Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/E4CV7T8-t4V_mSFc5p6K0-GKYPQ.roa
File: E4CV7T8-t4V_mSFc5p6K0-GKYPQ.roa (raw, json)
Hash identifier: eFiXuCkFxhb2PGsbYjtXygUOIzJ9zngBRCp1cskC0x0=
Subject key identifier: 13:80:95:ED:3F:3E:B7:85:7F:99:21:5C:E6:9E:8A:D3:E1:8A:60:F4
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 42A6CC78
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/E4CV7T8-t4V_mSFc5p6K0-GKYPQ.roa
Signing time: Sat 01 Jan 2022 06:05:04 +0000
ROA not before: Sat 01 Jan 2022 06:05:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56341
IP address blocks: 46.52.224.0/21 maxlen: 21
188.133.224.0/20 maxlen: 20
109.203.198.0/23 maxlen: 23
188.133.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1118227576 (0x42a6cc78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 1 06:05:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=138095ed3f3eb7857f99215ce69e8ad3e18a60f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:02:09:9c:ec:1d:1c:ac:95:51:8c:43:f2:81:
28:cb:2f:a4:34:2d:35:94:c3:6f:7e:25:d1:af:ef:
cc:ca:8e:4d:9a:4f:2d:06:df:c1:ad:f5:ef:4d:f2:
9e:27:50:ad:dc:83:a0:cb:07:28:ff:13:83:d6:c0:
9d:5a:b2:51:d8:72:74:89:eb:ce:c0:52:2e:6a:8d:
41:34:a7:ed:d7:a3:8f:37:02:57:a7:e3:33:6a:d9:
9a:b7:83:04:87:70:72:61:8b:c1:9d:41:c7:28:fa:
c3:fd:59:e9:ee:7d:93:51:a2:e9:2d:d7:74:7d:a5:
a1:db:db:63:10:46:21:05:23:99:73:01:6e:83:12:
82:ba:c6:db:55:ea:d2:e1:c0:7b:bd:8b:5a:6b:b7:
6a:da:60:56:1b:c2:b3:14:33:58:72:7b:0d:39:f0:
04:24:b1:6e:18:c5:a8:df:a6:f5:17:39:ed:05:b3:
d1:8d:24:78:bd:58:82:9b:a3:5f:30:67:52:48:dc:
44:fc:18:72:d3:92:be:d1:7a:63:72:9c:33:cf:ad:
b9:3c:cb:70:42:d5:2c:47:80:ca:b9:88:dd:0f:4e:
28:ea:84:84:f2:7c:1f:8a:aa:6c:72:7e:ef:da:78:
4d:ca:e7:41:ba:af:fa:95:4c:ef:57:84:3e:f8:f5:
21:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:80:95:ED:3F:3E:B7:85:7F:99:21:5C:E6:9E:8A:D3:E1:8A:60:F4
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/E4CV7T8-t4V_mSFc5p6K0-GKYPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.52.224.0/21
109.203.198.0/23
188.133.224.0/19
Signature Algorithm: sha256WithRSAEncryption
80:af:f8:53:08:3e:f1:83:0a:06:92:76:49:14:1f:f3:9e:9d:
3a:d5:16:61:8e:b1:91:4c:37:b1:d7:5b:e2:1b:bc:6d:33:f6:
d7:dc:06:d4:91:3d:c8:14:82:11:2a:d9:74:a0:fd:4a:3b:f7:
89:40:ea:f3:a7:1a:28:f8:46:bf:7d:1e:62:5f:23:0f:2e:12:
c2:cb:6d:da:fe:6d:71:73:01:23:0a:1c:8d:b5:13:25:a5:28:
86:b3:7f:5b:04:d7:98:72:07:1c:5c:9a:8d:65:e4:31:fa:e1:
1d:67:a8:43:36:f9:53:a6:75:1b:0d:5c:2e:bb:63:e7:d7:ba:
6a:8f:13:5b:00:61:5e:82:3b:17:f8:97:11:48:ff:76:6f:58:
7f:21:49:6f:b9:79:6b:de:27:52:02:b6:3f:a8:60:57:8a:05:
4f:d4:38:2e:68:cd:7d:91:84:07:cf:af:5e:e9:31:9e:81:49:
19:ca:ca:58:0e:75:5a:24:77:3f:90:72:8b:4f:24:30:ee:e0:
cd:e3:dd:83:b1:60:89:8c:6c:4a:46:34:b2:f1:45:14:8c:f7:
26:9b:07:a1:b3:d4:46:85:b5:7c:34:b8:e9:14:f6:cc:a9:f1:
16:a8:59:f3:93:a9:3a:18:51:ce:39:34:df:76:ca:4d:d7:2c:
34:16:1e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:29:59 2025 by rpki-client