Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/BRwRll_hhwwD6jmD3QHOTGnu7aU.roa
File: BRwRll_hhwwD6jmD3QHOTGnu7aU.roa (raw, json)
Hash identifier: RP8UvYlteFCjKAfZuuKpIpIqHUajt2h6bBR93SuMCBw=
Subject key identifier: 05:1C:11:96:5F:E1:87:0C:03:EA:39:83:DD:01:CE:4C:69:EE:ED:A5
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 355EDBA6
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/BRwRll_hhwwD6jmD3QHOTGnu7aU.roa
Signing time: Sat 01 Jan 2022 16:10:39 +0000
ROA not before: Sat 01 Jan 2022 16:10:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201260
IP address blocks: 46.17.240.0/22 maxlen: 22
185.80.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895409062 (0x355edba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Jan 1 16:10:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=051c11965fe1870c03ea3983dd01ce4c69eeeda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:fa:31:f4:21:ce:91:ca:78:13:a9:c6:15:
84:c6:14:f2:1a:42:90:3b:70:87:d8:d5:f8:0f:81:
b7:8c:70:ef:57:22:f1:80:87:69:45:a1:15:d3:da:
60:c0:f2:4f:9a:33:e2:d6:83:7f:93:96:8f:18:14:
0d:88:f7:ef:a0:e1:a4:7c:c1:96:ee:27:b6:65:39:
18:86:90:00:0c:d2:6e:69:f1:17:24:02:bf:17:a8:
83:af:89:a8:47:00:fd:38:f1:3f:25:c1:2c:1f:24:
7f:cd:6f:9e:c1:5e:a7:9a:b6:ac:6b:d6:49:80:a6:
21:ff:75:27:74:54:c4:5f:50:b9:97:85:29:78:00:
5a:ad:3b:97:5f:c0:23:ba:ea:d2:3b:4f:ca:40:1d:
c2:15:2c:a2:7b:30:68:ea:7e:fb:0f:db:13:32:ab:
ac:39:b6:5f:08:98:f9:61:f6:45:51:30:1d:c8:04:
d6:50:4d:e0:69:c4:61:02:c9:83:1e:1f:81:53:53:
79:55:3f:a0:35:fe:83:3c:d1:15:20:0d:bc:71:0a:
65:0e:40:a9:49:43:b7:67:6e:f9:d8:a0:0b:ea:50:
77:57:56:64:15:3a:f2:5d:2b:a8:f0:9f:34:16:08:
29:8b:af:d5:b0:4f:8e:24:85:25:ff:70:77:7b:ea:
42:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1C:11:96:5F:E1:87:0C:03:EA:39:83:DD:01:CE:4C:69:EE:ED:A5
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/BRwRll_hhwwD6jmD3QHOTGnu7aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.240.0/22
185.80.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:a6:16:95:c8:7a:22:0b:74:c4:f1:e8:2b:ea:7e:9f:04:07:
f2:6d:a9:8b:09:c5:bc:6b:5e:05:db:b0:bf:68:75:64:cd:3a:
e9:e4:f2:7a:e3:30:3a:bf:64:b9:7f:f6:55:ac:37:27:39:c6:
87:f0:35:10:f1:89:44:e9:90:97:87:27:a9:3d:d7:5f:48:d2:
8f:88:01:da:a2:0d:62:d5:4b:60:eb:d8:e5:c5:fe:77:43:d3:
43:45:68:f1:84:c8:3e:16:7f:21:39:93:5d:9d:a8:04:be:d3:
cd:78:d1:6c:e6:7e:54:ea:7a:b5:85:e3:ab:b1:ec:2d:85:4d:
1f:06:0d:45:98:01:98:96:b0:6e:9d:63:a7:b5:55:90:38:8b:
02:f7:07:db:3d:2e:35:30:d5:af:df:13:8d:7d:cf:53:93:aa:
e2:90:cd:58:b0:d0:83:74:48:57:c7:33:6f:ce:ea:fe:c8:ce:
1b:db:21:3e:25:fd:2b:14:4d:4c:91:75:12:66:da:32:2d:32:
c1:e3:aa:d4:39:54:91:b7:d6:6a:7a:4c:cd:c0:65:bc:15:33:
2e:1a:f4:3d:1c:d4:e9:f0:ec:1f:e5:e2:0f:b1:cc:b7:72:f0:
ba:69:86:6b:72:db:e0:27:ca:7e:d2:7b:f6:90:e1:6d:fa:57:
3f:78:15:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:29 2025 by rpki-client