Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hG489W8yihHlf8QqmrZKMwmndCA.roa
File: hG489W8yihHlf8QqmrZKMwmndCA.roa (raw, json)
Hash identifier: ZrpS7Ebz3N+LxYzGg/fXfhw5l+zgty4oKhMQYQX9AlQ=
Subject key identifier: 84:6E:3C:F5:6F:32:8A:11:E5:7F:C4:2A:9A:B6:4A:33:09:A7:74:20
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 17E92BF1
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hG489W8yihHlf8QqmrZKMwmndCA.roa
Signing time: Sat 01 Jan 2022 03:59:55 +0000
ROA not before: Sat 01 Jan 2022 03:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34295
IP address blocks: 46.10.217.0/24 maxlen: 24
62.176.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401157105 (0x17e92bf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 03:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=846e3cf56f328a11e57fc42a9ab64a3309a77420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:dd:a3:30:a9:7c:b3:3f:58:b0:a2:e9:00:
cd:11:c9:a6:73:15:6b:1d:c8:80:e1:ab:cc:ce:59:
0b:6e:fe:67:bb:eb:25:89:35:4e:ea:bb:8c:77:79:
1c:24:87:c9:14:58:be:82:4a:44:55:70:e6:02:84:
82:1b:24:e7:26:3d:7b:bb:d8:09:47:8c:2d:df:4e:
66:30:73:ef:ba:a4:1f:ed:38:5e:fa:af:11:77:20:
ec:b5:d8:6f:59:56:42:16:89:34:39:28:a8:76:aa:
aa:11:72:02:93:97:90:d5:c7:64:37:b2:c1:eb:fb:
6d:af:a9:c8:0d:de:7e:39:26:4c:d0:f1:58:8d:e8:
b8:88:a0:b1:7a:90:b2:7d:93:ed:30:df:58:17:89:
28:e6:ea:9f:3c:da:ea:c2:ea:72:8e:f8:7c:ac:88:
56:4b:b0:d3:86:ca:83:59:0e:41:d8:dc:93:be:00:
a6:28:f8:22:29:97:a4:e5:a5:5e:fa:59:a4:96:90:
e2:81:03:e8:3e:62:71:18:89:42:97:6f:32:84:20:
49:ab:7e:57:09:22:21:8a:2b:52:ac:7f:29:59:16:
ad:d9:c6:b7:bd:d4:c3:a0:76:1b:b4:45:15:86:1b:
cb:20:f0:45:1b:18:9f:88:e7:9d:c7:83:60:37:a2:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6E:3C:F5:6F:32:8A:11:E5:7F:C4:2A:9A:B6:4A:33:09:A7:74:20
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hG489W8yihHlf8QqmrZKMwmndCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.10.217.0/24
62.176.118.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:20:e0:95:e9:c5:22:57:57:ee:b0:8f:58:c0:03:8b:9c:70:
9a:7e:8b:48:dc:bb:d3:c1:e4:47:d3:7a:65:e6:ae:f3:9f:8c:
fa:7a:25:a4:76:1f:ea:f4:60:d3:23:14:96:ab:26:6a:ba:89:
01:27:67:23:28:60:8c:b1:d0:2a:14:88:95:33:66:25:e0:cf:
d5:3f:42:a0:27:30:08:c7:f7:ea:25:c6:d5:13:cf:bb:d3:c9:
5d:ea:5a:dd:af:93:87:4f:5c:96:c6:c8:a4:9f:a4:33:65:94:
7c:ff:00:d9:73:47:0e:9e:a3:cf:69:a3:22:e4:81:56:2f:00:
a9:34:c2:b0:66:cd:64:19:65:96:7b:fa:29:b2:b5:61:4f:7d:
1c:f6:f9:31:08:bc:27:40:e5:ae:37:81:be:29:2c:1e:00:30:
47:8b:7f:98:50:85:1c:22:aa:36:bd:13:24:a1:00:14:75:fa:
17:22:a0:aa:a1:0a:de:02:95:3a:68:37:37:f5:46:6f:bd:ed:
e1:52:35:57:36:a8:e1:b9:c5:dd:49:9d:81:6e:3a:da:2f:7b:
e4:31:57:3e:d7:02:f1:55:4a:42:17:f5:ad:08:70:31:d8:5d:
b7:7d:0e:7a:8d:e9:cd:38:d7:97:85:a1:49:f6:fd:84:c3:de:
0d:9b:07:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:35 2025 by rpki-client