Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/9ICOv6MPxVNlTBEOO_zD9FP0r5I.roa
File: 9ICOv6MPxVNlTBEOO_zD9FP0r5I.roa (raw, json)
Hash identifier: XoImlM9PWJrs3HFNZ3os7PoPFTA3F3kj69ZsCdHa98k=
Subject key identifier: F4:80:8E:BF:A3:0F:C5:53:65:4C:11:0E:3B:FC:C3:F4:53:F4:AF:92
Certificate issuer: /CN=9fc218f67243b47da021fda3feb441474b3ceb94
Certificate serial: 01857169AF64905B122229004BEF34607F13
Authority key identifier: 9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/9ICOv6MPxVNlTBEOO_zD9FP0r5I.roa
Signing time: Mon 02 Jan 2023 07:37:09 +0000
ROA not before: Mon 02 Jan 2023 07:37:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51675
IP address blocks: 46.17.112.0/22 maxlen: 22
46.17.112.0/21 maxlen: 21
46.17.116.0/22 maxlen: 22
2a02:2680::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:af:64:90:5b:12:22:29:00:4b:ef:34:60:7f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc218f67243b47da021fda3feb441474b3ceb94
Validity
Not Before: Jan 2 07:37:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4808ebfa30fc553654c110e3bfcc3f453f4af92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:e5:70:01:8e:10:a6:4f:db:77:23:ec:10:
e1:e6:bc:88:47:59:40:c9:16:7e:4f:b8:3b:04:cb:
be:cf:41:9b:34:71:36:15:29:2f:49:51:d9:75:80:
b5:fe:9c:37:23:1c:b2:b0:e0:c4:7b:d2:c5:84:35:
cd:be:62:18:fa:23:e3:97:b2:9e:14:d1:8c:ac:dd:
0f:3c:bb:d1:d6:ea:de:2e:02:9b:2a:87:45:23:f8:
da:a3:32:c6:0b:f8:b4:fd:60:3b:a8:31:78:67:3c:
44:3a:dd:34:4e:7b:e0:f8:05:db:a0:fa:20:05:79:
35:73:0e:ec:52:84:74:62:52:f5:88:0f:bb:5a:79:
f7:08:33:88:09:b7:7d:ce:b9:50:5d:e0:de:c4:95:
b2:6b:0a:29:d8:3d:0c:a3:37:aa:70:11:b6:53:b7:
be:7a:6b:fb:fe:70:46:ae:21:e6:f6:2c:a2:5d:8c:
99:3c:b5:d7:c2:30:cf:2d:0e:19:b1:3f:a1:b4:26:
a7:4f:89:a8:00:32:ec:32:b7:f6:49:24:bd:9b:d7:
8d:8b:f8:45:2e:10:a1:d9:19:5c:be:c2:52:5f:21:
5b:5c:30:50:ae:5c:4d:fe:2f:51:0f:e3:9c:e2:e9:
5c:7b:05:2b:82:9b:2f:23:07:e9:f4:c1:ef:f2:56:
52:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:80:8E:BF:A3:0F:C5:53:65:4C:11:0E:3B:FC:C3:F4:53:F4:AF:92
X509v3 Authority Key Identifier:
keyid:9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/9ICOv6MPxVNlTBEOO_zD9FP0r5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.112.0/21
IPv6:
2a02:2680::/32
Signature Algorithm: sha256WithRSAEncryption
7e:5a:65:a7:6f:85:4a:96:01:14:a8:1e:aa:7b:03:96:b5:76:
5e:ec:60:90:ad:59:54:18:68:eb:11:77:35:7b:91:69:6f:54:
53:f4:89:f1:78:85:04:5e:d5:e6:67:ba:b4:6b:08:8a:be:ab:
a4:38:9f:e1:8c:28:e7:b2:8d:da:8d:f5:84:d4:36:5d:cd:23:
99:ed:44:fd:41:f2:fa:45:71:1c:89:ae:43:ac:b8:0d:1e:59:
56:44:5d:a9:3c:27:04:13:f1:39:07:65:1b:a5:99:77:ab:9f:
2e:dc:2b:ef:a6:12:11:28:b3:71:5a:1f:3f:ca:c7:e1:7c:dc:
ae:9f:80:a3:55:a2:00:de:a4:1e:ce:eb:55:e8:7e:99:4a:02:
dd:4e:e5:b8:ac:13:cd:95:6b:b1:bd:6a:33:88:8a:ad:35:ec:
c2:4c:98:2a:4c:a1:d8:91:fb:69:22:dd:d4:3a:b9:e3:ea:b1:
8b:e0:92:0f:b9:3d:dc:f2:01:f5:29:66:0d:ff:51:a6:23:71:
f9:ff:cd:48:03:e2:65:e8:0c:3e:04:17:b1:42:54:04:19:34:
38:47:c2:09:e6:8f:f5:1c:57:df:c9:c9:3c:52:4f:cf:7c:a5:
c3:43:be:33:22:59:83:8c:24:b7:d7:61:87:e8:70:72:95:28:
96:6e:68:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:32:03 2025 by rpki-client