Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/JyObYFw9HPNg4_UPUGdUgUUDRTQ.roa
File: JyObYFw9HPNg4_UPUGdUgUUDRTQ.roa (raw, json)
Hash identifier: 3eSOINGs0XZCJRZxTIaxxk9TTYMWuMnQWlryU3EzE1k=
Subject key identifier: 27:23:9B:60:5C:3D:1C:F3:60:E3:F5:0F:50:67:54:81:45:03:45:34
Certificate issuer: /CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Certificate serial: 09DF28BF
Authority key identifier: E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/JyObYFw9HPNg4_UPUGdUgUUDRTQ.roa
Signing time: Sat 01 Jan 2022 12:04:28 +0000
ROA not before: Sat 01 Jan 2022 12:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51968
IP address blocks: 46.23.128.0/20 maxlen: 20
46.23.136.0/24 maxlen: 24
2a10:2880::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165619903 (0x9df28bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Validity
Not Before: Jan 1 12:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27239b605c3d1cf360e3f50f5067548145034534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5e:c9:cf:c1:72:26:97:d4:f0:42:29:d4:28:
b2:db:23:e1:02:f6:02:cc:9b:d1:68:9f:de:62:1f:
33:fb:79:99:9f:b4:a4:48:79:5c:0e:f3:67:9f:44:
9b:7d:4e:f5:95:06:01:56:2f:d7:3c:0f:bf:6d:7f:
15:23:db:92:e7:fa:87:ff:ad:f2:eb:00:53:f4:b0:
85:69:9d:0d:28:17:45:8b:49:55:a4:b3:dd:07:fb:
52:1f:27:75:80:25:6f:b8:5b:2e:67:c3:de:53:63:
07:c0:1c:9a:a6:54:1f:24:60:80:79:ff:4b:76:59:
df:f7:ea:2c:d3:cf:ba:fb:2a:27:c2:7d:61:d1:ff:
4a:aa:b1:b4:de:58:87:bb:1b:97:e7:ef:ad:b2:c4:
b9:0b:c8:90:4a:77:a0:ae:0b:b2:88:42:00:69:00:
4e:dc:ee:42:31:f7:5a:c4:12:5b:f7:57:7f:0d:66:
b1:3d:4f:ef:27:f8:47:bc:10:b6:32:1a:e8:f6:d6:
8b:99:5c:ca:bc:8a:10:c8:17:57:d2:6d:81:9d:3d:
aa:41:2c:e5:a3:cb:7f:5f:8f:72:4a:08:59:c2:c4:
53:90:e2:2c:b5:5e:87:b9:63:e9:b7:2c:8b:b0:53:
a2:3f:50:99:cb:56:8e:f1:c3:83:c3:b7:d9:43:b1:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:23:9B:60:5C:3D:1C:F3:60:E3:F5:0F:50:67:54:81:45:03:45:34
X509v3 Authority Key Identifier:
keyid:E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/JyObYFw9HPNg4_UPUGdUgUUDRTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.128.0/20
IPv6:
2a10:2880::/32
Signature Algorithm: sha256WithRSAEncryption
81:44:bc:f1:ea:44:9a:d6:e2:54:02:74:9f:a0:61:c5:50:c6:
54:f6:06:ad:7c:84:cb:11:0a:44:f2:6f:97:8a:68:2e:e4:a4:
fc:02:0b:1a:69:10:13:7f:9d:9e:ef:b6:d2:fa:c4:90:3d:81:
6a:eb:5c:f8:60:e3:0f:da:5c:14:cd:a4:f9:c4:ca:2f:28:c1:
8b:c5:0c:a2:79:e7:b2:34:28:29:c1:7d:fb:d1:77:f2:88:b8:
2b:2e:cc:8d:e7:cc:43:51:50:67:25:0f:5b:7e:16:d7:73:57:
b3:89:38:73:5c:a4:7d:96:6f:8d:d4:eb:c2:9d:0b:aa:e5:f5:
27:05:7a:49:65:4e:20:e8:c8:7f:3a:bf:a6:41:60:46:c2:ba:
b2:82:be:73:63:a3:03:c7:e5:de:d9:52:db:95:d9:8f:43:8b:
27:4b:dd:33:eb:54:57:a2:bb:90:71:66:6e:14:72:23:6a:98:
40:f7:eb:f1:c8:b8:32:b3:84:43:13:1e:7e:be:52:b8:2f:00:
bf:74:21:0a:c2:ff:7a:5c:2d:95:e0:bd:86:da:da:22:f4:71:
ff:c6:80:fb:ad:4e:07:3f:85:9a:3d:6b:7f:87:ee:cd:f8:eb:
96:0a:5e:93:2d:01:b2:de:fc:b3:ec:8e:f6:68:38:b6:c1:84:
32:5b:4d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:11:36 2025 by rpki-client