Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/6n5pHmy-icEUHYlJXN6Tb6PSENo.roa
File: 6n5pHmy-icEUHYlJXN6Tb6PSENo.roa (raw, json)
Hash identifier: m55uBg/+kph0PbVtcWfbGBoRnRR75/9cAVJiwOH01PI=
Subject key identifier: EA:7E:69:1E:6C:BE:89:C1:14:1D:89:49:5C:DE:93:6F:A3:D2:10:DA
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 44469915
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/6n5pHmy-icEUHYlJXN6Tb6PSENo.roa
Signing time: Sat 01 Jan 2022 03:53:07 +0000
ROA not before: Sat 01 Jan 2022 03:53:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51678
IP address blocks: 46.17.136.0/21 maxlen: 24
5.2.24.0/21 maxlen: 24
134.255.184.0/21 maxlen: 24
2a01:b300::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1145477397 (0x44469915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Jan 1 03:53:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea7e691e6cbe89c1141d89495cde936fa3d210da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:7c:78:35:e2:d6:03:3c:85:5d:c7:62:a2:
27:cb:0a:e3:4e:b4:e6:a6:d5:80:52:1e:f4:e2:6e:
38:b8:64:db:fc:15:de:cf:2d:cd:d8:70:a3:b7:99:
34:0a:15:80:24:a4:cb:f5:db:e0:42:b5:7a:f4:2e:
05:f2:aa:a6:55:32:ba:2a:b3:65:2d:da:12:38:ff:
99:b8:15:5e:56:2d:c9:9f:44:00:8c:36:66:11:7e:
56:e1:c9:7b:ec:dd:a5:fa:8f:bd:0c:27:80:95:87:
bb:e0:7b:21:01:b1:c0:8f:03:3d:5d:47:1e:75:72:
d1:c8:16:5b:03:50:e3:d8:cc:a6:64:df:45:5a:91:
59:37:23:05:f6:b4:19:75:bb:84:cc:f6:c2:39:e4:
e8:a8:f4:e1:88:00:35:57:2a:b5:39:ec:51:75:5a:
88:9c:14:bc:f8:2a:55:cd:65:ff:af:10:46:7e:62:
62:58:5c:f3:d7:41:6f:d5:5b:25:bd:75:7e:46:51:
2c:44:26:3a:f1:96:7d:a6:bb:8d:99:fd:82:3e:83:
bc:93:7f:90:f4:a4:22:5c:fa:02:83:cf:e7:c9:80:
c2:24:fe:42:dd:1e:eb:df:b1:d7:f5:7a:67:23:f3:
9f:90:46:67:cb:c8:1f:81:e9:dd:be:ba:2e:7b:65:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7E:69:1E:6C:BE:89:C1:14:1D:89:49:5C:DE:93:6F:A3:D2:10:DA
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/6n5pHmy-icEUHYlJXN6Tb6PSENo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.24.0/21
46.17.136.0/21
134.255.184.0/21
IPv6:
2a01:b300::/29
Signature Algorithm: sha256WithRSAEncryption
a0:7d:98:62:1d:c7:3d:50:78:90:30:1a:17:40:b1:53:28:0b:
78:19:83:f4:69:8e:c1:7c:f6:c9:5c:b4:33:1d:50:c9:56:d0:
23:57:57:9c:98:96:e5:18:f7:34:85:db:f8:8a:fa:59:1b:b1:
73:cb:e6:72:55:ad:e6:bf:28:85:13:5a:ca:eb:af:23:96:a0:
e4:9e:a6:c7:05:91:ce:43:94:3e:27:d4:07:90:c0:fa:21:65:
49:d1:c1:21:1e:e7:b3:c5:15:78:cc:f1:f7:6e:3d:47:94:cb:
71:ca:70:4c:27:66:cb:be:d9:55:8c:0f:48:f5:c2:8c:bb:8e:
fb:d7:de:5e:58:c6:37:d0:da:36:3d:25:60:e9:27:57:9d:ff:
51:a4:77:06:60:90:8c:45:29:d5:2a:00:97:41:35:cb:5f:ac:
9d:d9:1d:04:39:e8:7b:1b:71:4c:43:65:dd:1d:e1:bd:45:47:
53:a7:b2:0f:c3:16:88:52:a6:6f:ad:94:ee:f0:18:05:e2:04:
ec:9f:07:0d:3f:86:3c:c6:06:0e:fd:b3:32:bc:ff:25:e9:85:
c8:f4:1d:49:7c:ab:8f:d8:44:12:53:00:d6:79:20:b8:82:cc:
cb:98:2c:a3:7d:ed:ee:de:9c:f8:66:a2:86:b1:81:9f:34:2d:
c2:27:b1:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 16 22:16:47 2025 by rpki-client