Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/UuUrWmks8FD0tr0WzMJuM_vD6vA.roa
File: UuUrWmks8FD0tr0WzMJuM_vD6vA.roa (raw, json)
Hash identifier: tXBKTKjFlNgu9YXmGZfmpzoCpwss1nQOTcg+DZ7UJiM=
Subject key identifier: 52:E5:2B:5A:69:2C:F0:50:F4:B6:BD:16:CC:C2:6E:33:FB:C3:EA:F0
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01889C2F17F769C0396FB4D97708773887E9
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/UuUrWmks8FD0tr0WzMJuM_vD6vA.roa
Signing time: Thu 08 Jun 2023 18:05:12 +0000
ROA not before: Thu 08 Jun 2023 18:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 46.20.98.0/24 maxlen: 24
46.20.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9c:2f:17:f7:69:c0:39:6f:b4:d9:77:08:77:38:87:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jun 8 18:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52e52b5a692cf050f4b6bd16ccc26e33fbc3eaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2a:10:aa:fd:b4:f7:9c:32:68:b6:d7:ee:b1:
50:32:5a:65:56:99:f1:11:49:37:84:7b:64:d6:17:
ff:ab:54:80:9c:e5:80:d5:df:39:10:da:c8:28:b9:
df:d9:16:dc:d0:94:96:82:c2:25:83:56:0d:64:59:
ed:f4:e9:fd:b1:c5:8b:cb:ea:98:6c:c7:89:c5:fa:
50:99:3f:15:01:a2:35:b9:4a:e5:03:41:3d:ba:9d:
b2:d1:ed:ef:77:d3:b3:8b:03:1d:c4:d3:8c:4c:40:
a7:79:b7:80:fe:4c:ea:94:50:f6:80:0a:06:1d:1f:
e6:78:b9:c4:2e:eb:86:1e:20:11:4a:48:f7:30:32:
3b:73:85:9a:3f:4d:78:26:f0:f9:12:de:e9:6e:72:
d0:d9:8e:29:1f:56:3c:3d:ed:28:e5:59:ea:c7:07:
15:73:da:db:dd:75:62:7c:95:e3:00:00:59:fb:9a:
45:4f:e9:29:19:ec:a0:f0:91:c4:6e:17:82:2e:c2:
9e:2b:f1:dc:fb:1d:76:de:0c:ba:3d:2f:20:71:1b:
80:e9:cb:dd:d2:b8:19:1e:76:71:ab:ef:a2:38:56:
7e:b6:59:50:50:72:65:fd:d2:ab:b3:34:e4:65:63:
48:b3:75:c7:fe:ab:b7:4a:51:5c:4f:ff:24:c7:be:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E5:2B:5A:69:2C:F0:50:F4:B6:BD:16:CC:C2:6E:33:FB:C3:EA:F0
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/UuUrWmks8FD0tr0WzMJuM_vD6vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.98.0/24
46.20.102.0/24
Signature Algorithm: sha256WithRSAEncryption
23:4d:03:3c:62:c4:f7:d2:ab:3e:9b:f4:d3:4b:b5:7a:11:3e:
76:5e:99:74:4b:e2:f5:1b:47:1b:01:c9:4b:e1:bb:75:89:ec:
7c:1e:23:ec:fa:a1:05:4c:00:c7:23:a7:fb:7c:92:ef:5b:1a:
25:9f:8a:60:80:2a:b2:a6:dd:3c:44:5d:a0:62:67:5c:e8:ae:
6f:6a:b0:7a:37:e9:52:16:9e:cb:81:fc:15:9b:1f:7a:7b:b1:
ff:f0:b4:cd:97:b0:03:ae:2c:22:e1:2a:c3:a9:94:f2:41:1c:
11:44:e8:87:76:ba:17:56:50:4c:e8:fe:f3:a5:92:ba:9f:a2:
61:dc:6c:7e:a9:81:db:ac:58:b5:ad:ee:cf:1e:a1:eb:08:e0:
b9:eb:4b:46:2f:24:c0:e5:97:d6:82:4d:06:98:3e:03:40:3a:
e5:47:53:9f:75:65:74:16:75:4f:03:a4:65:86:8e:20:10:27:
fd:e4:db:f7:82:21:97:3c:49:53:3b:94:89:6d:88:89:33:93:
24:15:ad:a3:7f:9f:88:a6:0a:ea:27:ce:b5:fa:26:77:54:8a:
28:44:55:3c:d1:cd:7d:a7:47:c3:4f:f9:07:62:13:1f:c2:cc:
9d:32:1e:1c:ea:e3:e3:2e:53:5d:80:87:4c:0e:11:fd:e9:ec:
c7:8e:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:57 2025 by rpki-client