Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/iaMQS3lo9eQ6FE-xBaTgCS-XzE4.roa
File: iaMQS3lo9eQ6FE-xBaTgCS-XzE4.roa (raw, json)
Hash identifier: X4L+bgvJmnBeopOtrqW78pq84I6KHLhUuRn0/XSKJ2E=
Subject key identifier: 89:A3:10:4B:79:68:F5:E4:3A:14:4F:B1:05:A4:E0:09:2F:97:CC:4E
Certificate issuer: /CN=5b998e184d4fc4affa20509099d919a31a07947b
Certificate serial: 071F9657
Authority key identifier: 5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/iaMQS3lo9eQ6FE-xBaTgCS-XzE4.roa
Signing time: Sat 01 Jan 2022 11:59:02 +0000
ROA not before: Sat 01 Jan 2022 11:59:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29449
IP address blocks: 82.143.0.0/18 maxlen: 18
46.37.224.0/19 maxlen: 19
2001:15a8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119510615 (0x71f9657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b998e184d4fc4affa20509099d919a31a07947b
Validity
Not Before: Jan 1 11:59:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89a3104b7968f5e43a144fb105a4e0092f97cc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c9:92:6e:10:77:60:83:89:fb:d4:0f:a0:25:
b5:7c:bc:87:ce:7a:a9:7a:95:26:09:9b:54:fb:38:
b8:85:36:ec:a7:2e:40:0a:d6:c8:23:a4:6c:3e:90:
88:33:2f:b2:fd:19:a1:93:eb:23:49:f5:a6:db:96:
ab:15:e8:95:68:75:1d:c7:d2:bb:27:0c:7b:98:f4:
f6:93:88:bf:c7:4c:7d:2f:d0:45:30:d7:98:27:c9:
32:07:9c:6c:46:52:d9:51:2e:4f:61:cf:1d:ca:ce:
dc:d7:35:6c:17:1c:7c:37:d8:34:0f:ea:50:f1:72:
73:bb:d6:e7:18:e7:bf:0e:5c:2f:3e:5c:96:13:d8:
d1:0f:e9:16:9b:a0:65:e3:28:fe:1d:06:42:8a:47:
b8:5d:c7:a3:99:59:b0:81:4e:4c:6f:84:3a:a1:aa:
5c:72:55:1c:57:ec:66:79:68:4a:c0:3a:de:60:19:
d7:6d:1e:14:66:ad:bc:ed:1a:c7:b6:ba:e2:a1:4a:
b5:f2:37:0f:d2:87:df:ff:14:9e:b8:7a:e6:04:66:
11:f7:0d:0c:b4:dc:b7:91:e4:fb:09:74:ed:3b:83:
2c:c1:6a:b1:72:ad:18:3b:6f:17:d4:ce:7f:54:02:
4b:eb:a7:73:c5:5a:0c:b4:4e:17:f4:b9:8b:f2:1a:
07:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A3:10:4B:79:68:F5:E4:3A:14:4F:B1:05:A4:E0:09:2F:97:CC:4E
X509v3 Authority Key Identifier:
keyid:5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/iaMQS3lo9eQ6FE-xBaTgCS-XzE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.224.0/19
82.143.0.0/18
IPv6:
2001:15a8::/32
Signature Algorithm: sha256WithRSAEncryption
3f:72:2d:86:b9:91:5a:b8:4b:fe:66:7d:ff:bd:a1:18:13:a2:
06:3a:c6:4b:c4:ec:1a:94:6b:69:4d:cd:0d:b1:b5:77:d5:89:
d6:90:59:d3:59:0e:52:a9:45:03:54:96:cf:b7:ea:11:a3:cb:
f7:91:85:93:d8:a4:3a:37:b9:71:ff:10:0b:9e:4c:db:9d:5a:
99:8d:d6:2a:2f:2a:04:8a:e3:7c:c6:4d:20:af:3f:46:61:76:
f6:85:63:1c:18:f9:60:14:3c:89:38:f5:1a:04:13:5b:52:61:
a8:30:f6:99:ae:26:f9:79:6e:f9:75:75:26:e1:5f:46:4c:a0:
a1:09:9a:bb:ef:72:95:fb:8d:66:ab:3e:89:52:51:e4:0c:d4:
50:1a:98:90:0a:bd:cd:6b:36:0b:c2:c2:c1:6a:98:1f:6b:63:
e9:2b:88:f7:f3:0e:f0:cc:9f:73:e9:5d:3a:fa:dc:24:f8:3c:
29:98:9a:ab:19:5d:fe:ad:42:95:d6:5b:a1:0a:3c:e3:16:22:
49:27:23:98:b4:b0:37:6e:5d:24:b3:13:3d:28:ac:82:a9:bc:
f7:74:62:62:3e:fc:16:a7:5a:2c:ea:60:98:e2:d9:62:cd:0f:
5e:81:d1:0b:38:f8:80:ad:82:a6:f2:64:ea:ae:45:42:58:fb:
9c:06:96:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:10 2025 by rpki-client