Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/rIBbJaikx_QTaml1Fq7OcgrocEE.roa
File: rIBbJaikx_QTaml1Fq7OcgrocEE.roa (raw, json)
Hash identifier: LIj+SPITZkpKJ9LL0lkwZadIVp2vHK+W8sdBGZybPtY=
Subject key identifier: AC:80:5B:25:A8:A4:C7:F4:13:6A:69:75:16:AE:CE:72:0A:E8:70:41
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01872DC615EF646CA3ECB465260CCDB4B9D2
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/rIBbJaikx_QTaml1Fq7OcgrocEE.roa
Signing time: Wed 29 Mar 2023 14:29:29 +0000
ROA not before: Wed 29 Mar 2023 14:29:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 46.20.107.0/24 maxlen: 24
46.20.98.0/24 maxlen: 24
46.20.103.0/24 maxlen: 24
46.20.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:c6:15:ef:64:6c:a3:ec:b4:65:26:0c:cd:b4:b9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Mar 29 14:29:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac805b25a8a4c7f4136a697516aece720ae87041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f8:55:74:cb:6d:51:c1:ce:2d:39:e8:77:ac:
a9:39:72:49:e1:27:ae:79:7f:75:34:05:be:40:59:
0d:2a:75:01:25:b5:55:80:bb:6e:90:f8:7b:ba:61:
ff:e7:90:a0:a3:37:c5:59:9c:1b:44:c7:a9:91:00:
f6:4e:62:38:12:6e:c2:fa:84:a2:e5:10:b7:b6:74:
88:b2:f0:10:52:b5:ca:2d:df:ab:d8:44:76:7f:57:
d6:a2:7b:22:9d:d9:1d:c9:a9:a9:ee:bf:75:8d:bd:
a5:ad:19:3f:7c:80:8f:02:6c:f0:1f:94:90:94:88:
b6:44:7b:68:73:dd:5a:37:e9:c0:6b:02:b9:d9:cc:
e3:9f:2c:88:c4:0a:07:5d:fb:1c:a9:6b:5c:b4:9c:
2f:b0:d8:07:23:cd:f3:4f:6f:2c:1e:7b:76:e4:13:
9b:da:0e:8e:0a:23:aa:2c:e1:94:24:79:95:12:f9:
fd:a1:fa:d2:1f:fc:f7:65:35:c0:3d:92:d6:f0:02:
b7:b8:a5:ce:c7:35:28:87:cc:56:69:71:a0:bc:96:
93:b5:ca:05:d7:85:48:84:91:b5:65:cd:04:f2:00:
f1:bf:38:2d:50:97:55:3b:4a:d7:34:2f:7e:84:39:
ae:8d:2b:f5:e8:bc:a9:b1:0e:68:a8:64:c5:0b:32:
64:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:80:5B:25:A8:A4:C7:F4:13:6A:69:75:16:AE:CE:72:0A:E8:70:41
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/rIBbJaikx_QTaml1Fq7OcgrocEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.98.0/24
46.20.102.0/23
46.20.107.0/24
Signature Algorithm: sha256WithRSAEncryption
44:75:98:4c:81:fe:64:87:94:42:57:a9:6d:78:7e:88:f1:55:
e1:5a:92:30:20:63:f2:c7:fc:38:93:e5:0f:75:3d:8d:0a:5d:
ec:8c:7c:79:92:0d:32:4d:ee:e8:6e:ac:4a:1b:3e:cf:2d:d3:
d9:a4:5f:6d:c6:41:d8:d1:c0:67:2c:c3:02:6d:70:14:d4:e7:
71:d0:fa:a8:ad:c8:54:bb:39:1f:76:2d:46:01:49:16:69:bf:
a1:aa:86:8b:37:aa:14:ee:90:20:ca:89:d2:9e:ed:32:d8:84:
36:72:95:76:9d:bf:4f:81:38:d1:1d:5d:de:b1:2e:69:2c:dc:
97:49:10:89:93:13:db:df:00:56:24:f8:ae:d6:d7:f3:76:f7:
6e:17:7a:0f:84:79:af:37:a2:81:39:ba:aa:39:60:5c:50:8b:
de:f2:88:82:20:a6:53:de:96:30:25:c6:19:ae:cb:ba:a6:32:
00:4f:76:48:57:3d:e5:e8:93:3c:00:d6:2a:2e:75:c7:db:32:
63:69:34:4c:60:22:2e:49:e9:31:3d:11:7b:cf:68:2e:97:4c:
d4:a0:07:50:d3:dd:17:dc:9f:7d:f0:25:70:85:c2:aa:88:a2:
73:c1:8e:7c:f5:b0:1f:94:22:29:3f:df:17:1c:06:5c:b0:ad:
ca:e9:40:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:47 2025 by rpki-client