Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/nQ53feGzIOBP5Ery05WEQbx5j0Q.roa
File: nQ53feGzIOBP5Ery05WEQbx5j0Q.roa (raw, json)
Hash identifier: FanP/E9kcpMvjxAnFX++T2dYpjCW5KiGTd1qAgnm27g=
Subject key identifier: 9D:0E:77:7D:E1:B3:20:E0:4F:E4:4A:F2:D3:95:84:41:BC:79:8F:44
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01872E20B95A199C26C31A813B508CC379F2
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/nQ53feGzIOBP5Ery05WEQbx5j0Q.roa
Signing time: Wed 29 Mar 2023 16:08:29 +0000
ROA not before: Wed 29 Mar 2023 16:08:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206505
IP address blocks: 46.20.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2e:20:b9:5a:19:9c:26:c3:1a:81:3b:50:8c:c3:79:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Mar 29 16:08:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d0e777de1b320e04fe44af2d3958441bc798f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cb:b0:70:22:46:50:bc:05:8f:5d:e1:7e:76:
2e:d9:91:db:55:1f:c9:ed:01:88:ca:51:d2:aa:77:
66:2a:87:18:0b:6e:07:2b:5f:aa:63:49:3c:94:68:
46:e1:84:1d:76:64:07:e2:e6:fc:08:66:04:c3:6d:
15:cf:3d:7d:6a:90:5b:72:f5:05:62:44:80:bb:80:
6c:42:cc:a8:53:64:de:87:71:a1:10:7b:71:e8:e5:
20:d8:37:6e:52:6a:2d:b1:d8:86:64:3e:f2:1a:d8:
4c:e4:11:ad:d2:a2:ab:4a:9f:2b:8d:8d:b7:9c:13:
48:93:ed:92:33:47:9d:99:42:fa:ea:51:9c:ee:c2:
b1:92:58:8e:ce:15:b7:09:b5:f8:28:27:a2:5b:f5:
47:e8:b1:a7:64:f7:6c:08:79:08:f0:93:43:93:7b:
20:d9:67:d9:66:50:99:53:35:b3:06:cd:32:4e:95:
82:6e:d3:6e:13:9c:95:b2:c8:0b:f9:d7:69:0e:2e:
8b:3c:7c:bf:84:37:bb:46:be:48:aa:30:b9:84:7e:
2b:c9:de:f9:a0:a0:b5:31:3e:6b:a3:c9:48:a8:ea:
08:aa:fc:7d:8f:df:30:48:a3:77:68:54:9e:43:da:
bf:4e:b3:2f:42:d6:66:8f:52:1d:a6:cf:e3:c0:3e:
df:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0E:77:7D:E1:B3:20:E0:4F:E4:4A:F2:D3:95:84:41:BC:79:8F:44
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/nQ53feGzIOBP5Ery05WEQbx5j0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.100.0/24
Signature Algorithm: sha256WithRSAEncryption
39:05:e7:d9:5e:ff:ed:02:ed:fe:35:3d:25:94:a0:84:c1:a6:
3e:8f:02:b8:e6:90:55:e5:e9:d3:fd:11:9b:f4:f6:d4:cd:f6:
fb:32:2d:a0:7a:a3:90:40:88:ff:e4:ec:46:35:5f:f1:ed:e1:
9e:d9:05:55:7b:24:e9:37:63:79:c5:64:14:f5:01:25:49:64:
bc:48:bb:8e:3f:89:da:bb:3e:44:9e:2a:21:65:46:25:d4:b9:
1f:4d:6d:ec:65:c5:5d:39:1e:f2:8c:ee:9b:73:2c:29:98:36:
c1:a9:82:09:64:73:83:16:4f:9a:c3:87:d8:65:95:7c:2e:a1:
0b:72:3e:5e:09:51:87:bf:c6:0c:37:11:b9:85:a9:c5:88:a4:
6c:3f:2e:82:57:cf:29:c5:8e:38:0f:eb:09:ca:c5:09:76:5a:
99:e6:89:6c:f2:d8:45:7e:48:aa:ed:05:91:4b:04:da:18:f7:
fa:bb:7b:93:0d:57:60:95:a7:2c:60:f4:c3:7e:61:47:6c:1d:
ab:13:78:6a:fa:1b:1f:66:d7:d1:cd:af:63:24:40:aa:a0:39:
58:c4:bd:02:04:57:54:c2:f3:e4:b2:8a:21:ed:66:03:65:bb:
8d:b7:63:b6:2d:92:a8:65:59:5e:0a:b1:32:88:5c:5b:16:41:
b1:2d:1b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:18:37 2025 by rpki-client