Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/xd9RrttpHicfkI-7JkPgZb2yW38.roa
File: xd9RrttpHicfkI-7JkPgZb2yW38.roa (raw, json)
Hash identifier: 12KXHr/srDWZnlWRSHC9TnTubD4Tj4Mr8ST6gGUpIE0=
Subject key identifier: C5:DF:51:AE:DB:69:1E:27:1F:90:8F:BB:26:43:E0:65:BD:B2:5B:7F
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018BF03622FB001B47E90351A3EBF7D0E3FB
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/xd9RrttpHicfkI-7JkPgZb2yW38.roa
Signing time: Tue 21 Nov 2023 04:49:21 +0000
ROA not before: Tue 21 Nov 2023 04:49:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 348449
IP address blocks: 46.20.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:36:22:fb:00:1b:47:e9:03:51:a3:eb:f7:d0:e3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Nov 21 04:49:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5df51aedb691e271f908fbb2643e065bdb25b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d9:d0:00:f6:21:86:4b:c9:34:2d:28:cf:79:
bf:a3:23:7f:b5:03:fa:01:72:eb:08:ca:d0:f2:dc:
b4:a6:32:73:73:d5:d6:31:0a:5a:20:9a:36:fe:ac:
7b:79:cc:62:23:99:2d:87:b3:17:dc:57:cd:11:b0:
03:c3:f0:21:29:b2:4a:a0:7b:05:44:36:1c:77:17:
d3:ce:9c:40:11:56:58:4c:19:e2:e2:36:5a:b9:e0:
b3:8c:32:cd:fb:ba:a8:6c:05:e5:46:39:d8:8c:06:
6b:92:54:4a:0f:d8:eb:19:cc:59:fe:09:a5:43:7a:
b3:0c:2b:bc:2d:a5:ec:76:19:fd:4e:4a:86:05:a9:
e1:44:3d:bd:4d:30:62:50:2d:5d:b1:d0:f8:0a:29:
7d:b6:42:58:10:3e:6c:f2:bd:b3:19:80:e8:cb:92:
69:4c:ad:44:76:57:f7:7b:a5:a7:38:d5:8a:f7:c8:
c2:71:e9:b5:f1:f8:87:a0:62:e3:3e:5d:c9:e6:57:
e3:a4:c1:2b:95:a5:dd:7d:05:7a:37:da:5d:f4:e8:
27:11:fc:ec:a5:f1:3b:91:fe:a9:83:eb:21:7d:21:
20:7a:24:28:dd:48:ce:e7:3f:9c:47:61:3a:51:7f:
02:86:25:f3:14:0b:d4:bb:d2:bb:fe:dc:43:b3:7e:
3a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DF:51:AE:DB:69:1E:27:1F:90:8F:BB:26:43:E0:65:BD:B2:5B:7F
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/xd9RrttpHicfkI-7JkPgZb2yW38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:84:cd:75:e8:8a:ef:17:09:6f:c3:f7:44:45:aa:df:85:44:
3e:ff:81:b5:15:7e:61:39:e2:8d:94:ee:57:a5:04:fa:27:14:
64:35:75:7f:bc:c0:d6:29:13:cd:43:ee:3d:79:40:5c:56:58:
ce:9d:fa:22:7e:a3:61:3e:92:02:8d:45:8c:d5:78:de:99:e2:
43:f7:b5:5c:e6:e2:57:46:41:b5:7e:e1:26:4a:06:2a:0a:ba:
dc:0b:8e:25:38:31:cc:8e:95:02:7c:1a:b7:b8:73:2b:55:24:
e7:20:5b:dd:88:9c:c5:29:71:3f:88:fc:36:ab:8c:1f:e5:42:
c4:7c:ea:1c:0e:33:9a:60:7f:40:c9:f0:cb:07:3d:98:af:c2:
9f:e4:8a:97:9c:99:ff:a2:a9:e7:03:f7:6a:da:8f:5f:41:26:
04:28:0a:c3:bb:ad:ce:e8:8c:c7:ac:e0:33:02:c7:f8:29:1e:
d2:65:a6:8d:30:e0:1a:e2:b8:1b:24:dc:54:6e:6d:e3:55:f3:
e2:2a:02:af:db:cd:d3:9b:69:c2:e5:11:06:c6:a8:d1:05:f1:
c7:80:83:99:af:60:62:31:7c:42:7a:c4:a9:39:d5:3a:b3:40:
7e:8d:77:f7:b4:17:a4:4b:af:02:9f:21:aa:ce:c3:cd:74:30:
00:3d:92:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:42:54 2025 by rpki-client