Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/8vD3S0IQ7enZ7AjKGyM-wb1-fKA.roa
File: 8vD3S0IQ7enZ7AjKGyM-wb1-fKA.roa (raw, json)
Hash identifier: vJ6Bz+ntQl7/hlGWv1UyDv0btd6pogn+ywqa4fj1BuI=
Subject key identifier: F2:F0:F7:4B:42:10:ED:E9:D9:EC:08:CA:1B:23:3E:C1:BD:7E:7C:A0
Certificate issuer: /CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Certificate serial: 018570CC0B47031DE21A5E5344BD8B0A0656
Authority key identifier: 5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/8vD3S0IQ7enZ7AjKGyM-wb1-fKA.roa
Signing time: Mon 02 Jan 2023 04:44:58 +0000
ROA not before: Mon 02 Jan 2023 04:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42816
IP address blocks: 46.16.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cc:0b:47:03:1d:e2:1a:5e:53:44:bd:8b:0a:06:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Validity
Not Before: Jan 2 04:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2f0f74b4210ede9d9ec08ca1b233ec1bd7e7ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:4b:f6:bb:64:1e:97:d3:41:2c:0d:31:22:
0b:b6:da:29:5b:56:c3:c7:f4:c1:82:6a:34:ba:4c:
43:bb:d1:b0:b4:c0:a9:a0:56:18:d2:f0:91:33:5b:
f4:32:99:e4:53:6e:f2:86:71:25:0b:71:b2:d8:ba:
c4:cb:8a:99:ce:73:f6:28:fd:27:1a:b8:29:e5:f6:
5d:6c:f2:68:e1:47:8a:c2:c7:4f:e8:d2:c5:b0:01:
38:86:2a:22:8a:6d:7f:e1:b1:fe:30:5c:72:25:72:
eb:c3:d3:25:43:ad:a8:36:5a:a3:2e:7c:74:e9:15:
ee:2d:bb:3a:37:03:3f:b0:df:c9:d6:86:1f:a0:9e:
31:ea:06:19:c2:0c:1f:58:30:46:8a:4a:0a:c6:58:
b9:5c:0e:13:6a:49:6f:f9:cb:bb:70:c4:20:92:84:
50:b3:3a:3c:86:ad:c4:16:59:51:d5:e9:58:63:ae:
c3:01:78:37:c0:1b:96:9c:0f:1e:4c:e0:b2:24:35:
9e:44:d6:11:3e:dd:18:77:ed:3f:03:4d:a0:8e:51:
b1:ad:85:6f:a7:1e:3b:5c:5e:89:26:a6:c4:f8:e8:
5b:b3:40:1d:51:33:8e:fe:65:01:ea:3b:de:df:1d:
41:1e:02:42:b6:8b:f8:97:84:bb:8e:40:14:73:03:
58:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F0:F7:4B:42:10:ED:E9:D9:EC:08:CA:1B:23:3E:C1:BD:7E:7C:A0
X509v3 Authority Key Identifier:
keyid:5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/8vD3S0IQ7enZ7AjKGyM-wb1-fKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.39.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:58:72:74:88:b9:8a:05:da:1f:4e:f0:c4:89:db:bf:b5:70:
0b:24:fe:c3:0e:07:ac:07:c3:c6:3c:3b:eb:ab:e8:8f:4b:1a:
72:f5:78:04:0a:45:49:d3:df:2a:12:ba:fa:39:57:f5:d7:73:
51:11:63:aa:dd:c2:e0:9a:98:50:10:95:c0:46:27:90:4c:be:
06:52:ae:a4:8f:53:08:5c:b9:d7:67:79:c6:ef:ce:fd:a8:f6:
e3:f2:bb:aa:bb:c8:ff:5a:51:cc:b7:17:e4:2a:0c:c1:7a:0b:
eb:b3:fc:42:e3:79:53:41:d4:6a:73:db:d6:b2:4f:0e:44:ee:
96:3a:be:dd:07:cf:95:2c:2d:c8:23:7e:6f:00:ad:e4:db:22:
c7:7e:6a:b1:bb:79:d1:62:73:57:30:20:95:93:3c:ea:bd:4f:
02:d9:c0:ed:f9:fa:06:1f:c0:4c:95:61:9d:28:73:67:e7:79:
f6:0d:b9:b2:0e:6a:90:a6:70:7a:68:18:4b:9f:e7:83:5f:06:
4d:52:dd:31:13:2d:07:7c:54:d3:97:2e:c8:84:d5:f0:8c:16:
ec:b1:11:93:f6:b2:7d:87:b7:43:55:5b:fa:70:3f:24:db:1e:
88:65:1d:85:4e:9e:65:6c:94:78:88:5e:70:fb:1e:2f:d7:1c:
00:e4:fd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:49:54 2025 by rpki-client