Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/13QjG9QzrGLowiSeNIF-4RNB-Y0.roa
File: 13QjG9QzrGLowiSeNIF-4RNB-Y0.roa (raw, json)
Hash identifier: wJI9RKsyQUloKzRgBXReQ4P25E3IaniZYroVkYW3Gyg=
Subject key identifier: D7:74:23:1B:D4:33:AC:62:E8:C2:24:9E:34:81:7E:E1:13:41:F9:8D
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 0611AA2D
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/13QjG9QzrGLowiSeNIF-4RNB-Y0.roa
Signing time: Sat 01 Jan 2022 05:02:38 +0000
ROA not before: Sat 01 Jan 2022 05:02:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 27471
IP address blocks: 46.235.152.0/24 maxlen: 24
46.235.153.0/24 maxlen: 24
46.235.156.0/24 maxlen: 24
46.235.159.0/24 maxlen: 24
46.235.158.0/24 maxlen: 24
46.235.154.0/24 maxlen: 24
185.180.50.0/24 maxlen: 24
185.180.49.0/24 maxlen: 24
185.180.48.0/24 maxlen: 24
185.180.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101820973 (0x611aa2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: Jan 1 05:02:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d774231bd433ac62e8c2249e34817ee11341f98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:30:d1:b8:7b:4d:b8:c1:33:24:3f:4e:06:
7b:6b:ea:74:14:fb:da:fe:fc:ec:1e:84:ee:de:60:
bf:c6:d6:da:d4:58:5f:93:70:4e:b2:b7:42:10:bb:
e0:0c:e9:4b:d4:49:14:f3:91:ac:b1:9c:cb:a6:ff:
3b:68:04:57:f1:d7:17:1b:ac:35:4d:d6:0a:c5:a2:
44:eb:34:66:fa:2f:9a:ba:e7:79:26:ef:2e:f8:74:
b9:06:fb:13:9d:83:ee:25:d4:cd:07:65:cb:a4:25:
6d:8f:21:72:e7:2f:77:21:89:64:75:62:90:eb:e4:
2a:7c:4a:88:45:c7:06:e2:7c:b0:20:a2:89:23:d8:
47:02:6d:20:6e:b5:0e:7c:4e:08:98:17:74:79:d5:
51:c8:c2:62:60:39:4d:1f:14:d4:e6:de:31:0c:d3:
b3:68:74:18:ca:85:0c:49:bf:95:bf:1c:89:13:61:
f8:d6:80:1e:10:f7:e2:5f:ac:fe:ec:ee:2c:17:8c:
07:d8:11:f3:8b:4f:f9:f6:39:42:8b:04:73:21:d8:
64:4d:f1:87:b9:59:92:f2:5a:1d:0e:28:e9:a0:65:
ae:83:87:4c:1c:57:36:c1:d6:2f:db:bf:87:bc:6f:
e4:51:f7:81:41:fc:b5:7b:d8:23:bc:e8:6b:07:b0:
ca:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:74:23:1B:D4:33:AC:62:E8:C2:24:9E:34:81:7E:E1:13:41:F9:8D
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/13QjG9QzrGLowiSeNIF-4RNB-Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.152.0-46.235.154.255
46.235.156.0/24
46.235.158.0/23
185.180.48.0/22
Signature Algorithm: sha256WithRSAEncryption
56:fb:52:0e:05:a1:d9:fc:e2:6b:a0:4e:a7:27:e5:be:9d:cb:
0a:f8:d1:c9:81:5e:2d:04:0c:9f:44:bc:b7:1a:12:90:4a:c1:
97:ea:75:9f:aa:38:8d:93:dc:6a:21:bc:dd:eb:39:54:fe:d3:
f1:de:15:dc:4f:fd:21:7a:d2:f4:cf:07:89:a8:0f:e1:17:ec:
5d:23:6c:c4:51:be:3e:45:ae:3f:69:37:48:b8:11:05:c8:f0:
fb:f7:67:23:c1:1e:22:1b:f5:4a:8a:3d:90:3d:cd:5d:a9:1d:
f6:df:10:8e:26:1b:d5:1b:ce:3e:7c:42:e8:f7:de:3a:63:de:
55:ba:7a:d8:c7:05:ab:f1:c9:c7:b7:12:9e:da:52:a4:95:08:
11:0a:72:57:92:19:24:2e:4d:00:31:d0:3b:5e:28:16:39:1b:
a5:33:ba:e3:ef:3f:ce:fd:1d:85:58:88:e3:d4:6f:3b:e3:f5:
70:05:5e:11:8a:22:b1:86:0e:28:00:37:9e:8d:69:19:37:9b:
74:68:d0:66:4b:f5:76:84:15:25:c0:c5:08:eb:54:ec:1e:59:
58:8e:16:d0:af:82:3e:2a:ce:ac:bf:a7:13:49:75:4b:50:e5:
96:84:de:ed:3d:bb:b0:36:39:c8:a1:29:57:16:8e:29:41:12:
91:f8:41:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:13:39 2025 by rpki-client