Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/529U36zUjf-oGeHTjvvr1Crmdy0.roa
File: 529U36zUjf-oGeHTjvvr1Crmdy0.roa (raw, json)
Hash identifier: zzjvJD7if3fVI5UDrsgoVhoaFPtFgGEJum07V59Dx0Q=
Subject key identifier: E7:6F:54:DF:AC:D4:8D:FF:A8:19:E1:D3:8E:FB:EB:D4:2A:E6:77:2D
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 0185724C639FF791AA9CE883BE075A9D32CA
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/529U36zUjf-oGeHTjvvr1Crmdy0.roa
Signing time: Mon 02 Jan 2023 11:44:46 +0000
ROA not before: Mon 02 Jan 2023 11:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28917
IP address blocks: 46.44.0.0/18 maxlen: 18
46.44.0.0/20 maxlen: 20
62.140.224.0/19 maxlen: 19
62.140.233.0/24 maxlen: 24
62.140.234.0/23 maxlen: 23
62.140.250.0/24 maxlen: 24
62.140.252.0/23 maxlen: 23
46.44.32.0/19 maxlen: 19
62.140.255.0/24 maxlen: 24
80.77.160.0/20 maxlen: 24
80.77.162.0/23 maxlen: 23
80.77.169.0/24 maxlen: 24
80.77.172.0/22 maxlen: 22
93.191.11.0/24 maxlen: 24
93.191.8.0/21 maxlen: 21
93.191.12.0/23 maxlen: 23
93.191.14.0/24 maxlen: 24
185.221.44.0/22 maxlen: 22
2a02:2518:11::/48 maxlen: 48
2a02:2518::/29 maxlen: 29
2a02:2518::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:63:9f:f7:91:aa:9c:e8:83:be:07:5a:9d:32:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Jan 2 11:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e76f54dfacd48dffa819e1d38efbebd42ae6772d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e1:28:1c:41:40:b0:aa:29:72:f1:e9:ee:c6:
da:0a:6d:1c:ef:52:5a:b1:c3:c0:7a:a5:b4:41:3a:
bc:50:36:69:2d:71:5d:88:38:5a:52:c9:25:f9:2e:
17:a1:ad:29:88:6d:6d:d3:bb:96:b0:bf:7c:9d:d7:
6c:ca:67:fd:3a:54:de:e9:22:44:08:1d:65:62:52:
ac:f7:7b:27:5e:53:58:ef:2e:9d:e2:10:9e:05:a0:
7c:93:91:08:20:4d:a3:19:37:96:76:d6:bd:1b:5c:
be:79:b5:39:7c:4e:ee:0c:2f:70:d3:d6:df:b3:4a:
3b:07:15:50:ab:f4:ba:3d:6b:c0:04:fa:65:f8:1d:
c1:4d:6c:9a:41:54:8e:ec:cc:3e:9c:4d:b6:5c:b9:
b6:35:51:fa:c7:82:42:41:7c:9d:0a:f9:ab:f2:17:
ff:37:45:75:c3:ed:cf:d6:ae:49:4a:3a:a8:64:69:
95:0a:97:bf:a8:0b:90:cf:2e:fa:ba:ad:4a:09:89:
20:fc:d0:ab:17:ce:c0:83:b4:71:cf:95:5c:f0:91:
ad:24:3b:f7:57:06:23:03:df:f6:fd:95:89:f8:54:
3d:22:5e:20:5c:fe:1f:fd:2f:49:1a:17:59:ce:32:
11:be:5e:49:ce:a5:4e:4c:1c:35:a9:ff:c5:cf:22:
98:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6F:54:DF:AC:D4:8D:FF:A8:19:E1:D3:8E:FB:EB:D4:2A:E6:77:2D
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/529U36zUjf-oGeHTjvvr1Crmdy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.44.0.0/18
62.140.224.0/19
80.77.160.0/20
93.191.8.0/21
185.221.44.0/22
IPv6:
2a02:2518::/29
Signature Algorithm: sha256WithRSAEncryption
93:ed:3d:56:9f:aa:1a:de:e8:0d:19:dd:4c:6c:ed:fa:98:6a:
fa:e1:74:5c:0c:fc:f1:b4:da:3a:5d:6b:06:65:f9:61:d2:ee:
a5:46:5c:45:c5:1e:32:b0:58:0d:46:68:52:d4:b6:74:a0:48:
c1:22:14:2e:73:40:58:97:98:ad:42:34:d4:99:7f:7c:7f:3c:
e1:c8:94:59:3b:19:4d:49:bf:3a:da:86:ff:9f:7e:18:8a:ae:
0f:4d:eb:42:35:e2:82:1c:9c:6b:12:f4:f6:df:1e:dc:78:90:
19:f0:a1:9e:7f:fa:18:87:fd:94:94:39:95:82:3e:55:ec:9f:
f6:20:5d:7b:75:88:16:0a:8d:7e:61:8e:92:6e:ab:c0:de:ad:
24:bc:45:da:b9:73:56:25:21:c6:8c:e2:dc:25:a9:cb:d4:3a:
09:b9:73:52:32:e3:23:a3:e1:09:32:3b:40:79:64:11:a2:80:
40:da:21:31:14:04:ed:ca:f0:f1:74:42:f1:ec:71:5b:a3:e2:
a3:dd:6d:34:89:e7:7f:38:9f:77:8d:5e:ce:7a:ae:f8:bd:79:
94:9f:72:72:12:49:f5:8b:a1:1c:95:5e:5c:77:d2:53:60:4b:
da:29:0a:84:f6:2c:86:dd:4a:fb:34:20:95:f2:63:6c:d8:8b:
d3:e5:f8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:16:08 2025 by rpki-client