Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/J_rOnAuw3XIYnmc7A3ggWC9DVHM.roa
File: J_rOnAuw3XIYnmc7A3ggWC9DVHM.roa (raw, json)
Hash identifier: BU77GTB51hgzW1+LUp7dQQ17Iy2x8BkTisJTAXKujQs=
Subject key identifier: 27:FA:CE:9C:0B:B0:DD:72:18:9E:67:3B:03:78:20:58:2F:43:54:73
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 0185718C1369AFD99F354516D2CB2E7F11DB
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/J_rOnAuw3XIYnmc7A3ggWC9DVHM.roa
Signing time: Mon 02 Jan 2023 08:14:43 +0000
ROA not before: Mon 02 Jan 2023 08:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51541
IP address blocks: 46.34.163.0/24 maxlen: 24
46.34.160.0/24 maxlen: 24
46.34.162.0/24 maxlen: 24
46.34.161.0/24 maxlen: 24
2a01:5501::/32 maxlen: 32
2a01:5503::/32 maxlen: 32
2a01:5504::/32 maxlen: 32
2a01:5507::/32 maxlen: 32
2a01:5500::/32 maxlen: 32
2a01:5506::/32 maxlen: 32
2a01:5505::/32 maxlen: 32
2a01:5502::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:13:69:af:d9:9f:35:45:16:d2:cb:2e:7f:11:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Jan 2 08:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27face9c0bb0dd72189e673b037820582f435473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:96:0e:a1:1b:ac:d5:13:b3:5a:2d:3c:6d:9c:
75:14:d6:dc:94:b1:82:3a:25:91:1e:16:0c:04:c3:
f9:cb:1a:78:3e:7e:fc:58:df:0c:4f:07:06:69:05:
17:45:be:30:64:b8:cc:c6:04:a6:d6:c7:56:0d:08:
11:b6:f5:d3:eb:69:92:56:6b:0f:ed:81:b1:22:2e:
56:a5:09:81:b6:d8:55:ee:1b:ab:54:ba:a2:32:73:
1d:a8:22:95:b0:5d:27:d6:d0:9c:e8:b7:ed:5d:cb:
0b:d6:c7:e6:ac:70:9f:d1:b6:1f:0b:31:e3:35:82:
04:5d:f9:d0:05:03:bd:97:46:89:5e:d4:d3:9e:d8:
dd:29:0c:43:d6:4a:f4:ac:67:f1:1e:94:ac:b9:b6:
93:fd:b5:5b:a6:e6:d4:54:91:25:6c:e9:4d:f5:ad:
1b:5f:b1:93:78:0b:7e:06:1a:c3:81:1e:05:37:a2:
32:82:9f:55:26:eb:2d:79:7e:fd:f6:d4:a1:ce:69:
3f:82:13:1f:0d:0c:1a:f4:03:fa:5b:60:9f:bd:54:
eb:aa:ea:26:95:d8:51:f3:a1:9a:75:06:97:7c:f8:
46:86:f2:ef:7f:af:52:f5:92:f1:ad:fc:31:86:4c:
ad:a7:bc:89:63:36:e9:3a:b2:bb:81:92:2e:64:6d:
3d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FA:CE:9C:0B:B0:DD:72:18:9E:67:3B:03:78:20:58:2F:43:54:73
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/J_rOnAuw3XIYnmc7A3ggWC9DVHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.160.0/22
IPv6:
2a01:5500::/29
Signature Algorithm: sha256WithRSAEncryption
3d:7a:4d:10:0d:98:d1:88:e3:5c:3a:60:f6:38:69:bd:aa:ec:
1c:76:bb:c8:b0:47:ee:70:b3:e3:77:4d:cb:52:7b:4c:bb:a1:
cb:6b:0c:05:61:d6:34:ee:38:f3:bd:a5:50:dd:47:d7:0c:49:
85:7f:8d:3f:2e:dc:6b:50:48:5b:39:86:c5:a6:5e:37:54:85:
eb:39:92:60:1d:3b:24:f6:51:89:3a:db:5c:78:75:2c:15:93:
d3:eb:ca:ce:e9:1f:b9:0c:e8:41:b5:cc:a6:4e:52:16:d0:79:
0f:e5:cf:37:71:61:39:66:8b:b8:0c:bc:c7:91:42:c6:f4:52:
7e:28:71:73:44:53:66:47:59:ff:23:bf:13:2a:0a:76:87:ae:
5d:6a:a8:95:86:d9:aa:44:5b:a4:bc:27:22:8b:51:1c:cb:96:
c0:35:76:4d:a8:09:04:d9:88:3c:ed:b3:24:3a:b2:5b:ff:fb:
46:94:9c:e8:1c:ac:0d:52:c3:84:f9:b8:f2:bc:40:65:7b:77:
d2:bd:4b:a4:1f:7a:f9:c2:c7:ea:1c:40:c0:eb:0e:2e:e7:50:
b0:25:92:95:64:6b:8e:85:c6:28:ff:7d:89:ef:60:f7:96:fa:
84:a9:93:1b:95:6e:5b:ff:86:e8:67:d3:bc:ab:d5:c9:b5:80:
b0:e5:d1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:49:17 2025 by rpki-client