Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/5c-OUleBmC9PYGUnIq-4cn5TR9Y.roa
File: 5c-OUleBmC9PYGUnIq-4cn5TR9Y.roa (raw, json)
Hash identifier: +A9UKRlFBTcbnEMYNK2pGX+TF1xh91KzAnoHH0o92Es=
Subject key identifier: E5:CF:8E:52:57:81:98:2F:4F:60:65:27:22:AF:B8:72:7E:53:47:D6
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018C6D04B2E1ABCF1FB7342E833E66390084
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/5c-OUleBmC9PYGUnIq-4cn5TR9Y.roa
Signing time: Fri 15 Dec 2023 10:27:53 +0000
ROA not before: Fri 15 Dec 2023 10:27:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34458
IP address blocks: 185.100.171.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
46.20.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:04:b2:e1:ab:cf:1f:b7:34:2e:83:3e:66:39:00:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Dec 15 10:27:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5cf8e525781982f4f60652722afb8727e5347d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:0f:ff:61:d8:8a:dc:b8:b5:10:9c:a5:fa:
2c:e1:e7:76:d3:c7:72:60:d0:be:a1:60:04:b4:7a:
14:76:66:31:11:15:6b:f3:ea:f3:de:9e:da:a9:1a:
62:3f:69:9a:e9:f6:4e:d0:33:7f:b4:6d:21:a6:9b:
49:0d:63:17:e4:8f:23:70:99:72:ea:f7:0e:cf:88:
8d:db:62:06:76:32:3a:9b:dc:ee:9a:29:8a:57:ea:
1e:74:c3:ba:90:76:89:a8:18:a0:d1:62:52:71:11:
16:a0:b8:ce:98:80:b3:39:ad:6c:6a:05:57:e0:ff:
d3:ea:93:46:05:b3:59:45:51:8c:62:77:aa:04:75:
be:d5:10:2e:5c:04:92:d5:c3:b9:b6:28:e3:56:f0:
43:da:98:d3:8d:a3:bb:81:d2:5c:63:95:92:09:aa:
36:9e:05:9a:c6:98:4e:87:2f:e4:84:7e:be:a6:c7:
50:11:e8:77:a2:5f:59:4a:10:ca:79:16:cb:e4:a2:
4b:1b:07:42:4d:da:40:1b:de:80:26:44:64:4b:12:
66:98:e9:a0:92:62:aa:2e:ae:87:af:9c:e3:bb:1d:
e7:da:8b:d8:75:1b:ec:c5:af:28:b6:bd:b7:ce:1f:
e0:39:13:74:32:11:26:88:5d:6d:5c:11:68:b7:7b:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CF:8E:52:57:81:98:2F:4F:60:65:27:22:AF:B8:72:7E:53:47:D6
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/5c-OUleBmC9PYGUnIq-4cn5TR9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.101.0/24
46.20.104.0/24
185.100.171.0/24
185.169.222.0/23
Signature Algorithm: sha256WithRSAEncryption
50:b1:ca:82:cf:09:65:76:dd:3a:12:95:d0:ec:52:4b:38:31:
9e:4f:6b:3f:ca:85:25:d6:0f:99:23:c3:9b:48:57:61:7e:d7:
61:d9:95:0c:b0:3e:6d:7d:12:7d:69:79:28:59:cb:23:ef:84:
43:56:1e:c4:6f:9d:67:9e:e4:f7:f0:3a:9d:66:79:6f:27:a2:
e7:92:d1:35:fd:37:dd:56:8a:c8:78:e2:a1:dc:3a:a1:6a:4f:
24:bf:82:80:5d:16:c9:7b:20:cb:c5:bc:5a:ff:32:6e:2c:ee:
fc:b8:cf:86:d0:5d:aa:83:b7:5f:37:91:eb:cd:e7:28:5d:dd:
f5:5e:a8:5e:4e:4c:3c:67:2d:cd:c5:00:15:d2:be:91:94:8c:
e4:02:9e:99:55:36:65:c4:6b:06:ee:73:e5:85:f2:0b:8e:fd:
9e:69:c5:50:f3:e1:42:c8:88:44:36:30:bd:59:b1:f8:18:6d:
3b:9a:ca:1e:b4:d6:0c:bf:20:15:40:89:0f:d6:9a:51:40:c5:
05:60:36:31:61:0b:c0:b8:0f:2f:d7:47:29:59:81:da:ff:46:
91:a1:65:61:44:04:c5:ca:86:b2:d0:f9:9d:44:7a:b0:41:59:
c8:1e:5d:c0:8c:d0:10:03:1f:d9:45:26:d3:15:75:3f:e7:db:
98:a8:bc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:12:13 2025 by rpki-client