Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/yQiFSBlS8k3aSPo0sPykqJH38zM.roa
File: yQiFSBlS8k3aSPo0sPykqJH38zM.roa (raw, json)
Hash identifier: 26dumiPMY3xTS2SXRXNa99WaKRFM62UaR4eVURqUJzs=
Subject key identifier: C9:08:85:48:19:52:F2:4D:DA:48:FA:34:B0:FC:A4:A8:91:F7:F3:33
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018949179B910D38294F93BD7A2C2CDC9ABC
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/yQiFSBlS8k3aSPo0sPykqJH38zM.roa
Signing time: Wed 12 Jul 2023 07:53:51 +0000
ROA not before: Wed 12 Jul 2023 07:53:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198802
IP address blocks: 46.34.41.0/24 maxlen: 24
46.34.58.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:17:9b:91:0d:38:29:4f:93:bd:7a:2c:2c:dc:9a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jul 12 07:53:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c90885481952f24dda48fa34b0fca4a891f7f333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:49:f3:41:05:8a:51:8b:6e:77:3e:ec:1d:
b7:95:2d:d3:42:52:1c:61:0e:81:8e:34:30:5d:57:
e8:fd:d0:20:3c:7e:90:d9:f1:3c:3b:38:54:13:e9:
d3:4a:6b:b3:d8:00:27:91:ea:94:fe:1f:4d:ab:da:
a2:33:56:a2:b4:84:b8:3b:96:74:79:9a:fb:b2:e1:
df:4a:cf:aa:08:33:3b:d5:35:c1:3b:a1:b1:f0:93:
05:ea:e6:66:c1:a1:f2:37:d5:e6:ac:b1:c2:a6:0c:
06:53:7b:d6:51:b1:28:0a:99:08:ab:91:34:6e:67:
55:0a:7a:6f:e9:da:f9:c3:3f:d4:52:a8:b4:12:74:
8e:3a:c6:7c:ce:26:90:b1:46:7e:66:a8:1e:69:1d:
a1:76:c7:e5:6f:b8:16:15:9b:0e:1d:b6:eb:45:30:
2f:18:aa:7e:48:f2:59:4f:d9:2d:c1:fa:a6:a5:e7:
ae:1e:c3:28:9b:3f:09:98:f2:f8:ba:0d:b2:d9:90:
aa:9c:5d:a7:df:fc:eb:6b:06:19:21:5c:95:5e:97:
39:d3:09:66:14:02:41:c4:5e:98:9d:a0:bf:0f:d7:
ec:5b:f4:38:22:8e:c4:fc:90:31:a5:c2:7e:1c:d0:
0a:5d:4a:51:4c:bb:97:88:85:8d:67:d2:b7:8c:63:
eb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:08:85:48:19:52:F2:4D:DA:48:FA:34:B0:FC:A4:A8:91:F7:F3:33
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/yQiFSBlS8k3aSPo0sPykqJH38zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.41.0/24
46.34.58.0/23
Signature Algorithm: sha256WithRSAEncryption
74:4f:ae:9f:23:ab:fc:b0:bf:1d:96:33:be:6f:c7:ff:da:8e:
07:43:48:bb:cd:04:e9:23:50:a0:e8:bb:e8:a5:e6:60:80:ef:
e2:7c:18:53:fe:d4:25:79:1b:b8:5b:6c:f6:e7:9e:87:96:a3:
11:74:1c:27:af:d3:f6:06:57:ce:eb:d2:a2:c1:8b:c9:e2:7d:
d5:e4:93:86:8f:e9:bc:55:fa:88:00:6e:9d:19:b8:5c:6b:6a:
c5:2a:19:7c:63:94:76:73:65:9f:3b:cd:5c:8a:3e:6c:8f:e8:
df:30:b9:dd:88:b7:93:1b:15:ed:bd:ba:60:33:9e:a7:d3:18:
3b:be:a4:fb:34:05:f2:8f:dd:0d:95:bb:2c:30:87:8b:18:2a:
ab:cd:28:6e:f1:83:fc:5c:d3:bf:c4:7d:86:9e:39:d3:6f:74:
f4:ea:98:3e:51:44:ad:a2:84:2f:1b:8a:bf:01:95:8f:90:c2:
c3:d8:7d:d9:fd:a1:16:d0:64:aa:91:39:59:b7:06:8f:cb:0a:
ad:c3:78:6c:69:af:56:c3:a4:e9:93:84:1c:58:42:72:de:b6:
1e:0e:e3:e3:f1:3f:9a:7b:d6:16:67:4d:27:3a:e9:56:f0:41:
44:18:e4:a0:74:6e:e9:26:91:06:a1:5e:e7:13:8f:d7:81:b2:
b2:12:26:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:09:31 2025 by rpki-client