Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/sJFA9AK_e-gFvWcxs1cuNOJRIoo.roa
File: sJFA9AK_e-gFvWcxs1cuNOJRIoo.roa (raw, json)
Hash identifier: YrigvDy0YMes3wWrumj5f/GRbIz/JVQVklbo1CkZJT0=
Subject key identifier: B0:91:40:F4:02:BF:7B:E8:05:BD:67:31:B3:57:2E:34:E2:51:22:8A
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01889C2F1853C1970D227E24C33E9B47C636
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/sJFA9AK_e-gFvWcxs1cuNOJRIoo.roa
Signing time: Thu 08 Jun 2023 18:05:12 +0000
ROA not before: Thu 08 Jun 2023 18:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 46.20.107.0/24 maxlen: 24
46.20.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9c:2f:18:53:c1:97:0d:22:7e:24:c3:3e:9b:47:c6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jun 8 18:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b09140f402bf7be805bd6731b3572e34e251228a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e6:e4:d8:2b:5c:6a:c3:44:95:6b:19:11:d2:
24:38:05:2c:0c:cc:bc:b3:fa:7b:2d:37:46:e8:9a:
15:32:e4:b1:4b:0c:27:4e:97:1c:d0:9d:0c:ac:dd:
c3:4a:1a:63:2f:50:99:ec:47:4f:b4:8e:3a:0b:ad:
9e:2f:cb:72:69:55:d7:8e:c7:46:1d:50:d8:a4:dc:
f5:c6:6f:9a:65:3c:76:a5:49:51:94:0a:ec:33:b5:
73:72:69:33:9f:4c:4e:92:f7:7a:9e:8e:bb:b0:bb:
b4:f3:e6:c1:06:11:65:dc:f2:69:48:06:aa:4f:d3:
a5:14:c8:01:a4:13:85:5f:1b:9d:70:62:54:af:32:
2f:01:52:2c:d1:45:12:fc:44:32:2f:aa:02:0c:d1:
6d:83:41:fa:40:3e:36:0c:e7:c3:c4:8c:fd:84:b5:
91:5e:df:7d:6a:c0:00:09:5b:fe:cb:27:73:ce:d1:
25:6b:72:10:a1:8d:58:79:38:cf:92:2c:74:27:ed:
dc:37:0e:be:ff:80:cb:60:e6:6c:15:d1:8d:47:0b:
33:9d:c8:d1:61:34:05:3a:c2:0a:a1:a0:9d:0e:6d:
45:07:34:d9:e6:1e:cd:22:6f:20:c5:ad:b8:c4:fe:
b3:fe:0c:7f:4f:c4:83:0a:e9:0e:71:46:63:1c:85:
0f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:91:40:F4:02:BF:7B:E8:05:BD:67:31:B3:57:2E:34:E2:51:22:8A
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/sJFA9AK_e-gFvWcxs1cuNOJRIoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.103.0/24
46.20.107.0/24
Signature Algorithm: sha256WithRSAEncryption
55:51:66:09:bb:70:5a:36:2a:36:6a:93:6a:d4:c8:71:a8:1e:
0c:9b:4d:04:58:7f:a5:8a:71:e2:ce:da:d6:ae:fd:86:89:b5:
6c:a9:39:60:dd:9d:e6:75:96:5e:67:a7:e4:d0:45:a4:d4:21:
d6:c3:23:c0:11:9f:39:f9:53:3e:e0:31:1f:c0:c9:f6:53:75:
99:d0:b4:76:a6:59:b3:35:e6:d3:d2:b3:8a:c0:19:70:65:04:
bd:81:78:76:13:7c:47:4b:8f:b9:b6:39:b7:37:13:2b:60:a2:
e4:7e:d5:65:f4:7f:24:ea:6c:e9:be:13:be:dc:32:dc:4f:3d:
18:c8:9b:c6:f6:59:51:e7:45:41:8c:4c:07:64:d1:a6:0a:a3:
f8:38:7a:b4:6b:8c:54:0c:96:f4:0e:3b:d8:02:81:db:1f:6d:
32:fd:39:c5:65:ee:50:8a:9e:4c:b1:53:3d:23:59:5b:95:94:
91:1d:66:6b:0f:51:de:44:07:c2:2a:1b:e2:b2:ef:bd:35:32:
9c:92:20:c6:24:1d:ca:32:f6:b4:92:03:68:5b:29:12:59:d4:
1e:e3:f5:1b:7a:da:8c:f2:4b:b4:02:22:42:92:d9:d8:91:ae:
3c:35:10:e1:0d:68:21:e3:ad:b7:b5:de:5a:a6:04:42:52:ab:
03:56:bd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:39 2025 by rpki-client