Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/78I6bhJDnQDdIR2QY10jmVY-mIM.roa
File: 78I6bhJDnQDdIR2QY10jmVY-mIM.roa (raw, json)
Hash identifier: isR8kCp1e9DN54Ec0NIDqX0ol1m+gOy7b+61z9bSbOQ=
Subject key identifier: EF:C2:3A:6E:12:43:9D:00:DD:21:1D:90:63:5D:23:99:56:3E:98:83
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018A76678C9E0DDCBB79A0BA9F9E8B444BA5
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/78I6bhJDnQDdIR2QY10jmVY-mIM.roa
Signing time: Fri 08 Sep 2023 20:06:52 +0000
ROA not before: Fri 08 Sep 2023 20:06:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34458
IP address blocks: 46.20.108.0/24 maxlen: 24
46.20.106.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
46.20.97.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
46.20.105.0/24 maxlen: 24
46.20.101.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.100.170.0/24 maxlen: 24
185.100.171.0/24 maxlen: 24
185.100.168.0/24 maxlen: 24
185.100.169.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:76:67:8c:9e:0d:dc:bb:79:a0:ba:9f:9e:8b:44:4b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Sep 8 20:06:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efc23a6e12439d00dd211d90635d2399563e9883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b9:9e:72:97:46:16:42:a9:9b:13:26:72:8f:
d5:bb:af:1c:b7:ac:1f:b0:52:e9:67:32:8d:e1:67:
ca:9a:bf:9e:ff:b5:47:a8:15:33:5d:ab:67:c9:bc:
62:c1:05:0a:37:dc:5f:14:07:2a:0b:81:cf:bc:73:
d7:4b:0d:77:05:0f:dd:14:1f:f6:84:2f:c5:43:01:
6e:2b:db:19:8e:5a:57:b7:89:1d:c6:75:c6:d6:54:
7f:83:13:ad:6b:d1:ba:1b:64:9b:8e:03:23:29:ac:
58:bb:fb:4a:d5:2d:a3:d1:21:55:ea:8d:0e:30:aa:
28:e6:23:5c:92:f9:f2:48:1c:bf:3f:a8:cb:3b:ae:
a5:05:22:38:4f:f0:dc:73:c2:56:87:d9:6b:3a:03:
45:ba:57:b0:f0:ba:f9:29:51:ab:bc:bf:c2:84:5c:
c3:be:d3:66:58:dc:d4:e1:2a:5e:1d:09:91:11:45:
3b:3a:38:d6:40:89:5a:98:39:27:ff:6f:95:2c:d8:
38:35:68:b2:e9:f2:38:f9:ea:13:c0:d9:d2:1b:34:
ee:be:85:c4:1f:92:4e:3a:54:16:4c:35:8d:2c:2e:
88:7f:33:8b:a0:57:db:d8:85:71:04:6c:a8:91:11:
86:16:75:24:ba:82:64:15:8d:22:1a:5e:49:77:09:
1e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C2:3A:6E:12:43:9D:00:DD:21:1D:90:63:5D:23:99:56:3E:98:83
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/78I6bhJDnQDdIR2QY10jmVY-mIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
46.20.101.0/24
46.20.104.0-46.20.106.255
46.20.108.0/24
46.20.111.0/24
185.100.168.0/22
185.160.194.0/24
185.169.222.0/23
Signature Algorithm: sha256WithRSAEncryption
36:04:20:47:a0:03:74:94:00:9b:c9:b2:15:31:7f:2f:8f:08:
3d:6d:55:ef:60:3e:91:19:05:a2:83:44:47:c9:d5:1c:a8:ae:
6c:7f:c6:19:9c:76:65:65:5b:8f:d8:21:1c:eb:d1:50:7c:cf:
6d:1d:a1:e2:de:6d:15:7f:9a:d4:8c:c0:55:13:ce:d7:57:9f:
e3:4f:4a:ac:a7:e5:f1:c1:55:41:2c:7a:f4:34:05:25:50:7f:
5a:3a:b3:71:83:e6:c2:0c:44:a2:c2:e0:0c:7c:1f:cc:2b:3f:
be:4a:38:67:49:b8:5b:70:e2:34:21:ac:26:fd:41:c6:2a:f2:
16:e9:89:da:4f:b6:02:f9:13:31:b0:91:e0:2d:d6:1f:57:79:
82:48:21:16:88:d9:e0:e4:a5:bb:ab:03:bd:c1:65:6b:ca:03:
77:c5:6a:fd:24:5a:c0:95:af:89:47:58:78:1f:23:3a:9f:a4:
51:48:d9:ea:db:71:1b:16:93:d7:e6:92:2b:72:f2:b0:c2:d8:
1f:53:92:5d:ee:3c:4a:91:74:6f:6e:3c:51:9f:a0:26:f7:d5:
a5:1e:cd:fe:f7:f1:70:10:84:a1:70:b5:1c:97:06:cb:55:ec:
12:d4:7c:a2:b3:b8:29:5f:a1:81:05:9b:b3:66:85:a3:d0:6a:
17:0b:0e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:20:27 2025 by rpki-client