Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/VuCcINryTEbuOghiXefdfZ0e4rw.roa
File: VuCcINryTEbuOghiXefdfZ0e4rw.roa (raw, json)
Hash identifier: DV18zBjvqrEMHm2S09ifFBjtZ4mE6+sNPVwEYlhHcX4=
Subject key identifier: 56:E0:9C:20:DA:F2:4C:46:EE:3A:08:62:5D:E7:DD:7D:9D:1E:E2:BC
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018A6FB4CC7929A5573AE8EE4E2B67B9F532
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/VuCcINryTEbuOghiXefdfZ0e4rw.roa
Signing time: Thu 07 Sep 2023 12:53:54 +0000
ROA not before: Thu 07 Sep 2023 12:53:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 46.20.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:b4:cc:79:29:a5:57:3a:e8:ee:4e:2b:67:b9:f5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Sep 7 12:53:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56e09c20daf24c46ee3a08625de7dd7d9d1ee2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f9:04:29:15:59:4b:65:3e:58:24:de:4f:ce:
a1:c3:e1:76:e7:51:79:17:b8:61:1e:f4:d9:00:db:
2f:3b:6a:78:25:1a:ee:91:70:2b:2a:24:f0:63:ae:
8d:5a:75:47:d8:4d:ff:ae:c1:cd:8b:29:e4:60:e7:
e9:75:7b:bd:52:4f:0b:8b:0a:93:a3:28:7c:a3:b9:
7b:90:c0:3f:4b:fa:80:5c:34:17:d7:ae:a0:c2:23:
37:fe:66:e2:dd:fc:47:4f:01:be:2d:f3:ee:17:e7:
bd:97:1a:06:ad:c6:ed:2f:a6:61:aa:45:ad:cb:ad:
89:4e:c2:c2:b8:16:8c:66:19:21:c0:cb:84:18:98:
0d:38:50:46:ab:d5:ef:b5:bd:ae:59:4f:7f:d4:2d:
16:82:ba:25:ed:42:d2:81:7a:41:d6:11:a4:e0:56:
e7:f5:f6:9e:72:d5:eb:ab:b7:08:6f:0c:49:21:34:
b1:0b:a5:87:4d:16:ab:10:c6:22:33:10:4a:24:69:
67:9a:d4:4b:26:b4:91:7a:82:e8:ee:08:f4:11:6b:
7a:fd:9a:ed:c8:69:91:e4:48:35:c9:d5:8b:0a:88:
37:92:6e:d6:bc:5b:7b:db:d8:02:1a:95:ca:73:5f:
51:3f:5b:d4:a3:a4:39:2e:dd:0d:5e:46:b8:c8:d3:
9c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E0:9C:20:DA:F2:4C:46:EE:3A:08:62:5D:E7:DD:7D:9D:1E:E2:BC
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/VuCcINryTEbuOghiXefdfZ0e4rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.107.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:0d:28:85:d4:19:99:bb:32:b9:f6:69:05:2c:02:34:dd:25:
d5:c4:95:9f:dc:ff:39:c2:a4:d2:d7:f7:24:f2:44:46:d7:5a:
94:34:aa:c3:3f:30:2a:0a:c6:59:ee:f8:db:80:17:94:ff:80:
1f:7c:55:ed:25:ec:7d:4e:5b:45:3f:16:ef:a4:26:6b:f1:0f:
fa:7e:80:73:d0:8a:2a:4a:31:e3:74:be:e3:1a:d0:a7:14:00:
aa:1a:fd:f0:bc:46:8a:69:c9:f0:fe:ee:2e:8e:90:ac:60:ce:
ef:ce:51:8c:1a:bb:d2:f7:70:dc:1d:eb:4d:e7:db:f0:7b:9c:
c4:5b:08:42:eb:ae:44:38:c2:b9:4c:23:c9:a5:05:37:dd:ec:
4e:d1:7f:d6:7c:51:e9:98:bb:98:97:e6:d9:12:d2:8d:ad:fd:
89:f8:ad:37:76:bc:a4:c8:ab:66:f6:0d:56:74:93:c6:c9:82:
02:6a:66:f0:de:67:36:0b:ad:55:84:f5:67:5a:1d:8c:90:e4:
d7:40:ba:df:cd:58:39:ad:6a:f2:69:3d:d1:42:d2:0a:82:41:
87:ac:15:1f:ac:62:17:c8:d7:43:14:4f:3b:47:eb:49:2f:0d:
31:c2:40:a9:bb:d9:94:5a:6d:67:77:60:c6:90:25:1a:36:5a:
59:ce:80:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:25:52 2025 by rpki-client