Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/jlvOR6x7QWPS7TAtWHGDRUeIorA.roa
File: jlvOR6x7QWPS7TAtWHGDRUeIorA.roa (raw, json)
Hash identifier: kLDYn/SHrnfevlYnSZcfg872prVcC8l0mT05p+iPDrU=
Subject key identifier: 8E:5B:CE:47:AC:7B:41:63:D2:ED:30:2D:58:71:83:45:47:88:A2:B0
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 018C4625C6B4807D752CD7D58170A223D357
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/jlvOR6x7QWPS7TAtWHGDRUeIorA.roa
Signing time: Thu 07 Dec 2023 21:18:49 +0000
ROA not before: Thu 07 Dec 2023 21:18:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212765
IP address blocks: 46.227.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:46:25:c6:b4:80:7d:75:2c:d7:d5:81:70:a2:23:d3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Dec 7 21:18:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e5bce47ac7b4163d2ed302d587183454788a2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:af:8e:43:4f:54:fd:aa:c8:a8:1b:87:0b:
05:6c:27:68:a4:71:14:8b:59:14:92:c2:d3:6f:b4:
7f:e9:31:32:f2:7a:fe:9a:13:05:16:df:44:e2:2e:
58:68:3e:17:8b:01:d9:83:86:8a:41:04:3b:40:7a:
2a:1b:61:20:ba:05:e7:4f:4c:8f:b9:cd:d1:eb:a7:
40:bd:ef:23:e8:21:44:cf:cd:91:b5:44:19:69:af:
00:9b:10:2e:c0:81:46:b7:ee:66:9e:1e:32:24:73:
23:a7:c1:95:0a:2f:e4:21:e4:cd:42:9b:ea:72:29:
72:16:27:cb:65:63:16:b9:70:10:83:51:35:58:86:
78:9b:8b:e1:4a:8b:3a:c8:21:b7:06:45:57:02:f6:
e6:4a:0a:5d:34:5e:90:7a:7f:4f:e2:81:ba:be:f2:
60:4a:4a:f5:21:6c:c7:f4:42:48:cb:6c:3c:90:23:
72:1d:07:d6:53:ec:61:40:1c:26:f0:04:6a:ec:39:
28:6f:08:1c:75:20:3f:95:e7:9e:55:ad:2a:72:c8:
38:a7:af:5c:8b:5f:3f:e5:76:59:f0:de:b1:a4:12:
66:6e:4a:f9:64:93:50:4b:89:ff:5f:7b:68:79:3f:
b0:ce:5d:47:5f:26:e0:ac:f7:c9:e2:97:48:f9:3b:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5B:CE:47:AC:7B:41:63:D2:ED:30:2D:58:71:83:45:47:88:A2:B0
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/jlvOR6x7QWPS7TAtWHGDRUeIorA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.152.0/21
Signature Algorithm: sha256WithRSAEncryption
87:5a:ce:fa:12:10:94:48:06:bf:66:31:98:1d:7e:d4:de:99:
39:71:af:a3:74:4c:71:22:25:f8:44:4b:7f:ce:5e:f8:f1:47:
5b:4f:d4:34:bd:1b:db:8d:b4:76:ec:f7:5f:39:0d:12:27:5d:
4c:40:e1:5f:eb:91:54:ac:90:af:0a:09:58:bf:63:ac:1d:5a:
48:e9:23:60:e2:cd:d6:b9:46:25:00:f7:5d:94:75:35:2d:4f:
b4:02:42:d8:5c:ed:d0:02:f9:40:2b:6b:96:cd:79:7f:b0:38:
a4:81:02:fb:2c:99:3a:10:e9:09:83:ca:70:7e:60:33:88:ee:
e4:34:61:aa:fe:ae:f2:d7:1c:64:9e:93:12:6f:5f:b1:58:94:
e7:43:99:6b:70:d8:14:37:92:3b:32:cd:d4:cd:d4:7a:d0:95:
1b:49:f6:ff:55:60:0a:53:2a:65:ea:74:ef:08:1a:93:cf:f8:
80:14:e2:d0:ce:2f:ba:b3:c0:3c:6a:af:86:c2:22:aa:cf:9c:
e3:eb:28:c7:e5:65:6c:4d:84:d5:ba:e3:24:35:6d:09:cf:fa:
a7:9a:b3:4b:a4:c8:39:c3:da:db:9d:f3:bb:8c:62:10:95:f6:
59:0e:20:b5:18:20:e0:1b:e6:c1:78:62:b3:af:fb:7b:af:82:
e3:94:a4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:42:01 2025 by rpki-client