Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/zB6wHZ081h1vM9yOSOGK_2hB5q8.roa
File: zB6wHZ081h1vM9yOSOGK_2hB5q8.roa (raw, json)
Hash identifier: kkXwSa6GbRvvR++oLLBs6N+NVg6MziTmzgzjRLqOlgE=
Subject key identifier: CC:1E:B0:1D:9D:3C:D6:1D:6F:33:DC:8E:48:E1:8A:FF:68:41:E6:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 018AEFCFFCF065D11658FADE0DD74C7709A6
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/zB6wHZ081h1vM9yOSOGK_2hB5q8.roa
Signing time: Mon 02 Oct 2023 09:54:59 +0000
ROA not before: Mon 02 Oct 2023 09:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46071
IP address blocks: 46.40.203.0/24 maxlen: 24
46.40.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:cf:fc:f0:65:d1:16:58:fa:de:0d:d7:4c:77:09:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Oct 2 09:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc1eb01d9d3cd61d6f33dc8e48e18aff6841e6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a2:e0:4f:93:1b:3b:25:e7:9e:fe:6f:f5:c0:
00:e7:d4:1a:42:c8:a0:a3:4d:e0:fe:1a:e1:02:e6:
d3:87:6a:a2:53:b1:0e:26:a7:f7:7b:3d:05:ec:72:
3b:93:39:27:fa:db:b3:41:df:3e:00:8c:fc:e0:19:
db:6c:0d:f6:bd:a5:31:66:c6:8e:cf:ab:b4:b9:51:
a7:d5:51:bc:cb:1f:7e:f4:75:1c:61:17:e4:6b:33:
c6:a7:46:19:b3:56:9d:da:b3:16:e4:8e:37:f9:d1:
7f:45:36:b0:71:d1:d3:1c:d2:28:96:38:10:b7:8d:
8e:fc:de:bf:b3:b2:41:70:37:c9:10:e7:05:21:ff:
85:17:8d:82:0b:1d:96:8d:a2:07:6e:bd:da:dd:78:
26:ea:25:76:78:d8:cd:cc:b0:7d:ff:c4:ae:d3:97:
79:5c:2c:54:20:9c:92:54:6a:33:59:3a:92:72:63:
96:cc:1a:9d:5c:96:87:00:6e:46:1c:4f:04:13:fc:
e4:30:2b:c2:fe:d5:7d:86:23:50:49:a1:08:2a:ae:
d9:fd:b4:50:98:99:b9:46:01:ec:36:18:7e:8e:57:
cf:d0:06:13:7f:e7:bf:c6:e7:d9:75:e8:6f:2e:07:
02:71:3e:d2:eb:62:92:78:11:f6:ee:a9:9b:4d:69:
d6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1E:B0:1D:9D:3C:D6:1D:6F:33:DC:8E:48:E1:8A:FF:68:41:E6:AF
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/zB6wHZ081h1vM9yOSOGK_2hB5q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.40.203.0/24
46.40.205.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f0:7c:d4:ea:89:f8:b0:9b:ca:db:e4:9d:11:64:b5:c0:9e:
e8:72:29:8f:8f:b9:05:eb:72:3b:83:70:77:e1:81:d4:30:03:
84:95:35:ec:d2:a0:22:cb:3a:e6:50:a6:06:d8:14:ca:5e:cb:
60:99:0e:34:ae:05:38:b1:35:96:fd:1e:4f:50:1f:e6:b1:b6:
d7:d9:40:87:d9:8b:7a:84:c8:e0:95:8b:a9:b1:ac:08:1d:41:
58:74:2e:53:7d:44:fb:fb:48:b0:4a:ae:db:50:66:03:ef:ca:
1b:c6:3a:48:90:89:3d:41:aa:48:eb:72:a5:ce:65:4b:ea:d8:
00:6f:ba:42:81:41:11:20:c3:8e:48:f2:fb:86:26:7b:e5:c8:
f8:75:c2:78:bd:7a:8c:f8:dd:02:a5:c0:dc:c7:00:7c:5e:6b:
5b:18:e4:97:71:52:0e:de:09:60:45:ab:06:a1:8d:ee:6f:19:
e4:e3:9f:64:14:2e:85:7b:ca:dd:34:59:c2:c7:dc:ed:8b:13:
31:c3:b0:5e:b2:7a:df:12:30:b2:1b:67:7f:c8:34:63:68:47:
bb:09:89:9a:95:5e:ab:95:af:ce:45:6d:df:bd:59:2f:3a:9a:
4f:70:ef:cd:a8:08:7d:ea:34:db:91:1d:ad:20:f5:cb:a6:77:
14:92:1f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:41 2025 by rpki-client