Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/2cMuqYQG-X9XdFHW51aTkg3Y3gc.roa
File: 2cMuqYQG-X9XdFHW51aTkg3Y3gc.roa (raw, json)
Hash identifier: CyCz8XZpt1hSywdkfpAlG8MaCwwbD4I2TAPtph+iY1g=
Subject key identifier: D9:C3:2E:A9:84:06:F9:7F:57:74:51:D6:E7:56:93:92:0D:D8:DE:07
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 01879426B5F781350996B6C26A7A42FB9975
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/2cMuqYQG-X9XdFHW51aTkg3Y3gc.roa
Signing time: Tue 18 Apr 2023 11:36:17 +0000
ROA not before: Tue 18 Apr 2023 11:36:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 85.159.226.0/24 maxlen: 24
46.29.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:26:b5:f7:81:35:09:96:b6:c2:6a:7a:42:fb:99:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Apr 18 11:36:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9c32ea98406f97f577451d6e75693920dd8de07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:b2:24:b8:f6:7a:7e:e8:89:5b:b4:94:5e:
f4:91:fc:48:28:c8:e7:5a:e4:c5:c8:b4:f2:ca:c0:
48:10:d2:2e:7f:42:16:49:b2:28:83:a6:e6:f6:1a:
29:ac:65:42:ac:95:39:c5:20:27:d0:78:bb:ec:af:
33:24:12:b4:0c:a6:19:59:27:91:8b:e7:3e:97:3e:
31:58:3c:90:3f:21:1e:91:5a:d3:fa:e8:e8:6d:bf:
6f:d3:46:a8:fa:02:31:20:87:49:09:0e:11:25:40:
36:39:cb:5a:c7:f3:5b:1b:18:f9:f8:82:5f:8d:bd:
49:56:96:5e:9c:31:36:32:e6:98:8d:ca:b6:36:e6:
b8:ba:24:82:e7:40:59:9a:66:7a:2a:20:c9:46:0c:
04:b6:be:e4:07:85:c3:4c:80:8e:d6:6e:e1:ba:f2:
6c:ad:70:29:83:f1:25:75:dc:73:48:42:e8:e8:b1:
c2:75:d5:c6:e2:71:0a:a5:d7:db:29:e7:79:3e:f0:
15:96:70:53:7b:92:d7:ec:be:0b:75:57:5c:25:f5:
b3:e1:ad:cd:cf:dd:08:9d:06:b6:93:9c:43:9c:e3:
81:e4:a8:a9:d2:9c:d4:20:50:e5:52:16:a0:2f:d6:
8f:d1:60:98:ab:2d:15:27:19:cb:44:01:56:66:5c:
16:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C3:2E:A9:84:06:F9:7F:57:74:51:D6:E7:56:93:92:0D:D8:DE:07
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/2cMuqYQG-X9XdFHW51aTkg3Y3gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.236.0/24
85.159.226.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ef:89:4e:34:5f:8b:10:18:9b:ba:50:fb:43:1a:53:33:36:
da:fa:c4:5c:25:0d:2f:15:7b:90:2f:87:fd:1f:33:df:3a:62:
b7:51:be:be:20:12:86:f6:e9:db:e5:87:80:c1:c2:21:88:7f:
13:24:d2:87:2b:d7:2f:14:5e:07:6b:da:4e:6f:65:79:cf:b3:
2a:bf:72:13:79:7c:bf:67:a7:06:1a:1c:40:a6:22:98:5f:2a:
99:c9:ce:a6:ff:91:2d:ca:bd:ef:24:c8:85:14:ff:7f:2e:2c:
29:49:cb:ec:25:82:07:b2:ff:33:68:f0:1d:e3:d7:fa:ff:a7:
e3:7b:c2:d5:ec:b9:56:30:6f:67:23:ce:a2:08:d5:1b:8f:c0:
ac:46:bf:b3:61:09:c0:97:a6:8b:86:29:44:b9:16:70:e0:d2:
6b:bf:42:64:49:68:1c:a3:ba:e3:4f:c8:f9:90:c5:a3:e8:32:
fe:3d:50:34:39:80:84:0e:a7:ce:82:e7:15:c3:76:f5:8e:ed:
1d:49:32:e1:86:56:ad:93:cf:06:ef:e5:39:8d:a8:0b:85:0b:
c7:45:41:30:a4:f9:e2:7e:77:69:89:de:ae:ef:84:c9:2a:6b:
4f:90:7d:9c:73:10:9a:f1:4d:6e:7d:2a:35:48:24:91:4e:3b:
43:b0:20:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:36 2025 by rpki-client