Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/RlCMoXY3ZvXfoaIYHy4hYpfGWYc.roa
File: RlCMoXY3ZvXfoaIYHy4hYpfGWYc.roa (raw, json)
Hash identifier: UgZta8NX9CpHO6Y28mqjkZyescm/yyi0Y9R+5Uyj16E=
Subject key identifier: 46:50:8C:A1:76:37:66:F5:DF:A1:A2:18:1F:2E:21:62:97:C6:59:87
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 018A17A1AA39CF2BAC8FA4BA71AD44FC797B
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/RlCMoXY3ZvXfoaIYHy4hYpfGWYc.roa
Signing time: Mon 21 Aug 2023 10:26:25 +0000
ROA not before: Mon 21 Aug 2023 10:26:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201513
IP address blocks: 213.184.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:a1:aa:39:cf:2b:ac:8f:a4:ba:71:ad:44:fc:79:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Aug 21 10:26:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46508ca1763766f5dfa1a2181f2e216297c65987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:a8:84:94:81:e8:e7:60:ba:c5:2a:9d:e7:
00:80:bb:81:92:48:75:d8:a6:f9:25:e4:9c:d4:57:
4f:a6:90:d7:de:1d:c9:fd:ed:84:9e:b8:38:64:d5:
f7:68:67:69:8a:8f:2f:d0:8c:5e:92:63:2f:e4:22:
78:2c:d4:18:ea:06:4b:87:b3:95:14:10:af:dd:98:
db:0f:72:3a:f2:cb:ca:8b:fa:83:4f:23:a9:8d:83:
b9:35:fe:9c:79:a6:96:d1:7c:a9:5b:c8:05:ca:8d:
31:bb:07:27:c5:31:ba:d7:85:67:12:ac:c3:a4:21:
f5:13:55:b8:eb:08:d5:4f:0f:72:36:f2:8e:98:57:
2a:02:05:3c:27:6d:a3:a4:61:85:d8:2f:4d:c8:06:
56:3f:57:8e:6d:3c:1d:69:81:6e:7f:cd:f0:0c:7b:
b1:20:37:f0:45:3b:8c:22:ae:5a:60:5e:35:3d:48:
65:ae:8b:ca:76:b8:3b:ca:1c:ec:02:2d:b0:19:51:
f8:84:b1:59:18:d6:24:04:79:a7:10:04:25:66:98:
a7:79:1f:bb:aa:96:18:7e:db:2b:fc:cb:6f:73:d9:
93:e0:6a:1b:a1:1c:05:b4:7e:0b:7c:9b:37:d4:1d:
4c:29:de:b6:6b:20:73:c9:0d:37:d3:ba:ac:f3:6c:
b0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:50:8C:A1:76:37:66:F5:DF:A1:A2:18:1F:2E:21:62:97:C6:59:87
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/RlCMoXY3ZvXfoaIYHy4hYpfGWYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.184.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:27:40:41:05:8e:6a:c3:ca:a2:38:09:66:79:3b:b3:58:a2:
c0:c8:f0:af:b2:5f:fd:18:03:88:5c:df:74:18:d3:9b:49:a0:
4e:42:a4:6b:a3:ee:09:8c:14:74:66:f9:96:fc:66:26:cb:fd:
38:93:f2:b4:cd:e2:92:17:79:66:8b:d7:5a:d7:06:4c:e1:e3:
7d:a6:13:d5:dd:74:ec:bc:42:ba:ee:74:85:dc:3a:2d:c9:c6:
fd:a5:07:04:63:a6:3f:da:91:ab:9e:c8:f9:6f:2d:5d:a4:0c:
e2:6d:cf:a5:8f:c0:fd:2e:be:bf:49:37:d6:89:22:e9:50:a6:
71:e7:cf:ee:e4:b0:d2:a1:5b:17:1a:a7:ca:91:81:03:cf:3f:
d6:0c:73:3c:d7:a8:c5:dc:63:29:6a:28:14:f9:2b:81:af:bc:
fc:00:c1:d5:5d:ff:92:da:50:26:ea:45:1b:b3:af:52:f1:3e:
93:05:de:13:3e:e5:7e:ce:03:49:ff:24:1c:97:4f:af:40:2d:
18:f4:2a:01:9e:24:fb:b3:79:ad:e3:6e:ef:08:2f:6b:da:45:
90:84:84:0b:00:a9:dc:af:a0:8e:b5:5f:f7:4f:b2:f1:a8:fc:
70:84:36:f5:21:28:ed:a4:25:f0:cc:c0:2b:2d:55:57:46:17:
03:68:15:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:32 2025 by rpki-client