Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/pAtkeaKmjcKbFZhIv7hkEFN985c.roa
File: pAtkeaKmjcKbFZhIv7hkEFN985c.roa (raw, json)
Hash identifier: 66+76N6xqkbtPfZKrZYNsuxP7l0obla6mmWrB6/zK7Q=
Subject key identifier: A4:0B:64:79:A2:A6:8D:C2:9B:15:98:48:BF:B8:64:10:53:7D:F3:97
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0188961B9D1C902E807C39E122FA81D4CB8D
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/pAtkeaKmjcKbFZhIv7hkEFN985c.roa
Signing time: Wed 07 Jun 2023 13:46:11 +0000
ROA not before: Wed 07 Jun 2023 13:46:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50738
IP address blocks: 46.23.96.0/24 maxlen: 24
46.23.98.0/24 maxlen: 24
46.23.108.0/24 maxlen: 24
5.178.2.0/24 maxlen: 24
5.178.3.0/24 maxlen: 24
109.205.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:1b:9d:1c:90:2e:80:7c:39:e1:22:fa:81:d4:cb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jun 7 13:46:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a40b6479a2a68dc29b159848bfb86410537df397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:a5:6a:34:80:8b:3e:b6:85:e4:29:15:c6:
b1:03:d7:c4:80:ba:11:69:8f:58:7a:e5:77:aa:f3:
f3:ca:3d:3f:c4:e1:d4:32:90:16:a4:fb:33:d5:40:
6b:06:bf:b1:d6:b2:2a:7c:ff:03:18:7a:f9:df:b3:
77:15:4d:b9:fe:86:67:47:71:30:c2:66:53:9d:a0:
55:97:79:6f:ca:ee:73:2c:9b:36:03:05:b2:19:73:
c3:f6:bb:51:4e:34:5d:41:32:34:8f:99:a0:e7:26:
38:83:f1:f8:11:d2:47:30:81:5f:c1:f0:ca:10:62:
8c:d6:5e:57:fa:b6:54:f9:1a:ec:a7:3b:e1:f3:ca:
18:4c:cb:a6:dd:f2:8b:25:76:63:01:72:b3:f5:23:
9b:61:bb:93:a0:1c:85:af:58:25:3c:cb:01:e1:02:
e0:e5:84:01:9c:ca:4d:57:e5:ba:22:ad:3f:6d:69:
b6:f5:7a:1e:3a:62:21:1a:7b:84:10:ee:47:e6:0f:
8f:75:a7:59:e3:0c:2b:cf:9e:8a:f6:b4:b5:b5:a4:
ac:f7:d8:60:47:1c:ad:b1:21:8e:d1:0b:b7:71:1b:
20:93:93:8b:17:a8:7d:04:c4:d0:5d:6e:d7:7c:c2:
57:a7:b2:8d:d8:a9:00:81:01:79:e3:04:23:7f:f6:
6c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0B:64:79:A2:A6:8D:C2:9B:15:98:48:BF:B8:64:10:53:7D:F3:97
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/pAtkeaKmjcKbFZhIv7hkEFN985c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.2.0/23
46.23.96.0/24
46.23.98.0/24
46.23.108.0/24
109.205.212.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:54:ab:1f:9d:fb:ff:8d:34:80:46:04:79:26:62:cb:f0:96:
f9:84:cc:52:18:a9:e1:f0:ed:2c:76:58:be:22:27:70:f4:83:
7d:01:6d:d4:41:b2:80:0a:91:d6:15:bd:00:a4:4d:62:57:bc:
07:93:f7:65:db:d3:a2:c4:02:18:63:4e:95:e1:f9:7b:33:0e:
a8:91:a5:4f:f5:10:0b:73:d6:b5:c5:ba:9c:5c:1e:38:47:97:
78:ad:de:22:ce:82:98:26:82:a7:30:b2:44:55:98:4b:0a:92:
7f:90:38:7f:fb:79:63:c0:c4:20:a3:a0:92:a1:e8:40:43:52:
bb:95:ab:3f:b8:b5:44:25:8a:33:11:d4:76:dd:ca:c8:dc:b0:
10:8f:d8:1a:6d:30:81:b1:54:25:eb:7b:8c:3a:83:c9:1c:40:
2c:91:e7:3a:6a:e7:8c:67:84:c1:e8:25:a3:15:88:84:61:26:
29:25:52:17:a5:46:1c:f4:11:07:ea:35:76:61:a3:95:6d:26:
f7:31:07:ef:49:ac:86:2b:ab:37:9d:5a:be:e7:ae:fc:d7:1f:
07:da:7c:4f:a1:c5:d2:5b:20:4a:7a:e4:a1:5d:5b:8b:dc:26:
bc:a6:6a:32:23:55:00:7a:b6:81:10:1a:eb:93:0d:53:05:af:
63:82:9e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:18 2025 by rpki-client