Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/RtBl-cH_dWfVWDo6vZ9JK8d5B54.roa
File: RtBl-cH_dWfVWDo6vZ9JK8d5B54.roa (raw, json)
Hash identifier: SzfAFlNMsn22qKn9fwI8RIIU/0Fa42S4uPgGFmehtVg=
Subject key identifier: 46:D0:65:F9:C1:FF:75:67:D5:58:3A:3A:BD:9F:49:2B:C7:79:07:9E
Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial: 4056
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/RtBl-cH_dWfVWDo6vZ9JK8d5B54.roa
Signing time: Tue 26 Apr 2022 05:45:47 +0000
ROA not before: Tue 26 Apr 2022 05:45:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52140
IP address blocks: 46.255.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16470 (0x4056)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Validity
Not Before: Apr 26 05:45:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46d065f9c1ff7567d5583a3abd9f492bc779079e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:db:a5:45:52:bc:dc:94:09:be:b8:c8:54:c4:
62:3a:dc:16:ef:f0:2a:6c:2e:83:cd:57:83:98:1e:
91:3e:ea:8b:2a:61:0e:68:d1:b8:54:9c:c4:17:41:
99:7e:b3:ba:e7:16:60:7e:1e:2b:42:8a:76:eb:fc:
68:98:b9:11:3b:23:a0:91:2b:4c:58:45:e3:ce:6e:
af:ad:c9:7f:9a:71:4c:72:2e:61:fb:67:bc:3c:ff:
2d:d4:3e:ec:fa:c9:3f:10:32:30:e7:35:59:82:89:
46:13:b5:18:47:5b:cf:90:28:74:b6:ad:fc:66:62:
7f:cc:c9:16:5f:54:d6:52:e6:3f:11:6e:2a:77:54:
11:ea:7e:29:37:e2:ff:47:9e:8e:a6:7a:72:48:1f:
6f:43:54:7d:2c:2e:62:77:47:10:4c:94:79:d6:c6:
48:44:34:0d:d4:1d:3b:cc:bd:3b:8b:5b:6a:0d:46:
12:30:43:6c:75:3a:25:c9:85:38:4c:3e:9c:ab:5b:
f0:3b:85:2b:24:9e:9e:e9:32:27:5e:9a:1f:b6:2c:
b2:35:03:ec:24:4a:48:92:de:e6:dc:98:c9:75:6b:
3b:cc:2b:85:69:8a:49:be:66:e5:90:df:c9:1e:db:
6a:81:98:e7:89:fd:64:bf:82:c2:e8:6b:b0:8f:34:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D0:65:F9:C1:FF:75:67:D5:58:3A:3A:BD:9F:49:2B:C7:79:07:9E
X509v3 Authority Key Identifier:
keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/RtBl-cH_dWfVWDo6vZ9JK8d5B54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.216.0/21
Signature Algorithm: sha256WithRSAEncryption
c8:37:24:89:03:18:34:3a:d7:aa:af:d9:95:2c:95:8a:97:da:
0d:f7:42:ef:db:8e:0a:93:62:f4:72:c9:04:96:c3:79:31:2c:
23:7e:bd:2a:e5:6e:f6:c0:ca:2b:6f:a1:b2:1c:e2:23:ca:52:
0a:69:7c:02:7c:20:2c:1b:0d:19:84:f5:26:e3:d0:63:70:8e:
5c:ca:03:ca:2c:d0:63:95:59:d2:3b:06:b2:3e:8b:73:23:d9:
4a:03:51:10:16:2c:1a:e6:8b:19:33:a8:48:bf:16:9f:64:b0:
9c:6f:3e:f0:65:d4:bb:a4:21:69:90:9c:26:e8:4c:4f:44:47:
1b:2b:76:e3:f5:8a:d8:e1:59:c8:0d:35:2d:28:74:5d:b6:b4:
66:5e:65:99:9e:a9:1a:0d:6d:a6:2c:f9:f2:66:f1:f6:41:89:
5d:f7:6d:e2:01:77:90:d5:5c:e1:25:d8:cd:d8:05:4b:eb:b3:
0f:c7:6f:c4:58:da:4e:2e:84:38:1e:56:db:ac:b8:16:80:35:
76:d0:ed:1f:62:c8:8a:89:42:0b:ec:b3:99:03:91:11:f4:65:
a0:e6:31:80:7c:7c:77:e4:57:b9:25:d3:b6:8a:69:91:7f:43:
92:44:3e:42:26:3b:04:e5:b4:3d:ec:79:bf:49:a9:6d:43:9f:
ba:3e:3d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:41:48 2025 by rpki-client