Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/46tMxY8byQEV_C-ssy4fpLXrNQ4.roa
File: 46tMxY8byQEV_C-ssy4fpLXrNQ4.roa (raw, json)
Hash identifier: mkRZY7ozvWJ18IsrbMmCZSaYMntf2F/tSzBqnAH7dyM=
Subject key identifier: E3:AB:4C:C5:8F:1B:C9:01:15:FC:2F:AC:B3:2E:1F:A4:B5:EB:35:0E
Certificate issuer: /CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e
Certificate serial: 018BCCB63E72BAD7728A2E9AAB195F92D9C9
Authority key identifier: 9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/46tMxY8byQEV_C-ssy4fpLXrNQ4.roa
Signing time: Tue 14 Nov 2023 07:22:57 +0000
ROA not before: Tue 14 Nov 2023 07:22:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42892
IP address blocks: 94.45.192.0/22 maxlen: 22
94.45.192.0/19 maxlen: 19
94.45.196.0/22 maxlen: 22
94.45.199.0/24 maxlen: 24
94.45.204.0/22 maxlen: 22
94.45.200.0/22 maxlen: 22
94.45.201.0/24 maxlen: 24
94.45.208.0/22 maxlen: 22
94.45.212.0/22 maxlen: 22
94.45.216.0/22 maxlen: 22
94.45.220.0/22 maxlen: 22
91.193.222.0/23 maxlen: 23
91.193.220.0/22 maxlen: 22
176.120.224.0/21 maxlen: 21
176.120.224.0/19 maxlen: 19
176.120.239.0/24 maxlen: 24
176.120.237.0/24 maxlen: 24
176.120.238.0/24 maxlen: 24
176.120.236.0/24 maxlen: 24
176.120.240.0/21 maxlen: 21
176.120.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cc:b6:3e:72:ba:d7:72:8a:2e:9a:ab:19:5f:92:d9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e
Validity
Not Before: Nov 14 07:22:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3ab4cc58f1bc90115fc2facb32e1fa4b5eb350e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d2:b5:1a:d2:a4:6f:5e:d9:63:00:41:f4:eb:
76:49:c7:dd:cd:29:bb:79:b6:52:6d:52:79:b2:6e:
ff:6d:62:5b:b5:99:9b:f5:2e:15:42:fb:33:d1:e9:
7f:ba:ee:38:c2:e1:c5:62:82:9d:ba:54:70:af:c0:
ce:4b:f7:a5:99:70:72:30:a7:9c:71:db:5f:6a:f7:
4b:ce:35:b4:cb:e2:8d:2b:51:cf:64:4e:d3:2b:82:
bd:dd:0f:86:1e:0a:28:25:f5:c4:06:f0:20:7e:32:
e0:7f:35:ee:e2:ce:b2:74:8e:fa:dc:39:41:0f:e9:
2e:ea:92:08:78:21:8b:fd:0f:30:c5:ec:8b:5a:f7:
2b:86:8f:7e:2f:c5:81:58:c1:29:bf:bb:58:95:c6:
45:0c:8e:93:31:73:08:37:2d:dd:56:a4:5b:1d:53:
36:37:fc:f5:80:81:5e:ea:ff:dc:62:7a:09:a5:87:
8d:1a:2a:c9:e0:3d:1a:63:78:05:67:27:e8:f6:43:
41:20:bb:a9:87:e4:1e:bb:3f:d9:c8:4c:bc:ed:eb:
3a:a0:c7:3e:cf:6b:ba:a4:d8:08:b9:b6:09:9e:f8:
b0:14:9f:31:0b:8f:85:fc:53:9b:14:9e:ee:a2:1d:
dc:bc:53:11:62:fb:78:2f:e5:e9:36:be:28:69:b4:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AB:4C:C5:8F:1B:C9:01:15:FC:2F:AC:B3:2E:1F:A4:B5:EB:35:0E
X509v3 Authority Key Identifier:
keyid:9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/46tMxY8byQEV_C-ssy4fpLXrNQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.220.0/22
94.45.192.0/19
176.120.224.0/19
Signature Algorithm: sha256WithRSAEncryption
13:12:04:62:6f:e6:0b:e9:01:23:a9:8e:1d:f5:00:a7:67:1d:
6e:a2:ec:70:e0:7e:c3:4f:39:a5:c4:8e:c8:1a:b1:63:77:43:
81:a7:18:ef:90:73:17:dc:25:cc:42:53:5b:5e:be:16:16:c4:
da:0e:f1:5e:d0:7f:10:ee:12:59:81:19:32:54:de:b6:06:7b:
6a:76:66:d1:c9:da:dd:07:37:5d:36:9c:15:9d:e8:b3:f4:fe:
4f:86:42:ba:7d:08:fe:c6:b3:2e:d1:53:b8:4b:14:71:39:97:
58:95:c7:33:ab:29:4a:9d:9f:03:40:7b:a1:74:0f:83:01:74:
8e:a9:e6:e0:0c:31:a9:b4:e8:ee:e5:02:27:f5:63:fe:42:2f:
4e:5d:7b:e7:e5:35:d3:fd:fe:d6:dc:a9:d4:00:10:1f:87:70:
8e:7f:d7:19:68:64:7c:e0:d0:9e:55:ca:82:26:27:64:9b:0a:
f4:96:e1:a6:9b:cc:c3:a5:be:d3:5b:69:80:c2:19:86:bb:e3:
f2:b8:53:c9:c0:89:65:55:e9:20:0f:b2:a3:17:3d:83:66:ff:
b4:4d:0a:68:fa:5e:98:56:88:0f:7e:fc:55:05:a0:3b:0c:1b:
c0:d5:78:00:2d:01:b1:59:78:01:bc:f1:8c:2a:f8:bf:78:b1:
ee:a2:98:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:22 2025 by rpki-client