Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/t-mdqzalH6pKhYRSX0wvd3QBDKs.roa
File: t-mdqzalH6pKhYRSX0wvd3QBDKs.roa (raw, json)
Hash identifier: nkTPrlAYbcbyrY3Gvd055dZzUUjbHfX9hiFfXxGelXo=
Subject key identifier: B7:E9:9D:AB:36:A5:1F:AA:4A:85:84:52:5F:4C:2F:77:74:01:0C:AB
Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial: 0187E608D84F0D6BFF24B7312F2345E4E57E
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/t-mdqzalH6pKhYRSX0wvd3QBDKs.roa
Signing time: Thu 04 May 2023 09:12:32 +0000
ROA not before: Thu 04 May 2023 09:12:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60587
IP address blocks: 46.151.200.0/24 maxlen: 24
46.151.201.0/24 maxlen: 24
46.151.204.0/24 maxlen: 24
185.29.88.0/24 maxlen: 24
91.227.230.0/24 maxlen: 24
45.82.168.0/22 maxlen: 22
2a00:a6a0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:08:d8:4f:0d:6b:ff:24:b7:31:2f:23:45:e4:e5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Validity
Not Before: May 4 09:12:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7e99dab36a51faa4a8584525f4c2f7774010cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:c1:59:3e:41:b2:84:bb:36:98:ad:9a:5f:
97:ad:83:e1:35:d9:f6:9a:2c:71:eb:cc:20:72:5f:
33:5c:ee:ee:ff:1f:56:42:b2:56:55:74:96:f6:df:
b7:f4:8c:15:d3:45:6d:5b:92:e2:40:cd:1b:ec:78:
67:fe:df:23:b4:1f:d9:41:a4:a9:08:59:a2:fb:6d:
dd:87:7e:87:37:ef:a4:23:c6:0b:11:ae:f6:ca:57:
3b:73:af:eb:94:75:bc:20:6b:ff:80:8e:a9:43:70:
72:df:4f:53:98:dd:22:0d:f4:6c:c4:b6:d6:69:6a:
65:22:8e:ed:f8:41:e6:8a:b9:5f:96:ed:0d:bc:d8:
de:df:4f:9d:e9:7c:f0:88:f0:3d:f3:f3:c3:d8:b9:
fd:f5:ce:40:1b:98:38:dd:48:54:9e:8a:a4:17:d8:
df:e5:de:3c:f3:95:b7:39:bf:85:ac:a8:52:38:90:
7b:76:4f:3f:27:cc:98:c6:ee:97:1e:8b:05:ba:53:
06:e0:f6:85:8c:e3:2c:28:87:ac:cb:1b:7f:7f:0b:
5e:06:2d:7e:b0:47:14:6f:a7:7d:9d:f6:c2:5b:d3:
ec:df:9f:f9:8c:68:0b:b5:6f:e8:69:80:99:30:0b:
48:2d:ed:3b:dc:3e:0e:39:7d:8e:89:e0:73:ad:cd:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E9:9D:AB:36:A5:1F:AA:4A:85:84:52:5F:4C:2F:77:74:01:0C:AB
X509v3 Authority Key Identifier:
keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/t-mdqzalH6pKhYRSX0wvd3QBDKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.168.0/22
46.151.200.0/23
46.151.204.0/24
91.227.230.0/24
185.29.88.0/24
IPv6:
2a00:a6a0:1::/48
Signature Algorithm: sha256WithRSAEncryption
b7:48:2a:a5:60:2a:fc:ea:1a:d8:33:64:16:da:8b:9d:35:52:
58:3f:d8:c4:ec:b1:3a:94:24:a1:f4:02:c3:be:4d:70:5c:3b:
29:fa:e8:44:10:83:cc:13:dd:7f:be:5f:7b:65:04:3b:bf:e6:
37:3b:2d:d0:39:e1:c0:a9:f4:ff:57:8b:90:f1:61:f7:28:96:
6c:b8:95:5c:9f:30:70:33:c5:c2:37:1f:dd:24:e7:86:34:16:
e5:4f:51:ec:33:8b:b6:e4:79:86:59:f5:df:b6:25:77:0f:e2:
6e:b5:b0:c3:55:e0:76:d6:a0:e4:45:59:68:12:f4:ad:e8:99:
91:76:d0:6f:27:48:21:0d:68:5e:dd:ac:55:4d:89:a9:34:95:
e8:37:2f:95:74:fd:a1:53:6b:3f:3c:ea:c7:b9:aa:b6:e1:d8:
80:71:9c:15:e1:69:f6:eb:e2:93:6e:5c:a9:c3:32:48:7f:19:
66:86:6e:9a:65:78:e4:7c:b7:6a:e0:77:29:e1:f4:91:5b:93:
45:a7:0f:23:66:f5:fc:a2:7f:2d:d4:6a:54:87:f5:13:a3:d2:
35:3b:70:1c:6d:54:ba:fa:24:dc:cb:2e:28:13:71:70:33:5a:
7a:20:be:ad:c4:39:0e:a2:27:62:3a:eb:45:98:7a:ad:4e:16:
cd:d0:e3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:29:33 2025 by rpki-client