Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/RNpqz1eUyQjjYbm3y40XxU6B4EU.roa
File: RNpqz1eUyQjjYbm3y40XxU6B4EU.roa (raw, json)
Hash identifier: K3ue1OS5UCg+SZezy9VOxAGkugUibGn3HFEUa3Fk4YU=
Subject key identifier: 44:DA:6A:CF:57:94:C9:08:E3:61:B9:B7:CB:8D:17:C5:4E:81:E0:45
Certificate issuer: /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Certificate serial: 447B003D
Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/RNpqz1eUyQjjYbm3y40XxU6B4EU.roa
Signing time: Wed 02 Feb 2022 21:46:30 +0000
ROA not before: Wed 02 Feb 2022 21:46:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42514
IP address blocks: 46.22.240.0/20 maxlen: 20
95.141.176.0/20 maxlen: 20
178.17.128.0/20 maxlen: 20
89.232.180.0/22 maxlen: 22
128.204.160.0/19 maxlen: 19
185.12.84.0/22 maxlen: 22
94.102.16.0/20 maxlen: 20
2a02:2648::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148911677 (0x447b003d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Validity
Not Before: Feb 2 21:46:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44da6acf5794c908e361b9b7cb8d17c54e81e045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:a9:a4:ab:cc:31:0c:74:e1:d3:4b:b2:0f:
16:04:82:13:20:7e:f0:2c:bb:d7:0b:bb:03:2f:a3:
51:8e:ca:8b:00:c0:f4:5c:0f:80:3a:30:fb:6b:c4:
78:6c:e2:da:23:a6:90:80:58:b5:72:53:b4:76:43:
e9:5f:4b:e6:19:5c:13:ea:de:05:a6:05:88:f9:74:
9a:6c:1f:69:d4:1f:60:f2:46:64:db:99:06:cc:ae:
44:3b:d3:1a:5a:a3:4c:26:90:a0:33:78:98:1b:81:
5b:cb:f1:55:e0:1b:d2:fb:b4:27:49:5c:4b:60:62:
72:27:5f:a8:c2:01:e7:6b:9a:9c:31:7b:ae:bc:35:
5e:e0:11:50:e1:66:9f:0f:da:c9:fb:a0:be:34:0f:
0c:b2:f7:7e:8a:d7:84:aa:4f:c5:c2:c8:41:e7:97:
07:23:b1:e9:a6:de:83:ce:c3:e7:ab:08:8f:68:52:
d9:06:8e:53:cb:b1:cd:57:6e:e2:1b:ca:53:29:48:
12:ca:ea:9d:95:fd:98:6c:12:d1:36:88:8f:43:52:
dd:34:2d:0f:1e:25:68:0c:a6:c6:c4:b1:af:49:0b:
22:eb:6e:5a:a6:58:01:07:ad:c4:20:0b:7f:4c:a7:
2f:5e:37:f0:24:51:2c:47:9b:31:a2:af:97:50:eb:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DA:6A:CF:57:94:C9:08:E3:61:B9:B7:CB:8D:17:C5:4E:81:E0:45
X509v3 Authority Key Identifier:
keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/RNpqz1eUyQjjYbm3y40XxU6B4EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.240.0/20
89.232.180.0/22
94.102.16.0/20
95.141.176.0/20
128.204.160.0/19
178.17.128.0/20
185.12.84.0/22
IPv6:
2a02:2648::/29
Signature Algorithm: sha256WithRSAEncryption
91:fa:f5:9b:eb:ba:0b:42:08:fa:98:f4:5b:d3:58:e5:f4:c5:
4a:84:f6:19:1f:d1:d4:7e:7a:48:ef:44:3b:e6:db:7c:93:c3:
b5:1e:cd:97:9d:4d:34:dd:af:cf:fa:ea:73:65:84:cc:83:6e:
1d:dc:cb:0c:14:14:b6:67:28:7b:9c:62:27:45:9c:c0:30:6e:
71:70:0d:05:78:5c:00:f5:90:5e:b5:ed:54:cc:7c:3b:a7:2b:
c1:79:65:02:db:2d:ba:45:d2:23:66:47:95:de:88:3b:fe:a4:
3c:60:e4:bf:96:09:00:8e:f4:fb:e1:88:fe:c1:54:6f:5d:1f:
81:e1:91:12:49:7b:a3:02:99:04:ee:74:48:46:4e:d6:5f:b4:
2a:60:f8:76:47:a8:dc:4d:bf:40:08:a0:df:27:b2:ed:f5:f6:
63:ec:36:8d:34:cf:f4:40:16:dd:d2:e2:be:1e:b7:e0:9c:8f:
af:43:e6:49:22:24:40:a6:8f:e9:11:8a:06:9c:ac:11:49:97:
9d:7c:7e:df:c1:2f:b0:cd:0b:f0:fb:c8:25:a6:88:fc:2f:e4:
93:ec:8d:be:8a:90:59:2e:02:01:ca:6b:89:1c:19:f3:5e:eb:
ab:9f:91:20:24:a5:98:1a:a7:e5:f2:b7:bc:83:bf:7a:90:93:
70:94:f5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:58 2025 by rpki-client