Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/R5JHIhU3-Wer-KoTQaazUqSenrU.roa
File: R5JHIhU3-Wer-KoTQaazUqSenrU.roa (raw, json)
Hash identifier: 0V5RA7ofdtYrMbZFd6X5gKCDHCChAyRQoMTMyYlTfNw=
Subject key identifier: 47:92:47:22:15:37:F9:67:AB:F8:AA:13:41:A6:B3:52:A4:9E:9E:B5
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 01856DE6550395F1C59726C90DD16D50DC6B
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/R5JHIhU3-Wer-KoTQaazUqSenrU.roa
Signing time: Sun 01 Jan 2023 15:14:49 +0000
ROA not before: Sun 01 Jan 2023 15:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34804
IP address blocks: 85.159.224.0/21 maxlen: 21
46.29.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:55:03:95:f1:c5:97:26:c9:0d:d1:6d:50:dc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jan 1 15:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=479247221537f967abf8aa1341a6b352a49e9eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:75:20:b4:07:2d:45:1a:fe:3d:8f:34:30:4b:
07:b1:57:1f:76:33:c9:04:c0:f6:05:ee:97:0d:ab:
04:36:6d:69:20:61:d9:dc:13:d7:c9:42:38:d8:26:
36:2b:22:e8:d4:d1:c1:14:dd:1e:de:e4:ef:e3:d5:
7c:40:51:b7:cd:0d:bf:a1:48:61:f6:20:f4:c6:30:
cf:3a:39:e8:38:6d:d9:b3:30:f0:c5:84:fe:56:fd:
66:67:41:88:36:5e:e7:6f:4a:ff:58:0c:97:43:07:
7c:7e:8e:55:59:a4:62:24:55:c2:d9:55:51:fc:c5:
9e:b7:93:f8:0b:03:3f:ec:5a:3d:13:36:38:64:16:
43:e7:3c:56:d4:bc:83:3e:75:0f:fa:db:ca:ee:8c:
0a:42:71:2d:b1:81:92:98:d3:81:c7:5a:ee:56:46:
64:4c:fe:16:1a:4c:55:c5:82:63:ef:09:0a:e3:23:
ee:d5:c2:25:f6:01:dc:07:2a:12:c7:c7:1f:6b:a0:
67:d1:64:05:6c:5e:43:4f:e8:f9:bc:92:97:24:57:
62:50:65:94:6e:fc:d1:a9:56:24:25:c4:23:55:fa:
7e:55:bc:45:d0:1a:6b:95:22:54:14:d2:ad:04:44:
8c:05:15:5a:4b:89:b2:54:83:5a:7c:ad:27:4e:f4:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:92:47:22:15:37:F9:67:AB:F8:AA:13:41:A6:B3:52:A4:9E:9E:B5
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/R5JHIhU3-Wer-KoTQaazUqSenrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.232.0/21
85.159.224.0/21
Signature Algorithm: sha256WithRSAEncryption
45:ce:9e:82:49:a7:7f:78:ae:fb:0a:e0:d3:93:f0:fd:5f:a7:
27:37:09:83:79:d4:38:82:bb:61:fe:14:de:b2:e4:55:44:d8:
5f:82:48:59:a6:71:16:aa:b6:91:31:68:4a:1c:35:4a:a2:93:
e1:01:97:0d:71:9a:6f:1e:eb:5b:7a:2b:49:e2:07:7c:a3:e8:
c1:c9:11:97:4e:f7:2a:44:a2:c7:e4:21:d8:89:e9:a1:69:c3:
06:ea:a6:cd:09:f5:76:0d:41:bd:a6:94:7c:48:16:be:bd:de:
ca:01:c8:67:cb:67:ec:16:13:fd:61:da:a0:5f:ff:ac:84:69:
2a:3d:a4:fe:ba:dd:33:6e:91:67:6b:f0:69:5d:04:d9:f2:d0:
8a:8e:a8:1d:ea:73:5d:8a:68:6d:10:aa:16:a6:56:37:19:89:
ea:e9:f6:04:e6:28:76:67:0c:cb:30:0f:97:d5:c0:2c:25:1d:
82:20:a0:5d:e7:88:ac:98:b2:e2:29:7c:4a:7d:bb:7e:16:2c:
8f:c7:8f:57:6d:c9:81:6d:47:b2:65:19:dd:cf:fb:6e:2e:b6:
9f:9b:c6:ec:cb:97:68:9a:f9:ec:cf:ab:0a:b4:96:d7:d5:ef:
04:21:63:b4:19:42:aa:59:ac:31:b6:c4:a5:49:87:59:bd:e1:
61:eb:74:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:15:45 2025 by rpki-client