Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/TDWwOGxHRoac1jtVY4KkLwHzMcI.roa
File: TDWwOGxHRoac1jtVY4KkLwHzMcI.roa (raw, json)
Hash identifier: IK4o5YWaQ3AJIQysngrQ4hZEA54EYFTShlS6tGIsJnc=
Subject key identifier: 4C:35:B0:38:6C:47:46:86:9C:D6:3B:55:63:82:A4:2F:01:F3:31:C2
Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial: 0187E607EE19E6A42566786AFC41F72F11DF
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/TDWwOGxHRoac1jtVY4KkLwHzMcI.roa
Signing time: Thu 04 May 2023 09:11:32 +0000
ROA not before: Thu 04 May 2023 09:11:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50718
IP address blocks: 46.151.202.0/23 maxlen: 23
46.151.206.0/23 maxlen: 23
46.151.205.0/24 maxlen: 24
185.29.89.0/24 maxlen: 24
91.227.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:07:ee:19:e6:a4:25:66:78:6a:fc:41:f7:2f:11:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Validity
Not Before: May 4 09:11:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c35b0386c4746869cd63b556382a42f01f331c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:dd:ec:e1:7e:92:76:f8:5c:38:15:42:8c:
b9:97:1a:f0:0e:6e:08:38:d2:88:fb:af:45:c2:f5:
a9:54:6a:58:e8:ce:92:09:20:3d:0e:bb:3b:a0:03:
32:ef:29:49:ce:2a:fb:31:0c:17:32:e1:d5:26:af:
43:69:33:e0:b6:54:e3:ed:bb:bc:11:20:dc:48:f1:
d9:4f:55:51:c7:cb:93:4a:45:c4:f0:d9:16:2c:16:
ed:73:00:f2:b4:75:15:c6:b1:5a:a1:7d:67:0e:67:
91:8f:17:4f:7a:2c:cb:2c:61:a8:9c:be:92:9e:d7:
e4:7c:bc:5d:4b:25:18:b2:37:7c:d5:59:e1:7e:41:
0b:b4:ca:c7:6d:43:e8:72:7b:6d:09:64:b4:e3:5f:
b5:15:93:be:57:03:d9:98:ee:7e:03:dd:d9:76:b1:
f6:ad:2c:b5:2a:73:5f:65:8d:b8:03:f4:32:ea:be:
c1:71:44:79:25:1c:58:a3:4c:04:94:52:f2:b3:f6:
2a:0f:d1:6d:7b:83:b8:55:81:49:de:38:46:52:ee:
8c:35:8f:62:ef:f0:97:ac:e4:a0:6d:7a:f3:79:41:
d8:e6:59:e3:96:c7:ea:93:73:a1:a2:b3:83:ee:70:
dd:89:99:74:1f:ac:4e:c2:e3:f2:56:cf:87:bd:9d:
74:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:35:B0:38:6C:47:46:86:9C:D6:3B:55:63:82:A4:2F:01:F3:31:C2
X509v3 Authority Key Identifier:
keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/TDWwOGxHRoac1jtVY4KkLwHzMcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.202.0/23
46.151.205.0-46.151.207.255
91.227.236.0/22
185.29.89.0/24
Signature Algorithm: sha256WithRSAEncryption
15:03:a0:4d:bb:a3:e2:54:2b:6e:ae:dc:fd:c8:e6:b1:c6:5e:
5d:cd:2f:1a:5f:ef:0f:93:1e:4b:35:5d:70:cf:c4:e1:b9:a5:
97:81:a7:00:84:0d:f5:11:7b:df:8e:fc:7e:62:f1:b8:e7:46:
f4:3d:44:aa:88:3c:2a:6f:e2:c2:22:91:17:db:4d:10:8d:5c:
b6:00:ba:91:c6:5b:75:e7:06:85:99:33:8a:d4:79:85:ca:e6:
b5:27:3c:fc:78:d5:b4:17:f4:90:f0:4e:98:6b:90:2a:02:fb:
fb:aa:88:50:cb:dd:02:a0:42:d5:42:df:36:43:1c:f1:fb:25:
bf:ee:d1:b5:7c:29:1d:3a:e2:d9:5d:49:ed:4e:66:60:62:99:
7e:67:b3:3d:38:9c:0d:dd:e0:19:52:bd:18:f2:21:84:84:4d:
49:a0:3b:ed:e0:1c:9b:9a:ff:52:4b:ff:cb:cc:ed:86:eb:94:
f4:07:54:21:4b:3e:75:af:aa:c4:8a:d5:30:97:26:d6:c4:85:
73:3c:a5:88:9e:a9:be:22:ac:ee:6a:5b:74:1b:d6:62:ae:81:
a2:ff:a8:ff:4d:3e:ad:8f:77:11:c2:3e:66:0b:57:33:da:16:
f5:0f:62:65:91:ef:cd:66:a6:0f:0c:e8:99:cc:83:c2:fc:f8:
d2:22:86:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:29:26 2025 by rpki-client