Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/SJjSdUdWayHiNffwydtGs6Dz2gY.roa
File: SJjSdUdWayHiNffwydtGs6Dz2gY.roa (raw, json)
Hash identifier: biyBxnRt5N5dmouPxXRMV1r1cajAPDQ3w3jETzlX2+E=
Subject key identifier: 48:98:D2:75:47:56:6B:21:E2:35:F7:F0:C9:DB:46:B3:A0:F3:DA:06
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018C96741249B81FD86D5F23EA12ADA861A1
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/SJjSdUdWayHiNffwydtGs6Dz2gY.roa
Signing time: Sat 23 Dec 2023 11:33:58 +0000
ROA not before: Sat 23 Dec 2023 11:33:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215906
IP address blocks: 46.20.106.0/24 maxlen: 24
185.100.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:96:74:12:49:b8:1f:d8:6d:5f:23:ea:12:ad:a8:61:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Dec 23 11:33:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4898d27547566b21e235f7f0c9db46b3a0f3da06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8f:07:ee:e4:9d:bf:68:2c:3a:eb:81:02:05:
c0:79:43:99:af:1f:c0:84:f6:23:62:0e:a2:68:26:
43:a5:c5:82:82:3c:87:35:11:4e:16:5c:22:6e:93:
94:55:ee:e7:0e:93:b4:34:6e:97:45:30:27:e8:78:
4c:26:ee:c1:55:d5:c9:55:a8:87:18:73:c5:2c:75:
fb:e2:86:fd:cc:38:d6:72:48:22:ab:b7:d7:cc:55:
c0:c7:b3:9b:c8:89:95:e2:f6:69:ca:18:47:cd:c8:
8f:85:6c:78:75:d6:dd:81:03:7f:8e:98:18:76:94:
44:e4:6a:3f:00:5f:a2:a2:15:a7:41:ee:97:13:5c:
36:64:ab:5e:9d:84:d0:7d:7d:5e:58:05:27:bd:e2:
20:2a:82:f8:e1:0d:b4:c6:a9:c9:a6:04:18:70:f5:
1b:c3:d1:88:6c:0f:79:58:a9:c6:2e:f8:d5:f6:c3:
64:53:1d:4f:7d:f5:09:1b:8c:a6:fe:06:19:a4:1f:
f5:47:72:12:14:32:e4:80:93:a9:00:6d:36:95:9b:
3a:d3:86:04:87:ea:96:ba:86:d1:f2:eb:db:53:a4:
b0:57:25:17:fd:98:2f:68:b9:7e:f7:cf:7d:3a:b6:
ec:74:ec:fd:17:0e:34:f6:80:82:fb:ab:5d:86:f2:
58:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:98:D2:75:47:56:6B:21:E2:35:F7:F0:C9:DB:46:B3:A0:F3:DA:06
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/SJjSdUdWayHiNffwydtGs6Dz2gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.106.0/24
185.100.168.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a2:93:21:8d:f9:2c:f8:8b:2a:10:0d:93:8c:b9:16:39:67:
f0:80:15:dd:55:f4:f7:cd:40:9f:18:12:b5:1a:b9:8e:4d:f5:
ec:64:39:75:80:5e:b4:a9:83:41:ca:9f:4d:82:39:5c:44:8a:
c2:22:01:98:f4:5d:1f:a4:cf:80:4f:ef:56:b1:3b:00:bd:40:
03:72:9a:bf:6a:bb:bd:2c:3b:28:4e:48:0c:cf:26:23:0c:21:
a2:f8:bc:d2:69:d6:ea:36:ff:e5:b3:d1:0c:f0:9d:3c:1a:bd:
e1:4e:92:dd:b4:d7:39:ff:a2:fd:d7:2e:f0:4d:9f:df:1c:f9:
85:79:90:c8:fb:e0:38:a3:47:46:48:22:f3:de:96:7f:5d:8b:
7b:a9:47:8e:48:80:cc:6f:26:75:09:d6:3a:03:89:22:58:f3:
f8:02:62:41:8f:58:7d:a5:ad:86:3e:1a:36:e4:f5:44:98:86:
b6:d9:d6:0e:9f:3e:41:31:c5:ae:75:66:79:da:86:99:4e:33:
6c:6e:65:43:18:9f:bf:93:61:e2:b4:7a:13:78:67:43:89:68:
7c:6e:40:68:39:99:8f:61:c7:f1:cc:9f:8e:ae:19:3a:ba:05:
a0:45:27:29:29:f7:97:a3:f0:9d:e1:a3:fa:0f:e9:8c:c8:59:
a3:9c:5d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:19 2025 by rpki-client