Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/i0Qnto8Q763xBUwSzrgIGYYrjcY.roa
File: i0Qnto8Q763xBUwSzrgIGYYrjcY.roa (raw, json)
Hash identifier: /X7tT+e/eAiiO9l3OpP6op3aJvuIsy4byEM4xWrVpS0=
Subject key identifier: 8B:44:27:B6:8F:10:EF:AD:F1:05:4C:12:CE:B8:08:19:86:2B:8D:C6
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 43A98359
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/i0Qnto8Q763xBUwSzrgIGYYrjcY.roa
Signing time: Sat 01 Jan 2022 14:00:58 +0000
ROA not before: Sat 01 Jan 2022 14:00:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49100
IP address blocks: 79.127.0.0/21 maxlen: 32
46.143.24.0/21 maxlen: 32
46.143.32.0/20 maxlen: 32
79.127.64.0/20 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1135182681 (0x43a98359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 14:00:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b4427b68f10efadf1054c12ceb80819862b8dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:35:cd:8b:1a:dd:bf:01:b1:2e:81:97:70:8f:
fa:72:e0:1b:82:df:84:f3:8d:05:17:ea:5c:02:27:
34:2d:b3:f2:0b:40:6f:02:5b:c1:4b:87:8e:96:80:
77:ed:73:44:ba:9b:c1:4c:36:9f:d9:76:31:56:e0:
25:4a:8a:d6:31:9f:a6:97:e1:70:e3:db:14:0d:58:
b0:93:49:31:c2:bd:8e:f7:16:84:01:a2:1f:66:49:
bd:08:b4:c0:0f:0f:63:8f:8e:70:41:10:a2:fe:f1:
94:04:90:45:af:23:29:b0:d9:05:2d:0e:89:93:c8:
de:29:d8:fb:4d:32:e7:81:50:48:0a:64:df:73:1c:
77:e5:94:41:7b:d7:de:66:6a:73:28:67:f4:ff:e3:
0c:ee:57:1e:ba:81:c6:46:39:67:c3:12:d6:ec:61:
8f:98:86:e0:15:d1:21:37:93:ea:85:00:19:01:ff:
5b:78:16:47:ee:7f:d0:98:c6:dc:13:7f:9e:0c:5d:
da:d6:07:73:94:44:46:fc:e9:96:6a:1c:fc:d6:e9:
73:4d:66:5a:ca:9a:c9:44:b5:2d:df:6a:f3:ad:e1:
f4:c2:8d:7f:cb:b7:88:2f:bf:1c:41:d5:61:28:44:
10:c1:ad:f6:3c:a6:a8:01:f8:9b:ba:de:9f:7c:be:
37:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:44:27:B6:8F:10:EF:AD:F1:05:4C:12:CE:B8:08:19:86:2B:8D:C6
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/i0Qnto8Q763xBUwSzrgIGYYrjcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.24.0-46.143.47.255
79.127.0.0/21
79.127.64.0/20
Signature Algorithm: sha256WithRSAEncryption
e3:58:d5:9c:40:b4:fe:7e:de:67:bc:0b:f2:f4:cb:5a:c9:22:
7a:2f:eb:d4:f6:32:ef:85:fb:58:49:de:be:c6:ab:8e:9b:d8:
ed:75:8c:45:60:66:e5:ef:52:21:b9:8c:b0:98:b4:d9:a6:c6:
0e:ef:22:10:ae:ec:22:d3:5a:d9:56:29:d2:c9:87:f6:85:9f:
97:d0:4a:6d:bd:c1:c4:87:02:da:9b:f2:d0:6e:b8:8c:83:f6:
90:a5:4a:ab:57:a1:68:c7:31:83:bb:0c:11:1c:a6:b7:50:5d:
88:cc:98:a9:d2:33:3f:d0:93:3c:2f:02:c9:ce:47:bb:56:b9:
5b:9e:bf:7c:f4:d2:65:0c:89:79:39:67:9d:69:a5:34:54:ca:
1b:bc:51:e0:d1:77:8e:1a:8d:3e:7e:de:35:8a:15:2d:52:1a:
2f:a5:77:0d:aa:ee:c1:d5:5f:a7:4c:36:a9:e6:37:e0:6d:81:
c6:a3:03:8e:e6:3e:20:fd:ab:64:9d:b3:a4:ba:09:fe:8d:3c:
67:c3:53:2d:ab:c1:4e:58:9f:7e:26:68:23:d5:27:84:96:d8:
33:3f:ef:1b:77:17:da:18:7c:ee:b1:66:5b:bf:23:96:0d:4f:
89:63:7b:61:7a:b1:a9:a5:e5:20:f2:1a:5b:36:11:04:45:31:
97:3f:49:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:51 2025 by rpki-client