Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/p71NscclcLS6EYUEXKGsc0VGSXo.roa
File: p71NscclcLS6EYUEXKGsc0VGSXo.roa (raw, json)
Hash identifier: MfVb0yhkrV5zs3oQyTJYr9Y20XrapV4GtCFKk0t4UTQ=
Subject key identifier: A7:BD:4D:B1:C7:25:70:B4:BA:11:85:04:5C:A1:AC:73:45:46:49:7A
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 01856F94B8FD2039932C0F380D48468D2538
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/p71NscclcLS6EYUEXKGsc0VGSXo.roa
Signing time: Sun 01 Jan 2023 23:04:55 +0000
ROA not before: Sun 01 Jan 2023 23:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200154
IP address blocks: 46.32.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:b8:fd:20:39:93:2c:0f:38:0d:48:46:8d:25:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 1 23:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7bd4db1c72570b4ba1185045ca1ac734546497a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e5:bd:b7:6a:28:ab:68:b4:23:d3:03:0b:12:
cb:fd:da:3c:5e:65:5f:c8:d3:18:82:99:0f:c4:11:
98:2a:22:93:1e:b2:32:09:d1:8e:38:f0:f7:4c:b7:
aa:e8:67:db:a2:ff:6b:83:b5:6d:c5:56:74:f5:19:
13:28:94:45:da:08:b3:ac:89:7e:8d:7e:25:7c:02:
d2:c6:3d:20:3f:5e:00:26:e2:1f:a0:7a:c2:ea:6a:
d1:db:2e:36:9e:3c:a0:12:88:ae:27:2c:5c:43:49:
f4:cf:f1:c2:87:69:21:3f:3c:b6:38:ea:a1:0a:b7:
7a:3a:58:cd:40:63:1b:6f:99:c7:b2:3b:76:80:2e:
05:42:fe:f3:c7:be:d2:f6:6e:ab:c1:fe:b4:94:5a:
2b:1b:2c:e1:86:e1:81:8f:da:73:d3:9d:36:d7:cc:
48:0b:c4:2c:aa:54:7c:87:4e:30:0d:36:b5:c8:54:
8e:d0:ab:5d:2c:ad:db:c3:07:05:2d:15:14:99:ef:
4e:80:7b:35:16:53:80:a7:f6:31:7f:fb:1d:07:42:
e2:ef:24:6c:1d:59:a9:4f:f7:98:da:61:70:18:43:
c2:65:c3:ac:09:9f:4e:05:90:8d:bf:13:75:19:03:
e0:06:3f:6f:d2:b0:f9:df:21:22:3c:4e:78:d0:49:
1f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BD:4D:B1:C7:25:70:B4:BA:11:85:04:5C:A1:AC:73:45:46:49:7A
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/p71NscclcLS6EYUEXKGsc0VGSXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.163.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e2:e3:1a:f0:62:81:44:8d:3d:4a:54:15:0a:83:b1:35:c0:
ff:86:af:5f:00:76:52:86:6b:3a:13:e1:e3:39:ad:a2:b2:6c:
dd:5e:79:dd:2d:03:7a:21:8b:95:63:f6:68:0d:3f:ad:ee:99:
9e:08:b9:93:c2:24:e4:f0:6b:7e:5b:d1:77:ec:2e:77:16:01:
39:14:c5:47:3d:cb:91:1a:af:89:6c:46:dc:4c:f7:e5:f0:b4:
0a:d1:ce:76:3d:86:79:3f:d0:6a:fb:e7:d3:f1:20:0e:46:f6:
fb:3a:c1:4c:ef:a3:fe:02:6a:2a:23:83:ea:43:ab:49:b1:22:
7a:83:5b:a1:cf:99:c3:4c:df:d8:d3:c7:19:d4:86:c4:69:22:
0b:83:e6:15:ef:18:34:d1:28:34:a6:5f:30:90:aa:57:b6:48:
e7:63:52:72:ef:24:12:9c:8b:fd:4d:ff:ca:ac:fe:96:d1:9a:
e5:d9:91:61:86:ad:9c:de:2b:e6:e4:15:a1:67:b1:75:fc:4e:
3f:5b:0a:45:7a:ec:5a:2b:37:21:f9:30:2f:d8:70:df:cf:09:
0f:26:54:22:e8:43:fd:cd:e2:85:45:ab:95:77:04:b6:b4:43:
2a:13:7d:b2:b0:e8:4d:5f:a9:67:d2:3f:c5:ce:ae:9c:87:f3:
01:73:5f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:37 2025 by rpki-client