Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ovVjwLq_n8tWk2Yp0MHsY6OSlzQ.roa
File: ovVjwLq_n8tWk2Yp0MHsY6OSlzQ.roa (raw, json)
Hash identifier: jTO4ERPvlc0uN9nf3YKuh5ttKUxmp3PWVT5NBVH/PLo=
Subject key identifier: A2:F5:63:C0:BA:BF:9F:CB:56:93:66:29:D0:C1:EC:63:A3:92:97:34
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018C880C53508A5770BB36E21BBD075B7612
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ovVjwLq_n8tWk2Yp0MHsY6OSlzQ.roa
Signing time: Wed 20 Dec 2023 16:25:58 +0000
ROA not before: Wed 20 Dec 2023 16:25:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 46.38.136.0/22 maxlen: 22
212.16.85.0/24 maxlen: 24
212.16.94.0/24 maxlen: 24
212.80.0.0/24 maxlen: 24
212.80.20.0/22 maxlen: 24
185.143.74.0/23 maxlen: 24
46.38.132.0/22 maxlen: 22
46.38.130.0/24 maxlen: 24
46.38.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:88:0c:53:50:8a:57:70:bb:36:e2:1b:bd:07:5b:76:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Dec 20 16:25:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2f563c0babf9fcb56936629d0c1ec63a3929734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d3:a3:02:d2:bf:4b:43:df:7e:d1:39:56:ba:
43:18:00:11:9f:18:2d:22:29:85:65:eb:c5:ef:a9:
c7:28:93:20:a4:70:b8:4e:8c:79:61:9f:bc:93:e9:
4e:4c:5c:bc:4b:78:92:61:eb:3a:7b:4f:d9:25:f7:
85:38:29:3e:07:7e:a8:a2:24:a3:28:29:c8:0a:6e:
cd:b8:78:da:38:54:8a:bc:2f:7a:c1:c7:80:6f:9e:
36:6f:8c:f6:29:3c:0b:83:9c:ef:4e:a0:f2:c0:d3:
e4:8e:0d:26:69:63:95:02:e0:1b:5f:0b:c1:16:63:
eb:f4:7d:0c:70:77:a5:e0:12:56:a9:d6:d8:49:da:
2c:94:13:b6:9e:25:22:8f:f0:4c:2f:4a:7a:79:dc:
2a:01:d0:ec:e9:d1:3e:df:db:07:f5:3c:a7:b5:47:
75:c2:66:ae:ee:0d:a0:c2:b5:91:64:d8:04:6f:f7:
74:4c:50:61:80:ff:73:fe:72:3d:6b:af:ab:36:37:
c7:15:a1:ec:01:d3:87:ca:ba:d0:16:0f:e9:5a:5c:
ea:4a:e8:c4:59:56:4d:ef:12:1f:28:8d:c5:40:46:
aa:8b:a4:19:d6:1a:d5:22:5f:29:31:9c:22:93:c7:
dc:89:23:37:41:0c:2a:17:ec:f0:07:d1:60:dd:c0:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F5:63:C0:BA:BF:9F:CB:56:93:66:29:D0:C1:EC:63:A3:92:97:34
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ovVjwLq_n8tWk2Yp0MHsY6OSlzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.128.0/24
46.38.130.0/24
46.38.132.0-46.38.139.255
185.143.74.0/23
212.16.85.0/24
212.16.94.0/24
212.80.0.0/24
212.80.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:63:e7:0e:10:7a:5c:ef:e9:78:3f:f3:cb:f4:22:d1:3d:fa:
a9:0f:78:81:47:7c:4e:80:5b:84:00:c1:de:8f:11:9e:b4:a6:
94:f6:b1:53:cf:fb:e7:6a:6c:4b:a8:d5:1f:fc:97:e1:35:92:
8b:04:76:62:5e:51:45:40:b9:6e:28:e0:8f:81:6a:ed:b7:cf:
5d:da:0a:0e:3c:45:4d:96:db:62:9e:de:a6:ab:da:81:04:89:
36:2d:d4:f6:06:54:7d:24:80:2b:7a:94:89:69:83:16:43:1b:
af:ae:3c:5a:20:03:e8:d2:27:46:c5:e8:b8:ce:26:28:f7:f1:
69:fe:6a:e6:39:79:11:a5:ff:d4:38:b3:0e:16:5a:e4:82:76:
00:cc:61:c6:c3:59:64:93:ea:a0:a2:3c:67:14:59:e9:dd:82:
bf:c1:7c:ac:24:f2:fb:c6:bf:c7:0a:8c:86:1e:51:00:e7:e8:
64:26:13:55:60:73:3b:da:e7:2f:7a:4a:f3:71:8b:cc:b6:04:
f3:55:fc:82:42:b5:26:15:7a:a4:fd:cf:2f:b2:bb:dd:14:ad:
b0:11:c6:a7:8c:26:5a:26:ed:12:27:3b:05:8e:23:35:a4:17:
d9:6d:9e:f5:5a:8c:3d:e9:30:41:7a:11:33:4a:93:69:ea:5d:
f6:de:09:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:39:43 2025 by rpki-client