Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/E1OWZp2bWn168Kxtw9vRGWfjA7Q.roa
File: E1OWZp2bWn168Kxtw9vRGWfjA7Q.roa (raw, json)
Hash identifier: aJ+IG/ifTcpyhWjlx1VKg2dsZut7Pi8NRp+5LHGpPQQ=
Subject key identifier: 13:53:96:66:9D:9B:5A:7D:7A:F0:AC:6D:C3:DB:D1:19:67:E3:03:B4
Certificate issuer: /CN=173b0d7f0eac665733d92816dd49162d72e221f3
Certificate serial: 01856F7955A12783A3BC87BA68A8DABFFDC7
Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/E1OWZp2bWn168Kxtw9vRGWfjA7Q.roa
Signing time: Sun 01 Jan 2023 22:35:00 +0000
ROA not before: Sun 01 Jan 2023 22:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49821
IP address blocks: 46.175.12.0/24 maxlen: 24
185.236.64.0/22 maxlen: 22
185.236.68.0/22 maxlen: 22
2a0d:9f00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:55:a1:27:83:a3:bc:87:ba:68:a8:da:bf:fd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3
Validity
Not Before: Jan 1 22:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=135396669d9b5a7d7af0ac6dc3dbd11967e303b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:2d:09:b1:b7:0d:c3:98:58:86:3f:72:13:
80:23:91:f3:45:f0:e4:81:d3:e3:68:72:d7:91:38:
8c:19:bc:a1:90:79:07:4e:45:e3:68:3e:ed:c7:86:
00:91:88:0f:e7:86:34:e4:19:40:81:10:c2:14:f4:
66:1a:ec:bd:97:63:7f:91:55:a2:9c:0e:02:a1:8d:
c8:4f:91:15:29:71:eb:7d:81:a3:00:56:4b:8b:2d:
21:98:87:b0:1d:94:f9:5f:20:97:e9:cb:ee:9e:25:
81:ca:a9:79:27:eb:dd:a6:93:79:0b:c0:b3:a1:94:
b8:2a:02:eb:cd:c8:66:51:2a:35:60:58:60:50:f0:
16:e0:da:b6:78:3f:2c:9b:e1:b6:0f:e3:36:ae:a0:
8e:44:5b:3a:d8:01:70:3e:0f:21:97:de:10:ef:24:
e4:16:c6:36:13:c5:d6:05:a7:e3:ca:b7:08:e0:d2:
79:3b:37:ff:ee:e0:89:18:ef:7c:81:1a:1f:94:9b:
e5:77:c1:be:44:50:ec:06:04:5e:ab:b3:0e:ac:b0:
ec:b3:36:89:31:c5:79:1b:ff:39:5f:27:41:ea:e0:
82:4b:3f:9a:d9:59:41:e1:16:a7:e3:70:a3:3c:22:
d6:b4:48:ad:ac:60:30:e2:25:7b:02:13:42:16:f6:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:53:96:66:9D:9B:5A:7D:7A:F0:AC:6D:C3:DB:D1:19:67:E3:03:B4
X509v3 Authority Key Identifier:
keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/E1OWZp2bWn168Kxtw9vRGWfjA7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.12.0/24
185.236.64.0/21
IPv6:
2a0d:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
67:d9:1e:ec:50:05:1a:40:b2:72:0c:70:63:b2:e5:63:4d:b7:
dd:a5:eb:54:a4:3f:ba:cd:2b:9a:7e:5e:48:52:87:10:d0:9f:
45:90:28:10:78:4a:a8:af:09:ec:08:6c:56:53:4d:46:51:ac:
8e:54:05:32:a5:ae:74:1a:73:a0:72:08:7b:fc:a2:92:20:4c:
11:e1:68:03:2c:98:b4:ef:ff:b1:b6:59:3d:74:a3:f3:22:b1:
08:14:4c:3d:0b:47:68:33:2f:9d:43:72:a9:41:06:5e:f3:84:
0a:45:d8:4a:7d:97:51:35:c5:94:d0:77:6d:32:4b:a0:98:f7:
0c:fe:1d:1d:f6:02:ee:96:b1:41:17:4d:68:b7:2a:a1:57:c3:
b9:67:54:ef:05:6d:2c:f0:27:34:ff:b8:6d:c2:73:33:45:30:
6e:9a:46:ee:b8:af:7f:18:ac:6a:54:ca:15:96:05:8d:20:a6:
6a:4f:a5:02:19:25:cb:37:79:dc:23:e9:a5:85:f3:0f:ec:bf:
c5:a0:c6:44:76:21:be:20:aa:43:ed:6e:3b:ae:10:3c:ff:03:
40:5e:fb:c4:97:62:5e:72:3c:3e:5a:cd:1a:45:b5:2d:82:49:
cf:6d:ee:f2:7f:c9:ca:02:df:ef:72:42:23:99:38:0e:8f:92:
2a:55:7b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:22 2025 by rpki-client