Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/Ozct0uV5B-AejxN870TBcwhDYUc.roa
File: Ozct0uV5B-AejxN870TBcwhDYUc.roa (raw, json)
Hash identifier: ZV07BQIhmjhHJeIeYC2RNJ6sb+Vms9t7eJU6lxywEVU=
Subject key identifier: 3B:37:2D:D2:E5:79:07:E0:1E:8F:13:7C:EF:44:C1:73:08:43:61:47
Certificate issuer: /CN=5f31d979b710ede2068823881aa611ad13af5459
Certificate serial: 0185730CA074038D23AF3B63F2F068A4F57E
Authority key identifier: 5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/Ozct0uV5B-AejxN870TBcwhDYUc.roa
Signing time: Mon 02 Jan 2023 15:14:45 +0000
ROA not before: Mon 02 Jan 2023 15:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47513
IP address blocks: 91.204.132.0/22 maxlen: 22
46.150.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:a0:74:03:8d:23:af:3b:63:f2:f0:68:a4:f5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f31d979b710ede2068823881aa611ad13af5459
Validity
Not Before: Jan 2 15:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b372dd2e57907e01e8f137cef44c17308436147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ae:b3:f0:ae:03:f0:c0:2e:7a:1c:23:2d:4c:
62:4e:6a:8e:5c:50:df:d7:6f:e7:30:88:c0:fa:32:
04:d6:57:01:60:af:eb:3c:c2:f5:8b:fd:7e:87:1b:
9e:2a:33:b3:03:a8:f9:41:66:e6:46:8f:b3:c2:b9:
5a:1d:87:53:b2:43:d5:ee:d4:68:b6:ba:50:d3:3d:
6e:a0:1b:a4:de:e8:a9:e8:68:56:c5:eb:33:c4:1f:
e7:52:f8:45:a6:11:40:1f:6c:0d:ea:c3:81:c3:23:
a0:be:e2:45:4a:a3:95:42:79:1c:42:be:39:0a:8e:
06:08:c4:51:b5:c8:76:40:32:53:d6:63:78:4a:36:
b5:30:db:f9:45:66:ed:07:ef:22:83:dd:cc:54:d7:
fd:5e:f7:2d:01:b2:93:f1:15:fc:17:d6:8b:9b:06:
36:1d:19:8c:a6:c4:d9:20:0f:ca:dc:cb:0e:ca:da:
dd:35:42:94:76:23:5b:9c:92:1f:c6:22:ea:06:3c:
f5:83:b1:0b:a0:41:d5:64:dc:27:0a:87:86:ef:5e:
44:e9:41:89:81:05:6b:46:5b:76:c3:39:5a:f9:0e:
ee:91:23:60:fc:e0:bd:af:6a:cf:bc:8f:ab:03:e5:
60:24:18:2a:16:63:3c:e3:1e:0a:f7:eb:36:3f:ad:
df:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:37:2D:D2:E5:79:07:E0:1E:8F:13:7C:EF:44:C1:73:08:43:61:47
X509v3 Authority Key Identifier:
keyid:5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/Ozct0uV5B-AejxN870TBcwhDYUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.150.0.0/19
91.204.132.0/22
Signature Algorithm: sha256WithRSAEncryption
42:1d:d3:59:ab:af:5c:ff:1c:91:a1:1b:d5:66:14:95:ff:5d:
75:1c:17:90:cc:d0:27:1e:f7:2e:d0:5b:35:cc:00:06:ca:79:
db:2f:a7:7d:dc:95:28:56:a1:37:91:fa:d4:8c:ce:27:b9:b5:
45:a3:ba:18:80:ea:d6:80:9c:eb:11:1d:6f:f6:b2:31:9b:c9:
21:c3:63:8d:c4:a2:5b:31:50:9f:a8:8a:0f:f1:49:58:20:9b:
00:cf:d2:fb:ab:ee:82:16:39:3a:90:70:84:c7:02:9a:3b:ec:
b9:74:03:e1:0f:1e:d6:ea:99:fc:5d:ff:5e:3f:53:90:be:85:
4c:1a:e0:49:c9:c3:58:be:c1:dd:50:49:6b:ac:a9:e8:1a:52:
f7:e6:0c:2d:e6:16:ff:78:90:6f:26:fa:97:02:eb:dd:d1:3c:
44:9b:c2:60:ad:9f:58:fa:e0:63:6b:b8:a5:dd:d2:0b:ba:51:
6d:dc:9d:da:6d:28:eb:75:4e:f2:e3:b5:98:7d:5d:d5:67:ba:
5b:7c:a6:76:3b:63:18:1e:e3:24:52:1d:70:b0:42:f4:ef:1e:
aa:87:f2:44:30:8d:97:0e:e8:fd:b3:27:c7:1a:25:c9:79:0d:
66:2f:46:07:f7:1c:11:2f:3e:74:d5:db:28:7e:0e:cc:9a:1f:
c5:64:aa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:35 2025 by rpki-client