Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/gKjT0CjCcpy08FJ3LTDkIcinMrw.roa
File: gKjT0CjCcpy08FJ3LTDkIcinMrw.roa (raw, json)
Hash identifier: +eXg4oFMQgkpajgD+H1/ljjTRtmHG5ohQt8D/NfooUc=
Subject key identifier: 80:A8:D3:D0:28:C2:72:9C:B4:F0:52:77:2D:30:E4:21:C8:A7:32:BC
Certificate issuer: /CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
Certificate serial: 018805154D1A4D4BC84A31DE1E855F6D5665
Authority key identifier: F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/gKjT0CjCcpy08FJ3LTDkIcinMrw.roa
Signing time: Wed 10 May 2023 09:54:22 +0000
ROA not before: Wed 10 May 2023 09:54:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197441
IP address blocks: 46.23.0.0/20 maxlen: 24
2a02:7000::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:15:4d:1a:4d:4b:c8:4a:31:de:1e:85:5f:6d:56:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
Validity
Not Before: May 10 09:54:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80a8d3d028c2729cb4f052772d30e421c8a732bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:ec:5c:e0:f4:a1:77:a7:d4:e6:e5:75:7d:
71:f3:af:d4:51:41:78:02:f6:a9:a3:4c:29:cf:e8:
cb:62:b0:0d:de:32:0d:15:fb:17:ee:56:4f:0f:8b:
19:a0:12:46:de:0e:ca:60:0b:8b:8e:ff:9c:a7:d8:
9a:fa:c2:59:ac:b4:f1:36:65:65:0e:c4:20:f7:93:
c5:07:5e:b2:8c:54:c9:a0:fc:4f:68:d9:5e:30:f3:
9e:74:07:80:70:1a:97:de:16:e8:62:2f:3f:92:66:
9a:58:22:4a:1a:54:91:56:c7:ea:2b:d5:14:8a:87:
6b:11:2b:f7:8d:ed:b3:61:e7:18:6c:1a:f8:58:3c:
a0:46:5c:50:41:7b:22:92:82:12:97:2b:10:40:1c:
8a:90:b0:80:a2:6c:34:d6:5c:af:63:31:f3:4b:15:
9d:9e:a5:5a:12:13:19:85:7b:a7:c1:ab:65:3a:6f:
e0:3a:1f:9b:69:f6:e6:b5:8c:30:d1:93:14:16:11:
04:c0:be:7b:71:db:ee:f9:0b:c8:69:ad:16:56:d5:
ea:fc:3a:86:de:1d:0a:eb:00:3b:b9:82:1a:6e:79:
43:d3:7d:28:86:25:18:53:b3:2d:92:3f:e0:1b:09:
97:f8:69:9e:4b:a9:a4:6a:e9:07:1b:f8:de:d3:1c:
0e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A8:D3:D0:28:C2:72:9C:B4:F0:52:77:2D:30:E4:21:C8:A7:32:BC
X509v3 Authority Key Identifier:
keyid:F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/gKjT0CjCcpy08FJ3LTDkIcinMrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.0.0/20
IPv6:
2a02:7000::/32
Signature Algorithm: sha256WithRSAEncryption
18:fe:58:98:39:ab:32:59:17:ea:2e:8e:6b:a3:e4:ea:cf:bc:
7c:a9:3c:0e:48:90:a2:5c:bd:6d:70:37:a8:0b:3e:9f:8f:b9:
1a:36:33:8b:f8:50:bf:d1:0e:44:6a:b4:09:46:fd:27:94:ef:
89:ba:a4:8f:4b:06:24:d1:d9:75:f3:ff:a8:39:6c:e8:22:aa:
20:52:61:2f:24:7d:01:5c:92:d2:6f:70:78:34:22:60:bf:01:
d0:47:76:ed:49:e8:52:f8:d1:08:87:87:d5:db:38:36:07:1f:
55:27:7f:68:d7:6e:c3:56:f6:6a:8a:ac:8b:63:66:43:c2:5a:
b1:05:93:b7:12:e4:71:19:9b:e2:3d:af:51:22:1b:34:18:24:
45:4c:34:f7:81:6a:7c:9a:1b:b2:7c:fd:8c:3c:c2:81:22:63:
b9:a4:77:ab:03:e2:74:7b:2a:95:7a:7d:e3:11:1d:f0:b7:97:
e7:49:1c:70:18:ef:a2:34:b8:bc:c4:da:53:45:e2:f1:0b:63:
cd:3a:29:86:73:5e:01:97:f3:55:14:52:18:cd:4c:e9:45:64:
56:b9:f0:09:ca:39:d0:d6:64:b6:f2:09:10:76:e6:46:ec:1e:
4e:84:c5:7f:6a:01:4a:6c:cc:6c:1b:12:26:e8:d7:dd:05:83:
ed:4b:ee:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:49 2025 by rpki-client