Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/4EqvJo1jKt_-FLrFwj4Pepca3Ag.roa
File: 4EqvJo1jKt_-FLrFwj4Pepca3Ag.roa (raw, json)
Hash identifier: 6w5FXNptVLQcKXFThfFS4euv9IXavled2vh9OhXySNw=
Subject key identifier: E0:4A:AF:26:8D:63:2A:DF:FE:14:BA:C5:C2:3E:0F:7A:97:1A:DC:08
Certificate issuer: /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Certificate serial: 01857102BABCF5B5F911C83CFB2E71103044
Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/4EqvJo1jKt_-FLrFwj4Pepca3Ag.roa
Signing time: Mon 02 Jan 2023 05:44:42 +0000
ROA not before: Mon 02 Jan 2023 05:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43395
IP address blocks: 185.46.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:ba:bc:f5:b5:f9:11:c8:3c:fb:2e:71:10:30:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Validity
Not Before: Jan 2 05:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e04aaf268d632adffe14bac5c23e0f7a971adc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f8:2a:9b:78:4c:08:32:b7:fb:b6:d9:ae:72:
1e:98:41:73:25:c0:f0:f7:f8:f8:cc:64:d6:fb:a9:
9f:87:49:a2:14:cc:26:67:b1:76:d0:18:d5:6e:48:
90:0f:d7:a2:dc:5c:2d:90:aa:43:7f:61:c8:2f:60:
e5:65:12:e5:60:4b:46:a3:87:9b:a8:bf:9e:3a:0b:
4b:40:57:eb:6d:78:6d:75:dc:a8:38:f5:d2:a1:2a:
0a:a4:a4:0c:7f:c9:49:23:dd:2c:e3:da:a7:7c:1b:
08:9f:14:17:aa:14:51:93:7c:ee:93:a2:da:5a:5c:
e1:2d:35:5f:91:21:59:14:a2:4c:83:d0:d9:ca:a8:
66:e4:c8:89:d2:24:ed:19:89:f3:5c:b8:47:7a:35:
2c:77:c3:e7:10:0c:6f:7a:38:60:67:fc:14:2a:4c:
0e:d1:5c:6f:c7:da:13:38:dd:d0:a1:ac:f4:e7:2f:
cc:b1:fc:5c:51:fa:39:77:5c:45:be:56:72:c5:9a:
6b:74:ac:5d:13:2f:7b:07:69:da:a3:e9:52:38:dc:
7e:f6:9d:39:44:de:c3:33:73:1d:df:fe:89:92:d8:
32:8e:4f:0a:d9:e2:85:e2:ad:6f:b9:fd:8e:d3:65:
0d:84:04:1e:19:84:18:b1:83:c4:44:b0:4f:2a:a4:
7e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4A:AF:26:8D:63:2A:DF:FE:14:BA:C5:C2:3E:0F:7A:97:1A:DC:08
X509v3 Authority Key Identifier:
keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/4EqvJo1jKt_-FLrFwj4Pepca3Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.108.0/22
Signature Algorithm: sha256WithRSAEncryption
43:a5:b7:f6:10:e8:39:64:27:e5:87:0e:9f:29:95:24:e9:33:
02:76:e1:68:1d:da:d4:f4:5d:d7:c5:b4:8e:ca:b8:d9:6d:79:
12:7f:c7:f7:11:d0:e1:6f:3a:88:55:bb:5f:f1:5b:29:36:62:
cb:ad:29:61:29:e3:8a:b8:e6:86:02:3e:0d:d1:e9:e2:3b:d9:
57:b4:2f:4c:83:1d:b0:48:84:e8:16:9b:ef:cf:1f:ef:43:04:
ef:d2:b0:49:b4:22:d6:9b:d4:7f:8c:86:9a:97:6b:fb:a6:ae:
f5:eb:28:69:f7:8b:87:d0:75:8f:41:3f:f0:73:b6:9e:8b:79:
e4:24:fb:e6:60:b1:8e:52:9b:01:00:5f:03:d0:f7:ab:ea:9b:
7b:ed:06:03:f7:ba:a5:b2:76:a6:45:0b:3a:81:ab:44:d2:84:
d5:42:bf:71:c8:4a:e4:2e:f3:6c:e2:7a:7a:aa:ab:98:65:fe:
5c:47:28:77:fa:cd:0a:ca:de:22:16:a8:e5:a7:30:ff:89:3d:
3e:1b:b9:95:65:e7:b4:2c:59:a9:04:8f:da:94:0a:d9:66:e7:
17:d4:ef:8e:c5:92:84:da:54:09:b1:e3:85:41:03:60:98:8e:
26:0b:65:5c:eb:e6:cd:16:39:c3:ac:db:b3:9d:87:3b:20:f3:
7b:18:59:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:07 2025 by rpki-client