Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Doc6G2zCqNDvahxMhFCsbA1kjeE.roa
File: Doc6G2zCqNDvahxMhFCsbA1kjeE.roa (raw, json)
Hash identifier: vX9ayeoYqbJtLVLGX1iSlOnZc9BF7i4l5Kx2ya3UfWA=
Subject key identifier: 0E:87:3A:1B:6C:C2:A8:D0:EF:6A:1C:4C:84:50:AC:6C:0D:64:8D:E1
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018A76678D61361DAC9294816862F924DD12
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Doc6G2zCqNDvahxMhFCsbA1kjeE.roa
Signing time: Fri 08 Sep 2023 20:06:52 +0000
ROA not before: Fri 08 Sep 2023 20:06:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.110.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:76:67:8d:61:36:1d:ac:92:94:81:68:62:f9:24:dd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Sep 8 20:06:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e873a1b6cc2a8d0ef6a1c4c8450ac6c0d648de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:58:81:fc:3b:a5:09:8b:c3:d7:fd:50:26:67:
ce:7f:c0:97:ab:93:82:f4:14:26:2a:a4:3f:34:96:
96:fa:88:7d:ee:40:4e:9a:54:2d:80:e1:b1:41:9c:
de:fc:53:06:f8:c1:4c:db:b2:ab:11:2b:4b:1f:94:
b3:c9:95:69:50:38:4a:47:85:15:51:23:39:1a:a1:
b7:2a:3e:41:ca:d7:00:dd:4f:45:89:61:12:05:2c:
ab:d0:29:b2:3b:4a:7e:4c:40:54:b3:27:41:69:86:
52:e1:75:28:5f:9e:c4:5a:f5:02:b2:0b:ea:f1:81:
91:2d:cc:80:cd:a0:b7:9c:be:43:24:79:90:4f:55:
21:de:61:fb:00:28:99:06:d2:60:93:31:bf:41:c0:
1d:ae:8d:91:1d:12:1a:8c:f1:bb:c2:cb:22:46:e7:
b5:1b:6c:56:79:16:b2:dc:70:bc:c0:5f:7e:8e:20:
9e:3b:5f:9b:36:61:57:50:d5:0c:11:9c:f1:56:d1:
f4:77:1a:0d:eb:1c:05:60:23:ef:1e:95:f9:82:9e:
64:19:86:5c:81:bc:5f:8f:9c:8e:d1:e4:4e:07:d0:
28:33:e6:5d:8e:62:86:b3:92:b8:e6:69:76:08:d8:
fb:64:6a:6a:7a:7e:1c:dd:a7:4f:c9:af:13:31:a0:
9d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:87:3A:1B:6C:C2:A8:D0:EF:6A:1C:4C:84:50:AC:6C:0D:64:8D:E1
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Doc6G2zCqNDvahxMhFCsbA1kjeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.110.0/24
185.169.221.0/24
Signature Algorithm: sha256WithRSAEncryption
69:42:b4:bd:89:69:2c:dd:d2:57:12:8a:7b:b6:73:92:e5:bb:
ba:98:31:35:7e:ef:56:5e:f2:70:4c:5c:de:19:c1:f1:c7:99:
89:9f:d0:73:b4:d3:da:76:3d:f9:a9:74:2e:8b:86:f5:8a:c9:
58:87:6c:85:3e:b6:c4:96:67:0c:13:b9:b9:dd:8f:b4:b1:6d:
a0:58:ff:9f:7b:60:05:2f:82:48:96:b5:2b:fe:20:2d:3f:2a:
a7:5a:a7:d9:1e:7a:a4:c4:87:21:2d:84:f9:49:58:6f:31:2e:
f3:34:b7:8e:0b:de:a8:a1:ae:6a:03:be:5b:b6:d4:8f:5e:70:
41:79:60:fc:e7:9e:cb:c1:30:e4:c4:3a:93:06:a8:59:f3:f0:
44:ca:d0:c9:a4:9c:62:12:87:74:1d:36:b8:b7:a9:84:5d:08:
db:a0:2e:0a:ed:85:fa:56:bc:e0:0c:d2:85:68:e2:cc:8b:f3:
39:ad:b2:db:08:65:cd:aa:08:24:15:7c:63:c5:00:a2:81:e6:
d7:ee:68:28:45:ee:3b:f7:d0:dd:18:22:8d:7e:b3:3e:ab:c7:
fc:db:21:c9:70:e1:e1:0c:12:10:22:e5:18:a2:21:40:04:ee:
4c:0d:82:d5:70:fe:6b:d4:5d:df:8f:ba:2e:55:eb:b5:ad:fe:
a0:f8:b9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:15:28 2025 by rpki-client