Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/oLDHzyUy2S0CQFReJyZ7nE1O-WM.roa
File: oLDHzyUy2S0CQFReJyZ7nE1O-WM.roa (raw, json)
Hash identifier: 3mig3nQmW1ywg5VHAOKQGhuQK5xWw9PIK871KEbIlUk=
Subject key identifier: A0:B0:C7:CF:25:32:D9:2D:02:40:54:5E:27:26:7B:9C:4D:4E:F9:63
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01887BEEDDF35B62DC1A5357D027D4066733
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/oLDHzyUy2S0CQFReJyZ7nE1O-WM.roa
Signing time: Fri 02 Jun 2023 11:47:11 +0000
ROA not before: Fri 02 Jun 2023 11:47:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 46.20.98.0/24 maxlen: 24
46.20.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7b:ee:dd:f3:5b:62:dc:1a:53:57:d0:27:d4:06:67:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jun 2 11:47:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0b0c7cf2532d92d0240545e27267b9c4d4ef963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:22:2d:73:ab:db:dd:95:b8:72:c0:53:23:93:
48:3b:17:e1:2e:9b:be:aa:0e:8e:4f:16:44:a1:10:
3b:9b:42:2a:aa:98:f0:fa:aa:43:70:42:49:ff:e8:
51:23:ef:35:3c:1d:19:f4:12:9f:50:b8:a5:d7:3b:
8e:40:5b:1a:81:de:d4:78:ac:a4:5a:95:a5:27:73:
c8:0a:18:59:3f:64:d7:d5:b7:28:d8:d8:8b:9f:78:
0d:16:81:89:38:58:ff:ce:be:a0:3d:ed:91:50:13:
fd:78:e3:88:f2:67:18:ad:82:e9:19:9f:e9:a7:f3:
0b:64:f3:4b:18:63:40:09:bd:fa:74:10:3e:f0:a7:
71:e0:8a:8a:6e:98:8b:a5:de:98:2b:0b:79:aa:1e:
23:59:b8:bf:17:75:8e:ca:71:7b:72:3c:90:b9:89:
7c:6c:54:48:aa:d4:6c:71:91:c8:cb:a9:18:11:1a:
79:b5:3a:27:0d:ba:cf:3d:56:ad:a1:87:fd:92:2b:
c8:4c:82:0a:c6:7b:96:07:a0:d3:df:8f:0a:75:14:
6e:29:a7:25:90:26:b3:ef:2c:f6:f4:9f:b6:80:2e:
52:fc:10:81:35:06:29:75:14:10:29:5e:01:36:ba:
80:39:5d:a5:a0:2c:7c:57:22:17:17:07:79:cf:a2:
89:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B0:C7:CF:25:32:D9:2D:02:40:54:5E:27:26:7B:9C:4D:4E:F9:63
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/oLDHzyUy2S0CQFReJyZ7nE1O-WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.98.0/24
46.20.102.0/24
Signature Algorithm: sha256WithRSAEncryption
56:0d:a1:12:c6:93:94:3c:19:3f:d1:27:af:9f:2a:0e:b0:7c:
48:10:2f:d1:4e:20:69:c5:2f:31:96:cb:b9:92:08:1c:35:5c:
c6:e8:af:72:c7:8e:ce:ce:b6:e1:a5:03:2b:57:12:47:b4:2e:
36:22:d2:c0:ce:18:2f:a1:0e:dd:ef:5f:d6:74:70:ab:60:7e:
61:ef:57:39:bd:7a:0f:a1:1d:ad:45:a0:7b:74:5c:17:0e:21:
24:50:f4:8e:4e:92:c8:83:5d:36:ec:d8:32:0a:7f:79:c3:36:
a5:a9:64:e1:d2:30:6b:bb:32:7e:5b:15:09:94:ae:b6:77:8b:
36:4e:00:4e:d1:96:6c:ca:0d:f7:52:46:98:f7:2c:2e:ed:24:
88:9d:f6:b1:0a:67:2a:bd:31:d6:5e:45:d6:97:d4:c7:26:ea:
aa:71:99:de:b8:8a:a0:cd:66:a1:d1:eb:00:bb:29:62:fc:32:
47:5f:0e:14:29:ac:d4:db:9b:38:d1:91:39:b6:2f:04:bf:5f:
b6:d4:a6:9a:a9:b8:28:d6:2c:2a:24:b1:9b:96:e9:d7:34:79:
5d:5c:f0:12:b2:98:de:c5:11:40:97:51:32:c8:ba:43:a0:e6:
58:34:74:1e:54:64:a4:6f:5b:bb:c3:39:a1:cf:50:f3:3b:40:
3e:d4:e9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:20:18 2025 by rpki-client