Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/BUf5kCmS-5z7lcDfnh0U_e_42WE.roa
File: BUf5kCmS-5z7lcDfnh0U_e_42WE.roa (raw, json)
Hash identifier: nz32TGbXDLX/B/i+AXTebLm4JBg8EE6CVLv0ZdmwwZI=
Subject key identifier: 05:47:F9:90:29:92:FB:9C:FB:95:C0:DF:9E:1D:14:FD:EF:F8:D9:61
Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial: 3809CF81
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/BUf5kCmS-5z7lcDfnh0U_e_42WE.roa
Signing time: Sat 01 Jan 2022 04:03:26 +0000
ROA not before: Sat 01 Jan 2022 04:03:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197465
IP address blocks: 46.23.242.0/24 maxlen: 24
46.23.240.0/20 maxlen: 20
46.23.241.0/24 maxlen: 24
2a02:5000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940167041 (0x3809cf81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
Validity
Not Before: Jan 1 04:03:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0547f9902992fb9cfb95c0df9e1d14fdeff8d961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:cc:c9:9b:b9:96:29:58:81:ef:94:dc:ae:
6c:99:24:2d:6c:13:36:46:e9:2b:ad:94:4d:03:53:
e6:ba:fd:da:d0:aa:57:42:a4:d6:d6:70:36:06:37:
6b:57:59:91:a3:ee:5e:b7:35:01:1c:df:d7:d1:3b:
cb:49:77:d4:aa:e3:4e:6a:d9:49:79:bb:36:fb:3f:
09:b8:ff:44:68:fa:72:8a:2d:86:ef:0e:d8:45:bf:
37:7d:bd:07:5a:0f:db:4a:1d:92:2e:ab:d6:88:18:
bb:d3:b2:57:c5:d4:f4:71:77:ac:a7:05:6b:d2:0c:
06:c3:96:ae:bf:57:99:10:9a:94:f2:23:8e:42:af:
3c:1c:52:c4:3b:84:66:d8:88:32:9d:d4:f5:04:4f:
b1:3d:58:27:d3:d5:c8:b0:b3:11:07:0b:f9:4b:0e:
c2:54:b6:64:32:3a:d5:d8:61:06:71:79:44:ea:b1:
93:a6:3c:40:62:c3:16:a3:18:5f:aa:4e:92:20:23:
79:b4:0b:39:8f:1c:cc:b7:ee:2d:7d:ed:b9:01:e1:
37:f7:01:80:cc:65:0f:0b:90:cd:b8:89:43:22:02:
10:fa:50:71:96:bb:27:84:60:16:af:20:c7:0a:11:
35:ba:25:17:d6:a5:63:0b:65:37:43:b5:ba:37:e8:
19:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:47:F9:90:29:92:FB:9C:FB:95:C0:DF:9E:1D:14:FD:EF:F8:D9:61
X509v3 Authority Key Identifier:
keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/BUf5kCmS-5z7lcDfnh0U_e_42WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.240.0/20
IPv6:
2a02:5000::/48
Signature Algorithm: sha256WithRSAEncryption
10:2f:35:e2:ba:c1:08:81:19:65:3a:1d:d6:e1:66:7b:24:45:
2f:cb:e3:78:f5:c9:c6:78:f9:89:5a:6c:ca:e0:48:7b:b6:07:
74:09:00:8d:82:b8:d9:69:5d:cc:55:5b:fa:64:a8:1c:99:7c:
e6:7b:a6:60:ee:59:5c:3f:43:02:72:44:3d:e5:09:8f:44:38:
47:90:95:dd:ca:c3:ad:2b:16:ca:13:72:83:09:32:d3:d4:53:
02:47:0e:19:36:70:ba:ad:ed:2b:bc:eb:ce:17:1f:d4:43:2e:
43:85:04:5e:38:3b:27:e9:ca:b4:d7:10:ed:21:08:8a:46:44:
b5:7e:28:e6:a8:d7:63:2c:ee:4e:85:a6:38:4c:64:5d:12:ff:
4c:99:79:c1:96:d8:bc:30:89:a9:b9:a4:e4:cb:fc:43:df:c9:
be:e0:94:2f:3b:06:d7:cd:aa:d5:76:0c:71:49:77:99:02:4f:
be:18:89:16:5b:14:6f:06:10:c4:e4:84:df:28:c0:ff:b4:61:
c9:0c:4b:8d:0d:a9:6d:f8:43:f0:03:bb:7b:25:de:89:4a:53:
97:37:93:b9:aa:70:e8:77:7c:ce:a2:92:10:1e:59:26:cc:32:
bd:5f:ac:a2:1e:ad:7a:c5:b3:64:25:cb:d8:0f:85:bc:a0:58:
74:a4:53:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:08:57 2025 by rpki-client