Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/b_HobQRklIcZ3BwW1lgtbwZy1x0.roa
File: b_HobQRklIcZ3BwW1lgtbwZy1x0.roa (raw, json)
Hash identifier: TN0nWtzQ75TehK6BfRdFEdL+N+84kOXd9n7QXaYVjw0=
Subject key identifier: 6F:F1:E8:6D:04:64:94:87:19:DC:1C:16:D6:58:2D:6F:06:72:D7:1D
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 018BDC87FCBF505393192147A8EB7873207B
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/b_HobQRklIcZ3BwW1lgtbwZy1x0.roa
Signing time: Fri 17 Nov 2023 09:06:21 +0000
ROA not before: Fri 17 Nov 2023 09:06:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52084
IP address blocks: 46.255.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:87:fc:bf:50:53:93:19:21:47:a8:eb:78:73:20:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Nov 17 09:06:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ff1e86d0464948719dc1c16d6582d6f0672d71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:2a:09:39:24:a3:f1:ff:88:51:3c:17:08:
0b:26:7c:d1:0f:73:2c:ba:09:da:02:0f:87:e7:cc:
a2:9a:44:88:2f:7e:64:09:e9:90:0e:54:41:66:c4:
ba:4c:df:4a:a7:f6:2b:29:14:77:44:41:db:b9:23:
59:22:02:31:9b:69:67:2f:40:f8:24:68:05:bc:e8:
25:7a:d0:14:0f:d7:1a:50:39:00:a2:4c:46:ad:2e:
b0:01:4a:b2:a7:97:9c:e0:d0:a6:b8:46:ed:f2:2b:
4e:2a:d9:a2:00:87:c1:f1:c4:5b:ae:92:70:eb:89:
9f:97:d1:3b:cc:a8:04:19:b0:1f:6a:7e:30:ef:21:
ce:97:91:5f:6b:51:a4:8a:9f:e8:3b:70:7b:a7:72:
94:1f:7b:df:eb:3e:7d:f8:69:36:06:e2:5c:1d:71:
6e:59:34:40:ba:2d:06:6d:23:97:b9:20:f2:7b:6a:
22:d3:f8:d6:ac:7d:9b:fa:2d:81:3c:f5:64:d0:18:
86:24:d1:42:50:b6:a7:11:47:f2:74:ac:7c:d9:2f:
00:4b:2f:27:85:3b:d8:15:d3:bb:16:dd:38:23:cf:
6d:d0:44:cf:d2:22:f0:74:0d:45:2e:23:5f:62:56:
04:ce:40:fe:27:2e:d0:70:0a:d4:17:0b:16:1d:c1:
f1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F1:E8:6D:04:64:94:87:19:DC:1C:16:D6:58:2D:6F:06:72:D7:1D
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/b_HobQRklIcZ3BwW1lgtbwZy1x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.8.0/21
Signature Algorithm: sha256WithRSAEncryption
37:6c:44:8f:c0:62:19:8e:b8:68:ca:35:60:4e:f8:d2:da:0e:
61:1f:ee:77:36:58:67:99:f2:1d:c3:df:5a:79:f1:cd:ad:0c:
fe:bf:c7:d6:03:ac:22:a1:44:19:9e:25:5b:6d:0a:7d:44:4f:
23:60:4a:4b:1d:45:f3:f3:c4:86:3d:03:d6:10:17:d8:2d:98:
dd:2d:c5:c8:27:93:e0:1b:6b:97:b0:76:92:fc:82:2d:ba:13:
01:ba:27:22:a3:07:f2:a2:41:17:e2:b7:0f:c1:85:4e:d0:89:
36:17:b5:9a:3f:e0:b4:63:8d:1c:ac:a8:b8:38:9e:eb:ba:69:
ae:34:35:77:af:58:1f:0f:b8:3e:60:1b:39:09:02:36:dc:80:
5c:e1:d0:70:29:8a:6e:ee:9b:8a:42:f9:6a:e1:34:e3:97:7b:
1e:68:28:af:c8:65:af:fa:f0:0d:eb:b5:b8:e9:8a:c2:fb:17:
72:ff:31:03:f2:56:38:8b:86:53:76:21:e2:2f:5f:a2:07:22:
40:d2:1c:42:c9:0e:ed:d3:8c:f3:af:5e:79:5c:d9:41:c6:e8:
cb:04:70:cd:4a:1c:ef:ca:ef:76:ef:76:bc:08:dd:d7:7a:9c:
e0:71:b9:0d:2d:9d:98:71:ea:63:4f:ec:c9:22:d7:7a:2f:e7:
61:76:6b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:49:35 2025 by rpki-client