Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/cUuVDO_ldZGewPcgKtHBmIG46UA.roa
File: cUuVDO_ldZGewPcgKtHBmIG46UA.roa (raw, json)
Hash identifier: 24s6mlsTH0YwZAG4vKA9K997OWECyLhSh4tnt1NgMuk=
Subject key identifier: 71:4B:95:0C:EF:E5:75:91:9E:C0:F7:20:2A:D1:C1:98:81:B8:E9:40
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 0185A6C40CC9618ACD7E0EAF64F5E110536C
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/cUuVDO_ldZGewPcgKtHBmIG46UA.roa
Signing time: Thu 12 Jan 2023 16:15:44 +0000
ROA not before: Thu 12 Jan 2023 16:15:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 46.32.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a6:c4:0c:c9:61:8a:cd:7e:0e:af:64:f5:e1:10:53:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 12 16:15:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=714b950cefe575919ec0f7202ad1c19881b8e940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:73:9b:c7:76:df:b4:a0:d6:1c:9e:7c:04:
73:6b:68:ed:38:34:aa:95:b9:5e:f0:e7:a6:1c:90:
53:92:a1:06:6e:70:b9:74:b6:1b:35:da:01:58:74:
2c:d1:06:ef:2c:06:27:8d:13:3b:9f:2d:56:a2:79:
8d:50:9b:d2:1b:07:ee:81:0c:02:6a:23:b1:15:06:
f3:f7:02:a8:ee:f1:5f:4d:da:b2:92:ff:7e:ab:cf:
fb:26:8c:86:c7:d0:7e:23:bf:04:39:f7:68:ad:41:
40:12:aa:27:b3:d4:c4:d4:25:cb:77:3e:ba:f0:e5:
5e:3d:75:6f:0f:96:75:40:c6:86:6e:3b:13:73:c9:
07:23:db:36:e1:8e:34:da:00:ae:6f:b7:fb:1c:d3:
81:df:16:e6:d8:af:21:99:d4:52:29:8d:f7:78:c5:
84:c8:da:fd:4d:2f:11:84:19:17:16:f1:60:9e:34:
69:cb:0a:6d:0a:04:7b:f5:06:cd:70:88:e8:f1:48:
42:36:3c:5b:ed:81:51:4f:28:56:e9:c5:7d:56:8d:
20:7f:4d:00:7d:09:6d:ba:11:80:ee:0c:37:ea:e7:
a3:ea:a6:90:9f:2c:77:55:52:9c:e4:ca:6a:94:3f:
28:73:78:eb:f9:8c:52:46:39:01:c9:49:9b:ab:ad:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4B:95:0C:EF:E5:75:91:9E:C0:F7:20:2A:D1:C1:98:81:B8:E9:40
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/cUuVDO_ldZGewPcgKtHBmIG46UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.180.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:d9:ee:0f:d1:58:a9:4c:bc:05:15:e7:bf:68:8a:13:5c:d8:
e8:4a:22:4b:57:54:f4:91:5d:24:8d:cd:f6:17:43:ab:53:a4:
b4:75:7d:29:ee:e5:ad:af:0b:9e:53:ec:7a:97:ad:d0:83:a6:
d6:60:d0:99:4e:1e:1e:77:a6:63:98:7d:17:78:36:99:fa:5f:
79:f1:da:df:c5:f8:78:57:8f:9c:5e:b5:c9:fd:c2:aa:cd:a8:
6a:15:95:8a:32:9e:37:a3:c4:d3:40:89:9a:80:23:b4:d0:39:
00:04:e0:8c:c9:ab:96:bc:50:bb:c8:8e:38:1e:d6:20:14:e1:
5b:93:5a:d1:f4:bd:96:a1:b4:5a:05:df:26:4c:9c:b1:ad:3e:
96:84:22:7e:ea:66:91:be:92:ca:2b:d6:48:d3:26:9b:01:80:
86:11:c2:b8:c8:4c:d6:3a:18:ef:f3:0a:5e:7f:e9:b0:15:66:
cf:65:68:03:48:f1:d6:5a:49:75:55:d9:e0:dd:e7:d3:2c:8f:
e6:0f:2c:cf:a1:cc:e7:7a:fe:0f:8d:76:b4:15:c1:80:f5:5d:
c6:1e:44:0e:4e:e9:55:4a:f1:2e:ca:b1:62:6d:49:50:29:49:
b3:6a:e5:4d:42:e7:a2:a7:1c:70:52:37:ba:aa:3c:41:b2:b2:
07:a0:53:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:09:33 2025 by rpki-client