Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/OHWFK9QfKq4Mig_rX81NAXJ_GdI.roa
File: OHWFK9QfKq4Mig_rX81NAXJ_GdI.roa (raw, json)
Hash identifier: PWsz7A0fr6kyvBuSybcRoRy4kBmkl45e0yLXS9qyEcU=
Subject key identifier: 38:75:85:2B:D4:1F:2A:AE:0C:8A:0F:EB:5F:CD:4D:01:72:7F:19:D2
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018A6FB4CC21A61642B96D7B985D8168C852
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/OHWFK9QfKq4Mig_rX81NAXJ_GdI.roa
Signing time: Thu 07 Sep 2023 12:53:54 +0000
ROA not before: Thu 07 Sep 2023 12:53:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35478
IP address blocks: 46.20.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:b4:cc:21:a6:16:42:b9:6d:7b:98:5d:81:68:c8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Sep 7 12:53:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3875852bd41f2aae0c8a0feb5fcd4d01727f19d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:f9:c5:00:b8:36:aa:21:e0:b6:d1:a2:e2:
21:98:b5:3b:29:81:1f:0a:39:08:ed:85:1e:93:65:
a7:22:4f:6a:45:27:0e:02:3d:45:47:86:a4:dc:bd:
9d:0a:a9:fa:cb:d5:46:fb:47:5f:29:03:4d:0e:7b:
bf:01:c2:4e:28:35:c5:f2:bd:25:fd:80:22:6a:14:
fb:40:a2:9b:23:ad:6d:35:e9:90:87:e7:cc:3b:f9:
77:d4:2e:ed:8c:70:fe:05:67:67:28:7c:ba:00:bf:
79:4c:2d:0f:6d:39:fb:6d:a1:af:76:bd:99:3b:64:
c1:11:74:a7:58:c3:49:dd:dd:f2:2e:19:70:89:88:
77:49:d6:eb:79:1f:09:9f:7b:a1:1b:9e:81:8f:f4:
4f:93:83:84:93:8c:be:1b:e9:28:e2:34:26:0f:b4:
79:ef:2c:ed:a9:ad:a9:b5:d9:a3:9c:49:69:45:92:
56:00:2f:c4:88:12:63:b1:3b:db:2a:72:11:d0:af:
dc:39:20:c8:ca:58:f4:77:e3:05:55:0e:61:68:28:
c4:10:d4:4b:db:79:a5:c4:53:d8:2b:8a:30:4c:27:
d0:bf:72:ef:54:30:b1:fc:6a:f7:e3:4f:19:77:d1:
2d:64:63:ef:38:cb:b3:f1:c7:48:0b:1f:19:dc:1e:
68:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:75:85:2B:D4:1F:2A:AE:0C:8A:0F:EB:5F:CD:4D:01:72:7F:19:D2
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/OHWFK9QfKq4Mig_rX81NAXJ_GdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.103.0/24
Signature Algorithm: sha256WithRSAEncryption
04:a9:9d:80:0e:c7:ba:18:a8:10:61:32:74:45:0f:9b:13:37:
62:f1:e0:97:df:6b:d7:26:08:6a:b7:19:b7:60:3f:25:c2:30:
b4:b6:3f:c4:89:f0:4e:c8:71:7d:c0:06:eb:ce:1d:cb:79:ce:
28:f8:00:24:af:2a:86:6f:71:c2:6e:30:8a:ea:3b:c3:1a:f0:
73:c9:bf:b5:07:b6:fa:8c:5e:df:be:ac:1d:dc:38:35:2c:6d:
a1:73:2e:0d:ad:63:97:83:dd:79:b9:f2:ce:d8:b8:d6:f0:9a:
45:a2:15:d5:05:e5:e5:b7:3d:19:13:c6:41:32:bc:3e:c2:86:
4a:b9:6d:3d:6a:48:22:9a:a7:45:b4:ed:cb:40:c7:b9:1d:b0:
b5:e1:15:85:b1:2c:06:52:64:fb:0f:ed:5c:57:d1:7e:71:c6:
10:b7:af:2b:a5:0b:6d:a3:57:5b:76:f7:43:75:21:79:7e:8b:
00:f8:8d:b2:1f:e1:fc:fa:7e:31:14:87:14:da:58:03:69:5d:
4f:d6:30:b4:12:31:42:6b:46:9c:d7:e7:e4:ba:f9:ef:0c:9d:
a9:10:b8:2f:3a:44:c7:29:7b:3d:c7:17:5f:9b:0f:f9:7e:ae:
b9:ac:6f:d0:80:be:73:7c:19:52:22:26:9c:13:07:b0:ff:64:
b3:52:41:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:21:24 2025 by rpki-client