2023 10:01:09 +0000
ROA not before: Thu 14 Dec 2023 10:01:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.110.0/24 maxlen: 24
46.20.108.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:c5:dc:8f:ac:f3:d0:32:99:2b:56:36:10:35:8b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Dec 14 10:01:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4830d0c4a6cdbf881866630c167f6657eb71da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:67:ce:9d:7b:5f:8c:8c:01:de:3f:cc:3f:3c:
42:25:36:2b:4b:79:00:29:2f:e2:18:62:6b:93:b9:
db:cf:4d:04:84:d2:77:c2:7b:52:fc:5f:76:81:6a:
a7:ac:69:9e:23:21:e1:e1:f7:98:da:98:c7:57:ea:
e0:82:bc:90:1d:19:d8:97:1e:27:dc:1a:9f:be:f6:
7a:37:a8:5e:aa:80:4a:dc:80:ce:da:52:bb:65:34:
a0:a1:df:4d:a5:11:cc:1e:f4:04:43:31:de:59:af:
78:1a:d9:12:3b:b5:e6:4b:ab:27:9c:c0:63:e1:2e:
03:19:35:36:de:df:f7:ff:2f:94:75:fe:35:a0:be:
b7:e3:b3:f9:71:e2:be:ae:c0:40:36:71:81:0c:5a:
eb:9e:8b:b7:66:a1:c0:fd:f6:87:eb:be:04:dc:bd:
1e:67:04:06:63:ed:99:77:39:40:f0:56:d2:43:04:
dc:58:61:2c:56:39:1a:5a:fc:aa:68:4d:6f:22:8c:
24:e4:8e:01:95:ff:ae:10:ae:25:fb:20:da:e1:ac:
9e:96:9a:2c:f4:3f:15:27:15:cd:a5:26:77:57:b5:
18:fd:5a:34:9b:51:4e:7d:94:db:d3:85:3e:a6:07:
d0:7d:06:ed:0e:f8:af:8e:16:2c:a8:99:ed:1c:54:
e5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:83:0D:0C:4A:6C:DB:F8:81:86:66:30:C1:67:F6:65:7E:B7:1D:A1
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/5IMNDEps2_iBhmYwwWf2ZX63HaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.108.0/24
46.20.110.0/24
185.160.194.0/23
185.169.221.0/24
Signature Algorithm: sha256WithRSAEncryption
39:fd:2e:8f:ed:83:8f:66:b2:b1:7d:5a:f8:e4:63:4c:58:26:
e8:3b:03:b8:25:be:78:e3:7f:46:0e:de:c5:a6:0e:00:19:98:
e5:19:36:ec:9d:e7:b1:7a:81:b9:37:d3:45:85:1a:1e:4e:5d:
8e:71:92:55:7f:39:29:f0:96:4c:bf:24:a0:cc:29:d7:09:6b:
5e:10:a0:aa:b4:60:84:ad:ae:6b:06:d8:c1:55:b1:68:d3:08:
8b:06:b2:fa:1a:6c:71:44:b9:dc:f3:d4:d5:0d:ea:d2:83:7e:
bf:c4:77:92:3f:51:35:6d:2c:d8:27:cb:e4:9e:3c:2f:b1:6f:
42:54:bf:99:f7:88:f3:4b:fb:1c:38:c5:f7:bf:c5:da:d4:51:
72:2b:32:4a:53:b5:09:13:94:35:0d:a0:8e:85:cc:7d:6a:c9:
ec:46:c8:8d:19:8e:55:47:30:09:40:dd:bd:8f:fa:ba:45:a2:
3f:1a:33:12:dc:99:44:51:00:f1:1e:8e:af:5a:59:f6:25:7a:
11:e5:31:09:29:6f:16:9a:8b:c7:6e:47:a2:c7:a0:81:df:97:
8b:89:48:ce:26:28:ec:31:52:57:68:58:d9:26:c0:b5:2d:b9:
fb:06:46:2e:48:2b:7f:f9:88:36:56:f2:86:0f:e1:5f:22:d5:
87:93:b4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:17 2025 by rpki-client