Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Rt1mnx08gXgVLk5YsI0kz9HwwJY.roa
File: Rt1mnx08gXgVLk5YsI0kz9HwwJY.roa (raw, json)
Hash identifier: zaIkk+O8R3V2wmF40uw+NjvFigAovXI2+4UNyu7T+dk=
Subject key identifier: 46:DD:66:9F:1D:3C:81:78:15:2E:4E:58:B0:8D:24:CF:D1:F0:C0:96
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018C87F5E7D335F1E35E73BDABBE33FD822C
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Rt1mnx08gXgVLk5YsI0kz9HwwJY.roa
Signing time: Wed 20 Dec 2023 16:01:28 +0000
ROA not before: Wed 20 Dec 2023 16:01:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34458
IP address blocks: 185.100.171.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:f5:e7:d3:35:f1:e3:5e:73:bd:ab:be:33:fd:82:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Dec 20 16:01:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46dd669f1d3c8178152e4e58b08d24cfd1f0c096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:fe:78:8c:38:9f:ca:77:84:4d:fe:91:26:
7e:b2:d5:d8:26:e5:bd:24:8e:32:3a:7b:55:a3:25:
3b:1d:ff:88:12:e1:50:ea:1d:70:cc:32:68:97:34:
2b:97:ce:50:c2:a2:ea:fa:73:b0:bb:28:dc:b6:ea:
d6:96:28:46:74:e0:88:58:db:f6:62:0e:66:65:23:
98:69:49:bd:20:a3:6d:bb:a0:02:cf:64:b7:15:db:
81:14:55:94:c6:47:e1:56:7c:f3:e3:20:94:1b:2f:
0e:cd:37:0a:0a:3e:39:56:57:ac:c8:73:e3:8e:8a:
55:dd:86:c1:cc:74:7b:5d:0d:c7:b8:e6:af:f2:d4:
e3:9c:e7:18:23:b6:bc:17:b4:ac:09:e7:2d:6e:3b:
f2:bc:d9:15:15:e8:91:c7:fb:9a:5e:e8:34:ed:93:
a8:ca:e5:97:05:17:e6:bf:c1:81:45:68:11:7f:ce:
9f:39:ec:6b:9a:98:41:97:af:66:52:8f:c0:2c:72:
07:6c:52:28:f0:9a:42:a8:4d:eb:ff:d3:a9:f8:ae:
46:e3:74:1b:57:fa:ad:e7:53:cb:72:d9:13:31:cf:
c0:6c:29:d7:c8:aa:53:69:33:b4:9f:57:af:2e:97:
89:fe:10:6c:c1:1e:20:66:ca:7a:65:52:6c:0d:b1:
a5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DD:66:9F:1D:3C:81:78:15:2E:4E:58:B0:8D:24:CF:D1:F0:C0:96
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Rt1mnx08gXgVLk5YsI0kz9HwwJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.104.0/24
185.100.171.0/24
185.169.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:d7:8e:4a:63:2b:79:9f:ee:48:e7:19:d6:f0:98:57:06:48:
00:bf:cc:25:50:00:4f:34:36:82:ed:0e:f1:7b:dd:63:f0:63:
2b:62:dc:ed:53:39:7b:10:aa:3e:99:33:b6:6d:f3:36:eb:b2:
7d:a6:01:e4:b7:90:30:85:93:9d:6e:31:21:a3:6e:18:48:aa:
2c:94:92:45:36:41:85:0d:13:ad:74:a6:d7:4f:28:cd:32:4d:
96:f7:31:51:65:7d:63:86:d9:44:ec:21:52:7a:22:6b:2a:cd:
57:8c:5e:e0:c6:eb:5a:be:3c:f5:94:d1:eb:13:a2:da:9e:27:
f8:9b:0c:23:9f:88:3e:e1:ef:70:93:1c:d5:08:97:58:5e:b5:
95:0b:42:fb:c3:18:fa:0f:ae:b4:80:f9:53:1f:26:1f:ac:3d:
0c:9d:17:62:66:4c:af:49:c5:08:d5:a4:ab:65:cd:61:d0:7c:
a2:cf:c1:86:18:75:90:7d:db:54:7d:85:f9:8d:7b:7f:d7:78:
a1:23:28:f7:5d:8c:d7:c4:27:20:cc:9a:33:74:78:92:6d:13:
50:51:36:45:c0:77:6a:d4:48:9d:68:44:63:cc:61:b9:81:06:
6d:e4:80:9f:42:7a:5d:d2:f0:f0:65:aa:9b:1a:d6:4b:a8:81:
ce:b9:ad:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:42:21 2025 by rpki-client