Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/T46YQmeEurp5mveLwQyusx8WI8k.roa
File: T46YQmeEurp5mveLwQyusx8WI8k.roa (raw, json)
Hash identifier: JKQsNkTJCoYZbtPm6IS6fHBbYd/VD2H1dxRGTDX3ojE=
Subject key identifier: 4F:8E:98:42:67:84:BA:BA:79:9A:F7:8B:C1:0C:AE:B3:1F:16:23:C9
Certificate issuer: /CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Certificate serial: 072370E3
Authority key identifier: E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/T46YQmeEurp5mveLwQyusx8WI8k.roa
Signing time: Sat 01 Jan 2022 03:55:26 +0000
ROA not before: Sat 01 Jan 2022 03:55:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210949
IP address blocks: 193.42.101.0/24 maxlen: 24
193.42.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119763171 (0x72370e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Validity
Not Before: Jan 1 03:55:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f8e98426784baba799af78bc10caeb31f1623c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:d2:96:7e:65:11:d8:14:42:81:da:b7:c3:
5b:59:d8:d5:e4:62:65:a9:c3:f0:5d:e2:02:c9:03:
54:15:83:10:8b:87:c4:57:5e:2c:6d:68:5b:bf:18:
cb:33:2c:83:0c:dc:84:34:1e:03:c4:a5:3a:4f:2b:
f9:79:ca:0c:d6:b0:cf:1f:e7:a5:13:78:6c:d2:a1:
13:34:aa:39:78:d1:33:95:1a:5d:fc:7b:2b:07:5f:
a6:3c:c6:25:d3:4a:2d:31:5c:f6:04:a6:c9:1b:ad:
7a:6e:59:18:13:50:1b:08:31:de:04:53:68:9a:b8:
dd:c2:72:aa:11:cb:07:53:33:1f:97:1f:89:6c:bb:
7d:95:87:98:ce:70:09:d2:8d:69:f7:5e:93:97:db:
70:6b:88:48:39:5e:32:c1:c4:d9:2d:db:82:14:e8:
d5:ed:f6:4b:3d:96:4e:4a:1c:20:87:1c:21:15:52:
ff:9f:e5:ad:54:52:55:11:92:49:aa:02:f2:fa:4b:
3a:54:a1:e2:41:72:bb:c5:0d:5b:89:39:54:f4:be:
c0:44:37:df:27:35:18:00:d8:45:07:54:89:f0:99:
c8:70:4c:3a:52:b5:f0:65:f2:7f:0b:89:0d:77:63:
ba:e9:ff:b9:42:7e:79:84:40:f3:3a:80:4e:92:fa:
c4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8E:98:42:67:84:BA:BA:79:9A:F7:8B:C1:0C:AE:B3:1F:16:23:C9
X509v3 Authority Key Identifier:
keyid:E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/T46YQmeEurp5mveLwQyusx8WI8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.101.0-193.42.102.255
Signature Algorithm: sha256WithRSAEncryption
51:ab:ef:9f:f3:b4:e1:e9:d8:17:f6:27:fc:6c:c7:bf:8a:6e:
0b:b4:f4:e5:a5:d1:1c:93:e9:9d:e8:8c:a5:a3:31:30:41:25:
3c:60:b2:dc:86:e4:af:ab:f5:c5:33:55:0d:c8:2b:49:99:d5:
21:da:fe:54:25:32:4f:1a:3f:60:1f:9a:c1:d4:97:5a:04:87:
76:e7:38:5a:84:a0:9e:d7:25:93:b1:06:04:e8:2f:b7:b3:ef:
59:2a:c9:68:b3:e0:e9:f0:2b:f8:72:32:80:fd:84:0c:cc:57:
4c:17:21:b5:5e:02:78:dc:61:b3:04:02:f1:a1:99:b3:4f:0e:
2c:dd:6c:bf:dc:0d:55:7f:1c:70:37:77:6f:5f:6c:61:6c:59:
a7:bd:50:de:c1:13:52:01:07:13:e2:79:80:7b:de:d7:e5:b2:
0d:89:a4:fa:33:ee:cd:84:b7:1f:c2:c6:9b:13:dd:45:d4:e6:
f9:2d:52:70:60:d0:e8:a6:07:fc:c4:6d:51:de:84:a4:33:1b:
a2:fb:8a:3a:9f:38:50:74:71:c3:db:10:e6:ac:11:04:8b:3f:
1e:2a:61:95:fa:cb:f3:20:eb:14:ff:8c:f0:aa:45:55:38:43:
59:b7:e7:90:39:73:ac:76:bf:50:c8:d6:e6:bc:c8:91:2a:62:
30:19:79:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:03:49 2025 by rpki-client