Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/s-ILSXt8E5rsn1D9bMjwqmX5D6M.roa
File: s-ILSXt8E5rsn1D9bMjwqmX5D6M.roa (raw, json)
Hash identifier: PdmS/NpHHr+f2LcC3YcE3qRBa14cA59VdBCDT55mOHY=
Subject key identifier: B3:E2:0B:49:7B:7C:13:9A:EC:9F:50:FD:6C:C8:F0:AA:65:F9:0F:A3
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0188F52759D14A866B753B6AEE152036FB1F
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/s-ILSXt8E5rsn1D9bMjwqmX5D6M.roa
Signing time: Mon 26 Jun 2023 00:42:56 +0000
ROA not before: Mon 26 Jun 2023 00:42:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48024
IP address blocks: 46.3.96.0/20 maxlen: 24
46.3.0.0/22 maxlen: 24
46.232.48.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f5:27:59:d1:4a:86:6b:75:3b:6a:ee:15:20:36:fb:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 26 00:42:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3e20b497b7c139aec9f50fd6cc8f0aa65f90fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:44:d9:32:06:c1:5f:b8:79:48:07:cc:d6:
18:a8:85:0f:15:fc:ea:fc:bd:e9:18:ee:36:75:d2:
24:26:a2:04:62:c2:d0:1c:0d:11:da:21:6b:b6:81:
47:fe:0c:e5:db:92:8e:97:70:15:6a:78:e1:95:d4:
e9:14:6e:bb:27:a9:e7:6d:76:74:4e:cc:65:ff:6d:
4f:ca:54:ba:e9:4e:c1:ce:bb:ef:6f:ed:a3:71:37:
46:50:eb:fb:d9:e5:41:a4:26:30:3f:90:74:04:3d:
3d:71:38:80:cc:29:84:b9:a1:9a:68:83:1e:09:0a:
cf:68:10:70:66:a4:64:39:a2:7a:39:9d:08:b6:a1:
3e:90:ff:c1:5e:ed:ad:27:31:8f:9a:90:27:4f:a0:
62:8b:24:c3:c6:c5:9f:08:9e:dc:98:72:21:79:74:
d6:6f:91:a1:e5:b1:40:5c:8c:1e:a4:9e:ad:0d:45:
11:be:8d:7c:44:2f:a3:2a:b4:45:ff:4f:9f:7b:fb:
5a:42:b6:37:95:54:1e:27:51:4e:0f:c0:d8:2f:55:
78:de:f9:b1:35:4c:6d:93:75:f7:87:10:17:80:3a:
82:b4:ef:eb:1d:b9:5d:24:17:7a:1e:eb:c7:a2:50:
b0:e6:b7:58:0b:37:53:4b:ca:72:a5:4c:c3:0f:30:
6c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E2:0B:49:7B:7C:13:9A:EC:9F:50:FD:6C:C8:F0:AA:65:F9:0F:A3
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/s-ILSXt8E5rsn1D9bMjwqmX5D6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/22
46.3.96.0/20
46.232.48.0/21
Signature Algorithm: sha256WithRSAEncryption
13:a5:e4:d1:c2:0d:97:22:70:a1:35:e5:ff:02:6d:43:cc:fd:
14:a5:d7:23:5f:6d:e0:0d:9d:c6:a4:2d:6f:97:c4:bb:b7:91:
1d:21:29:bc:92:8a:11:ac:40:6b:2e:28:92:53:7e:09:69:f6:
ab:17:de:20:ac:8c:1a:b5:7e:31:1d:5a:4b:5e:1d:8d:99:02:
d6:6e:fb:ec:ff:ec:7c:e8:c2:1b:9d:18:0d:19:eb:76:0e:c4:
8d:cf:a2:9d:6b:7f:06:7e:9c:70:77:ff:bc:af:5b:f0:7e:ab:
aa:24:9f:e3:52:3e:fe:9b:ac:7e:f9:e6:31:2b:a7:76:74:83:
63:fe:e1:e8:56:08:37:58:18:b1:70:b9:c9:4b:cc:90:0f:c0:
47:04:31:aa:4c:7d:03:26:bb:65:f4:9e:80:ae:c5:4e:df:a1:
37:23:c2:fd:90:d1:40:1c:f9:5e:92:31:ba:8b:bc:37:bb:0f:
fe:2b:bf:27:54:60:b1:87:01:80:b0:18:78:b8:dc:86:e3:65:
b6:0f:b2:00:aa:2c:f4:c2:a8:82:9e:c2:b2:1e:83:cc:6d:d3:
ca:6e:e3:9d:35:aa:c9:06:e4:1f:aa:e7:f2:92:5c:1a:c4:9e:
6f:bc:eb:72:9c:d3:64:a2:fa:fb:c5:05:ff:46:53:f6:10:6a:
b9:10:7e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:22:17 2025 by rpki-client