Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/uoWuxVTfwED1wiDhLV5979RsLRU.roa
File: uoWuxVTfwED1wiDhLV5979RsLRU.roa (raw, json)
Hash identifier: HuDRBPet28EUOPayyesf0qFlRKrIsadY6lOoB7E2JNU=
Subject key identifier: BA:85:AE:C5:54:DF:C0:40:F5:C2:20:E1:2D:5E:7D:EF:D4:6C:2D:15
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 355FC674
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/uoWuxVTfwED1wiDhLV5979RsLRU.roa
Signing time: Wed 13 Apr 2022 15:57:00 +0000
ROA not before: Wed 13 Apr 2022 15:57:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 46.32.186.0/24 maxlen: 24
46.32.185.0/24 maxlen: 24
46.32.184.0/24 maxlen: 24
46.32.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895469172 (0x355fc674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Apr 13 15:57:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba85aec554dfc040f5c220e12d5e7defd46c2d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:dd:65:d0:4f:07:87:8f:20:5a:e6:3c:f2:
ef:74:c8:dc:62:21:c9:66:46:af:e4:61:16:6e:0f:
77:c4:6f:b8:de:64:a8:aa:bf:5d:83:c0:18:57:2a:
f2:f9:c1:b2:4d:27:3b:cf:e6:c3:4a:b1:85:d0:c1:
f9:72:0f:51:b9:7f:8c:c9:bf:d3:cc:53:d2:58:4c:
af:0c:07:89:df:38:db:8f:23:b3:45:ec:3c:21:98:
24:7c:01:ad:73:7f:03:4a:0b:66:1f:c7:d1:2e:f8:
75:d4:44:b0:84:33:7f:6e:ea:c9:34:b6:37:8b:40:
f7:d0:78:10:d4:bc:f5:be:0f:57:80:ba:3a:a6:4f:
e4:5d:a8:b9:0f:f7:28:95:77:7a:18:fc:7c:21:2d:
e9:ae:ea:74:5a:c2:b1:e3:76:54:5c:5f:bc:94:07:
44:fc:42:d4:da:40:a7:9b:3e:01:ae:2e:93:4d:ea:
40:2f:32:02:52:47:0c:b3:05:1c:2c:e3:43:82:8e:
73:75:4d:2b:f3:5c:32:56:ef:cb:76:aa:40:bd:ca:
cd:c9:e9:1a:df:59:13:62:eb:66:07:f3:67:cd:b1:
5c:3e:73:21:85:60:0f:3f:c4:e0:ad:97:73:25:42:
ad:0e:c7:c7:b6:16:27:31:9e:c1:72:17:28:8c:64:
1f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:85:AE:C5:54:DF:C0:40:F5:C2:20:E1:2D:5E:7D:EF:D4:6C:2D:15
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/uoWuxVTfwED1wiDhLV5979RsLRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.184.0/22
Signature Algorithm: sha256WithRSAEncryption
00:9f:79:d6:58:15:f6:27:a8:34:a6:62:d0:42:01:95:75:ac:
67:d6:a3:82:dc:b2:d2:12:a3:44:13:3d:92:84:a5:a8:6f:b5:
f3:41:87:fd:58:97:f5:9d:ff:d9:93:c3:62:20:49:5b:79:82:
d7:94:10:6d:82:0e:5e:d5:ef:b9:19:64:8b:a7:fb:c5:8b:2c:
e6:ec:a8:85:23:72:92:26:1d:8b:6f:86:2e:d5:9b:b0:4e:7c:
2b:ad:c9:c9:73:e2:9e:61:08:c9:fc:ed:3c:9e:71:52:08:3d:
b1:24:73:a2:e1:96:6d:8b:ea:8c:8e:58:b2:c8:27:be:dc:37:
7f:2e:25:d3:81:09:01:b0:bc:75:75:bf:29:aa:79:d1:1d:f8:
b5:ef:6e:13:0b:4e:62:a9:c5:15:e9:57:33:d7:83:c5:53:7a:
44:ea:c0:67:eb:12:f9:3c:c3:42:36:ba:bd:ca:22:d8:dc:a6:
56:57:e3:0d:5d:1a:c0:a2:da:d7:ee:75:9f:80:bf:5e:55:78:
aa:49:bd:0b:26:18:91:72:71:e1:42:55:70:2a:31:0d:10:16:
4e:b5:b8:f1:f3:f8:c5:6d:f0:b2:03:ed:a0:97:0f:01:20:15:
9c:80:06:83:06:65:b4:a1:f8:b2:b2:27:d6:1e:88:32:7c:05:
33:e9:ba:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:31:18 2025 by rpki-client