Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/BF-Y5IU9PSewUEaA9rTDB-vBIaU.roa
File: BF-Y5IU9PSewUEaA9rTDB-vBIaU.roa (raw, json)
Hash identifier: 7Qph4kjdtMw2rEGKPP0EgZiZBYsPSnNFesohoDdW3S8=
Subject key identifier: 04:5F:98:E4:85:3D:3D:27:B0:50:46:80:F6:B4:C3:07:EB:C1:21:A5
Certificate issuer: /CN=335e725cacf83c97f457a56762cf846d643117cd
Certificate serial: 08292B55
Authority key identifier: 33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/BF-Y5IU9PSewUEaA9rTDB-vBIaU.roa
Signing time: Sat 01 Jan 2022 07:56:47 +0000
ROA not before: Sat 01 Jan 2022 07:56:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 46.231.121.0/24 maxlen: 24
46.231.120.0/24 maxlen: 24
185.192.223.0/24 maxlen: 24
185.192.220.0/24 maxlen: 24
185.192.221.0/24 maxlen: 24
185.192.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136915797 (0x8292b55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335e725cacf83c97f457a56762cf846d643117cd
Validity
Not Before: Jan 1 07:56:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=045f98e4853d3d27b0504680f6b4c307ebc121a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:27:51:db:68:62:f4:d2:a6:0b:79:7b:c2:
02:71:8f:1a:15:72:4a:7e:41:8c:ff:ec:2b:a9:b5:
69:5d:5b:5b:39:07:13:24:d6:aa:f9:b2:55:42:fe:
f0:4b:3c:5f:d1:db:3a:2b:ab:52:0e:a2:0b:43:5d:
c8:2b:73:76:f7:3b:86:7c:cc:5f:19:fb:90:0f:44:
9e:19:aa:fa:4e:7f:8c:3a:d8:c9:4b:50:99:54:67:
3b:f9:3c:40:6d:ce:3e:a5:cd:5b:b5:04:ac:d5:f7:
ae:62:cf:9e:1d:fe:e5:42:cc:c0:9e:a4:41:7d:67:
d3:f4:a2:59:1c:1e:69:a1:a0:ac:b0:b8:66:5e:bc:
46:6d:b2:b6:b8:da:04:99:99:d1:b8:ae:37:95:95:
20:50:88:0e:bd:b6:d1:25:62:d2:0a:ca:56:68:5c:
13:b9:1d:15:d4:6d:c4:86:15:c7:76:7f:a5:63:aa:
4e:06:30:13:b5:92:ae:b6:a5:8d:de:23:64:83:19:
2e:c6:fa:6c:32:33:12:68:57:4d:8d:d7:ec:48:4d:
45:6f:c2:be:68:ba:1c:65:27:7e:ff:c4:32:98:fa:
88:b7:08:3c:6a:53:3a:f4:4d:d7:86:0f:aa:08:b5:
ea:2d:bb:50:aa:c6:ab:9e:8e:8c:69:a1:22:24:7f:
32:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5F:98:E4:85:3D:3D:27:B0:50:46:80:F6:B4:C3:07:EB:C1:21:A5
X509v3 Authority Key Identifier:
keyid:33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/BF-Y5IU9PSewUEaA9rTDB-vBIaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.120.0/23
185.192.220.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:7a:a9:61:6b:0e:95:5c:38:b3:ad:99:e4:85:5e:c8:ca:37:
75:ce:ad:ea:a2:05:ab:7a:7c:3c:40:eb:43:ff:17:86:1f:95:
09:1c:b1:de:02:ef:95:93:69:9a:83:eb:f9:55:0d:98:25:f9:
c2:be:8c:e7:bc:c2:37:ff:b1:20:6d:9e:2d:99:27:d2:66:72:
34:aa:f8:3a:f8:8f:f8:67:c2:9e:6c:15:39:2d:af:3c:4c:02:
83:11:9c:71:6a:bf:3a:6a:1c:f3:fd:68:19:1e:8d:09:a3:28:
38:68:9a:54:ae:a7:fe:33:39:f8:7d:ad:2a:d9:f8:08:9a:c6:
c9:4a:e4:21:0c:98:52:df:1e:59:1b:c1:6d:9a:13:95:81:0d:
bb:41:73:9a:77:ee:11:33:19:e8:1c:bb:94:15:b8:c9:25:8a:
3f:dc:9d:2f:5e:4b:a9:f7:8d:b8:44:ed:a1:ba:0c:fb:21:bb:
3a:27:61:87:39:50:fa:ac:76:53:a4:c6:ed:d1:6c:71:4b:38:
17:95:82:5b:8a:ec:43:3d:4c:c6:bf:49:d6:7d:43:59:29:27:
61:b1:a2:37:99:b5:05:c8:2b:b1:ae:f3:59:9a:88:42:c5:c7:
90:d0:b1:23:75:b6:16:f9:55:ec:d3:ba:4e:f0:3d:6b:80:22:
b8:6b:dd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:31 2025 by rpki-client