Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/_C6J8fQIo0A84V--5qZtOWRj5y8.roa
File: _C6J8fQIo0A84V--5qZtOWRj5y8.roa (raw, json)
Hash identifier: /L1pKQZlSniqTDEWPMKxcxS7LXDTh5i3l0h+M1r/veY=
Subject key identifier: FC:2E:89:F1:F4:08:A3:40:3C:E1:5F:BE:E6:A6:6D:39:64:63:E7:2F
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018C967411FE29F96962A44B90C8815DC61E
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/_C6J8fQIo0A84V--5qZtOWRj5y8.roa
Signing time: Sat 23 Dec 2023 11:33:58 +0000
ROA not before: Sat 23 Dec 2023 11:33:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.110.0/24 maxlen: 24
46.20.108.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
46.20.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:96:74:11:fe:29:f9:69:62:a4:4b:90:c8:81:5d:c6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Dec 23 11:33:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc2e89f1f408a3403ce15fbee6a66d396463e72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:40:ae:db:e5:90:cb:65:ee:d1:22:7b:1f:
ba:c2:d9:ae:46:c0:65:7e:9d:17:49:ca:ec:c4:16:
c0:5f:61:b2:9c:3b:25:fd:40:bc:fd:a6:32:56:d2:
af:a7:05:6f:1d:ca:c1:e6:82:b1:2c:98:9a:72:88:
cc:24:95:92:2b:c0:b6:cb:26:d8:fa:f4:c5:9b:ad:
0a:dd:60:d8:78:97:5a:24:fe:dd:8a:73:7b:34:65:
ab:74:f3:26:1f:ba:ff:ae:8a:58:cb:76:96:1c:a8:
0c:44:90:f9:fe:0f:3d:54:d5:da:bc:ea:bf:53:56:
06:9e:89:7f:12:c2:a0:3d:cc:7f:40:5a:cc:6a:3a:
60:07:13:f3:3c:c8:45:ee:77:85:a9:d2:d8:b1:95:
0d:d0:86:79:28:2a:bd:7e:4d:76:39:7b:d2:ca:08:
7f:b5:b1:52:06:19:69:55:30:54:2a:de:7f:f2:b5:
57:b1:8a:0d:cf:cc:05:1e:76:31:86:31:f5:db:eb:
f4:21:ea:cb:05:96:e3:fa:24:fb:d7:ce:2c:61:c8:
a2:4c:50:9f:14:97:3c:30:8c:31:09:24:68:fe:b1:
47:30:e9:55:54:e5:af:ed:59:62:45:af:a8:ee:34:
e2:32:40:30:4e:4e:2a:5a:38:9f:54:63:5c:84:50:
91:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2E:89:F1:F4:08:A3:40:3C:E1:5F:BE:E6:A6:6D:39:64:63:E7:2F
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/_C6J8fQIo0A84V--5qZtOWRj5y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.101.0/24
46.20.104.0/24
46.20.108.0/24
46.20.110.0/24
185.160.194.0/23
185.169.221.0-185.169.222.255
Signature Algorithm: sha256WithRSAEncryption
6d:1c:87:1f:ff:14:11:85:16:ba:88:7d:ac:32:8e:04:2d:33:
00:37:09:97:19:b4:de:7e:66:42:59:91:a9:0e:ff:de:ec:20:
99:11:e3:76:01:7a:08:f0:5c:a3:8f:46:d2:49:f6:a4:71:53:
37:5b:f8:a7:3f:af:c8:19:8f:76:94:27:b5:58:f4:12:fc:1f:
d4:cf:86:19:b8:e4:76:4a:d5:65:13:1c:fb:4c:2e:ec:55:a0:
b1:0f:fa:c1:70:51:25:72:f5:46:cf:1e:26:8a:82:98:a8:c0:
85:b1:1e:05:21:31:e6:0e:c8:fd:d3:04:eb:6a:20:4e:48:ea:
cd:28:02:6c:ca:fe:fd:1c:6e:c3:c3:a2:33:bd:1e:d9:0e:43:
fa:cd:3b:c1:02:6b:bd:b3:0c:16:0f:e6:68:f3:73:a0:95:70:
07:c2:0a:6c:5e:3b:e3:39:00:99:bb:22:4a:e9:2f:7d:dc:43:
c2:e7:18:00:fa:b0:de:b7:e0:aa:72:ea:21:ff:d2:9b:a3:cd:
00:c3:97:f3:35:0d:49:88:dc:7d:84:a1:df:69:91:89:4b:57:
0f:22:18:a8:3b:84:b8:45:fc:e7:75:9a:2a:5e:2a:f5:62:fc:
e0:e8:14:83:b7:dd:06:5e:37:23:85:91:01:f2:77:41:9e:30:
f1:b6:f8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:23:30 2025 by rpki-client