Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/MAyJo6I0Odx3_0jjPys_-wF_fEA.roa
File: MAyJo6I0Odx3_0jjPys_-wF_fEA.roa (raw, json)
Hash identifier: Ug3obkE986m43TptupVGcTjtBxERDrZkirk1iKfPUIQ=
Subject key identifier: 30:0C:89:A3:A2:34:39:DC:77:FF:48:E3:3F:2B:3F:FB:01:7F:7C:40
Certificate issuer: /CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Certificate serial: 382C0481
Authority key identifier: 1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/MAyJo6I0Odx3_0jjPys_-wF_fEA.roa
Signing time: Sat 01 Jan 2022 08:55:31 +0000
ROA not before: Sat 01 Jan 2022 08:55:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41495
IP address blocks: 46.227.200.0/21 maxlen: 24
185.134.196.0/22 maxlen: 24
2a01:9e00::/29 maxlen: 32
2a01:9e00::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 942408833 (0x382c0481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Validity
Not Before: Jan 1 08:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=300c89a3a23439dc77ff48e33f2b3ffb017f7c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:00:58:9a:df:f9:11:83:cf:40:54:ce:a7:35:
57:5f:09:58:2b:91:a9:cc:ee:5f:92:55:98:17:30:
b3:06:84:53:bd:e8:f4:17:d7:64:2e:70:36:3f:64:
5a:87:a9:4c:e0:7d:32:4a:2d:1a:61:da:a8:78:1d:
9f:96:ac:d7:e8:b1:c6:06:93:2c:9b:c1:46:a0:47:
c1:ee:ee:21:46:fd:e0:f9:65:47:0e:cc:39:62:fa:
49:0c:24:2f:4e:b9:3e:dc:97:6f:bd:a2:98:d3:f4:
1b:3b:d6:47:ae:61:88:fc:2b:d3:e5:35:3e:94:18:
80:79:41:e0:7a:21:7b:43:73:8c:b1:08:2d:1d:eb:
93:0f:14:3b:3c:98:1b:22:2e:c2:54:d5:7f:f8:c1:
18:39:37:6a:f8:ae:ae:9c:6d:f8:9e:97:45:e7:5e:
9c:a5:5f:2c:b8:1d:c8:3b:d6:e0:3b:63:52:3c:cb:
65:dd:d5:32:ae:f4:dc:a0:cc:b3:a0:36:de:41:19:
86:4c:0a:bd:b9:c2:00:3b:0f:1b:2e:63:f3:34:9f:
27:a3:74:8a:cd:8f:62:93:69:ef:de:1e:66:74:12:
2c:29:0a:ee:69:00:d2:50:2e:87:8a:af:71:bc:63:
c7:96:18:46:96:74:b2:3d:4b:2c:a7:8d:f3:4e:f2:
fd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0C:89:A3:A2:34:39:DC:77:FF:48:E3:3F:2B:3F:FB:01:7F:7C:40
X509v3 Authority Key Identifier:
keyid:1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/MAyJo6I0Odx3_0jjPys_-wF_fEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.200.0/21
185.134.196.0/22
IPv6:
2a01:9e00::/29
Signature Algorithm: sha256WithRSAEncryption
06:19:f1:dd:02:90:42:71:fe:1a:da:56:36:25:db:ee:1c:c8:
10:31:2a:4f:f4:b5:22:04:95:f7:9e:4b:c5:4e:37:49:11:e0:
86:02:60:1b:58:25:1a:da:dc:27:d5:59:89:ef:0e:9c:50:76:
19:7f:8d:b5:4b:25:b0:c0:bf:72:e7:a7:7b:08:b6:38:2e:48:
93:56:51:9b:d6:88:8c:ca:f3:e2:de:61:28:11:9d:ec:81:30:
7d:1e:19:77:19:58:4c:f6:7a:83:74:08:2f:15:c7:a0:f8:40:
d6:d7:64:ce:51:0a:18:30:e2:80:2f:de:e9:55:ed:8a:3d:fa:
6f:94:25:f0:67:7c:e5:47:09:bf:e4:1c:5e:5e:8a:9c:b2:8b:
c6:56:d1:de:f2:45:09:28:10:ea:ee:86:53:f3:3c:dd:70:4c:
5a:2a:ab:80:49:cd:59:04:ff:10:11:e6:fe:b1:40:8d:f8:01:
70:bf:96:bb:95:fd:bf:ab:d9:65:42:c0:8f:ed:70:1e:13:4a:
c1:b4:58:6f:7c:c9:2a:bc:e5:70:f1:ea:8d:c4:20:e7:26:63:
d9:9e:12:c2:18:90:39:72:5e:f1:0e:56:09:86:f4:c9:cf:a1:
bc:82:38:22:93:a5:3b:3d:c3:a6:5f:ff:95:6b:da:46:81:f6:
ac:b8:74:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:12 2025 by rpki-client