Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/JDm9Ulw8LIE_Ib5S0cGV_t-Hfm4.roa
File: JDm9Ulw8LIE_Ib5S0cGV_t-Hfm4.roa (raw, json)
Hash identifier: sgD9dLUVN4RTDQWqwHdc2nizQfff+lRHj8T+9EA3QJM=
Subject key identifier: 24:39:BD:52:5C:3C:2C:81:3F:21:BE:52:D1:C1:95:FE:DF:87:7E:6E
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 821710
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/JDm9Ulw8LIE_Ib5S0cGV_t-Hfm4.roa
Signing time: Wed 13 Apr 2022 14:07:28 +0000
ROA not before: Wed 13 Apr 2022 14:07:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51795
IP address blocks: 185.25.36.0/24 maxlen: 24
185.25.37.0/24 maxlen: 24
185.25.38.0/24 maxlen: 24
185.25.39.0/24 maxlen: 24
46.18.240.0/23 maxlen: 23
46.18.246.0/24 maxlen: 24
46.18.243.0/24 maxlen: 24
46.18.244.0/24 maxlen: 24
46.18.245.0/24 maxlen: 24
46.18.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8525584 (0x821710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Apr 13 14:07:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2439bd525c3c2c813f21be52d1c195fedf877e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:83:4a:20:53:f5:c8:0c:9a:f1:d5:8a:ec:6a:
92:90:75:7b:79:88:04:bf:e9:af:66:fd:03:52:e2:
94:ca:70:7f:bc:e5:e4:2b:54:33:0d:ef:54:61:f5:
d0:67:04:73:54:ff:b9:e0:57:e2:22:e5:a2:e9:f7:
5d:fc:55:b0:43:99:d5:19:8b:36:d4:84:a5:bf:5f:
0c:c2:95:4a:bb:ba:3a:91:0b:55:47:26:d2:fc:45:
a8:5d:b5:28:36:d0:f1:74:33:f0:75:9f:16:6f:cb:
45:35:9a:47:57:e3:ed:9f:7a:cc:96:1c:49:95:df:
ae:2a:3f:7e:42:d1:2d:fb:69:2e:23:c0:5b:98:e9:
12:2f:3d:95:42:7e:f3:ab:66:00:44:f8:9c:0e:05:
14:80:5f:ca:1e:ec:69:03:22:d4:72:a4:10:d9:20:
27:1e:66:71:8a:50:0f:00:3d:fa:40:75:fa:94:33:
1a:1a:5d:bf:e4:c9:86:58:c9:f0:56:6f:b9:b4:df:
95:dc:91:f8:f8:b5:31:f0:3c:50:d8:ee:52:70:17:
6b:89:e1:0f:88:5b:dc:ad:04:01:bc:8e:18:55:67:
ba:1c:f1:9d:dd:c5:9e:1b:af:c7:f4:09:5f:3f:18:
08:a2:d3:dc:f3:02:63:0b:15:d9:d3:2d:fe:46:a3:
58:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:39:BD:52:5C:3C:2C:81:3F:21:BE:52:D1:C1:95:FE:DF:87:7E:6E
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/JDm9Ulw8LIE_Ib5S0cGV_t-Hfm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.240.0/23
46.18.243.0-46.18.247.255
185.25.36.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:76:6e:87:26:93:ed:e6:2a:8d:ba:7b:b6:c8:bf:0e:f4:e7:
e8:02:3c:5c:e8:7e:dd:a9:a4:03:0f:2b:00:e7:d6:a9:59:f2:
42:4c:32:cb:2c:1d:82:ce:ee:96:f2:a0:51:2e:65:d0:7f:bc:
0b:f9:fe:f1:37:c2:d3:4a:da:a7:7b:51:77:c3:48:c4:6a:55:
e1:b0:a2:bc:27:57:7f:c4:ee:33:10:f2:a5:cb:6d:a2:7f:90:
46:71:a4:c0:6c:46:57:4a:69:5e:05:e7:43:6b:f3:95:a9:b2:
9b:f3:b3:dd:06:e9:91:9d:5a:10:ed:11:50:70:96:30:74:e4:
3e:03:1f:ff:cc:64:45:20:06:85:26:0f:af:48:fd:5e:cd:44:
02:a5:2a:1e:86:8b:c0:d7:84:a0:7b:a2:35:c2:bc:3b:c0:ec:
43:b5:e9:9f:02:d2:e9:85:2d:dd:2f:96:09:95:27:7d:18:3b:
8d:79:52:a8:36:21:38:3a:7e:c1:98:38:69:af:3d:9c:5b:7d:
ad:0b:58:81:bd:1d:02:58:c8:fc:ef:d3:8e:d2:15:cb:53:a8:
27:0d:70:e3:85:10:e8:04:ab:31:3d:c1:3c:52:36:5d:04:71:
61:ba:d3:ce:0b:78:91:b1:ba:99:70:4c:e9:03:62:7f:93:e2:
87:53:f5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:48 2025 by rpki-client