Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/aZIZh_2lkwSOdiCI_hyt96zIgkE.roa
File: aZIZh_2lkwSOdiCI_hyt96zIgkE.roa (raw, json)
Hash identifier: BfdlDHVOQjBi71AJLs9+vEYw+qNefaExvjZTvgWWoC8=
Subject key identifier: 69:92:19:87:FD:A5:93:04:8E:76:20:88:FE:1C:AD:F7:AC:C8:82:41
Certificate issuer: /CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Certificate serial: 018571154C6C13BB64706AB4C67015F12C5C
Authority key identifier: B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/aZIZh_2lkwSOdiCI_hyt96zIgkE.roa
Signing time: Mon 02 Jan 2023 06:04:59 +0000
ROA not before: Mon 02 Jan 2023 06:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56450
IP address blocks: 46.229.112.0/20 maxlen: 20
46.229.122.0/23 maxlen: 23
2a04:4880::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:4c:6c:13:bb:64:70:6a:b4:c6:70:15:f1:2c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Validity
Not Before: Jan 2 06:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69921987fda593048e762088fe1cadf7acc88241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:b2:4f:39:fa:14:18:0f:0b:45:69:0e:08:
97:23:9e:1d:9d:ee:72:a2:1c:12:d4:59:c3:01:66:
b4:3e:5b:d3:ce:da:2c:84:8f:fd:05:7c:ba:04:f6:
7a:c2:b2:c6:1f:90:10:ef:e0:37:7b:cb:bf:14:eb:
79:2d:b9:1e:39:25:78:d9:bd:34:9d:42:01:ca:cc:
42:50:f8:d9:9a:d9:5c:c3:71:d9:c7:44:4f:f8:86:
70:86:32:e7:bc:0c:f9:b0:07:d3:bf:c5:90:9f:a8:
30:f2:0f:e4:06:2a:a7:b8:6f:c3:85:f8:57:81:9d:
74:5f:0a:5e:6f:e5:fb:80:4a:41:2c:c4:0c:66:a9:
7e:3d:de:5a:56:e1:dd:22:9a:5a:d8:fc:5c:78:82:
0b:23:88:f7:1d:ad:b2:29:e7:4e:87:fe:c9:e1:ce:
cb:c6:5e:0b:8d:91:d2:a2:7e:e6:ac:b2:06:3b:4b:
74:22:bc:76:3f:c1:a0:e3:8f:67:47:91:0e:4c:19:
61:28:31:84:e0:bf:16:ca:16:cc:27:48:90:c1:2e:
a1:95:f6:ba:9b:fe:91:14:1d:e9:95:3b:3b:e2:ed:
cc:0f:d0:3c:a9:70:ab:2d:cf:ed:ba:93:04:09:6e:
fa:bb:ff:04:5b:e6:66:81:8d:15:02:ae:a9:09:94:
84:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:92:19:87:FD:A5:93:04:8E:76:20:88:FE:1C:AD:F7:AC:C8:82:41
X509v3 Authority Key Identifier:
keyid:B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/aZIZh_2lkwSOdiCI_hyt96zIgkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.112.0/20
IPv6:
2a04:4880::/29
Signature Algorithm: sha256WithRSAEncryption
2f:70:d6:fc:bc:98:22:cb:3c:26:26:3c:44:2e:80:17:95:ee:
41:a0:1e:76:c4:06:0f:bb:8c:dd:4f:81:58:95:50:5b:53:f9:
34:41:bc:1a:25:57:d0:f4:74:bc:9a:62:92:d9:4d:e3:a0:09:
c5:d6:0d:ca:6a:08:69:2e:34:6c:56:57:52:60:ea:cc:db:da:
2d:41:68:bc:2d:c7:ae:20:15:5d:06:b2:9f:5c:83:8b:05:90:
e9:ac:98:24:f9:4b:d8:82:76:9d:e9:66:fa:62:1c:8c:c6:93:
18:d6:b8:25:57:19:da:32:cf:79:dc:4f:f5:0f:7f:fe:85:0d:
f2:8f:75:6e:df:00:9c:19:b7:1e:02:04:3d:82:68:b0:1e:42:
be:4c:90:b5:f1:16:d6:ba:eb:ee:b5:b9:0e:02:29:d3:de:97:
af:ee:5f:1c:1b:fa:f5:e7:b3:5b:70:1e:18:d1:d3:b7:80:77:
1e:c4:50:bd:53:73:69:e8:01:37:be:4c:a6:89:7a:ea:00:94:
44:1f:24:22:a5:ef:1b:67:76:e7:b7:f6:2b:55:a3:32:17:a1:
09:d7:d2:b9:a9:31:97:72:a8:0e:8a:c1:ec:a4:3f:2a:9a:5b:
d0:bb:5c:9d:f5:de:08:5d:d5:46:1e:6c:0f:bb:6b:a9:6b:06:
9f:ae:96:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:07:01 2025 by rpki-client