Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/VC7abpMe7owPHXXOaW3yhb4Kmn8.roa
File: VC7abpMe7owPHXXOaW3yhb4Kmn8.roa (raw, json)
Hash identifier: Vy3mwZi09Q/NLWYGFjqN9xiWZYcIDmanbzhkKaQuyBE=
Subject key identifier: 54:2E:DA:6E:93:1E:EE:8C:0F:1D:75:CE:69:6D:F2:85:BE:0A:9A:7F
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187F008CE626678430EDD95C711AE2E73DF
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/VC7abpMe7owPHXXOaW3yhb4Kmn8.roa
Signing time: Sat 06 May 2023 07:48:41 +0000
ROA not before: Sat 06 May 2023 07:48:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.27.0/24 maxlen: 24
46.162.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f0:08:ce:62:66:78:43:0e:dd:95:c7:11:ae:2e:73:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 6 07:48:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=542eda6e931eee8c0f1d75ce696df285be0a9a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:83:51:7a:d3:09:7f:c1:fe:4e:0b:a3:2e:cd:
fe:bb:de:29:4c:6d:dc:70:1a:82:f0:7b:dc:c5:10:
be:f1:7a:83:ac:d7:08:57:ad:58:9a:b2:09:1e:63:
9c:87:e1:81:a7:2e:33:70:28:b6:bb:11:ea:be:6c:
1f:3a:7e:49:cf:be:7f:ab:ee:57:1a:73:cd:74:fb:
e3:f6:eb:51:65:5b:00:4f:6b:a0:46:b5:c1:92:a9:
70:88:dc:4c:70:0f:e6:c3:59:37:b9:17:e7:b1:49:
f2:76:99:e2:1a:41:54:b2:f1:cd:92:b5:35:c0:7e:
ad:66:6c:85:1b:c6:5a:03:03:1f:7b:86:b6:33:7e:
2a:7f:39:4f:ad:f8:27:65:95:7b:7d:64:b9:9b:a8:
5a:4f:f6:2d:d3:ac:a2:d4:56:f3:dd:0b:6e:2e:35:
ae:a9:4c:ca:09:d7:14:79:4c:d1:1b:df:0d:09:68:
4b:e2:02:1a:cf:25:0b:1c:fa:bd:b9:25:bc:f7:40:
2a:82:a1:4d:00:7a:e0:33:81:fe:79:35:47:49:6b:
8f:b0:d9:90:72:02:ca:fb:88:e6:b1:f5:cd:68:e7:
3d:a6:6f:3f:26:b8:d4:ee:03:83:28:7c:b3:59:12:
e9:35:57:f3:26:68:f5:dc:15:f6:45:3a:fe:68:a0:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2E:DA:6E:93:1E:EE:8C:0F:1D:75:CE:69:6D:F2:85:BE:0A:9A:7F
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/VC7abpMe7owPHXXOaW3yhb4Kmn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.27.0/24
46.162.61.0/24
Signature Algorithm: sha256WithRSAEncryption
15:77:37:1e:de:2b:d4:62:a2:55:6e:24:3a:c2:94:2e:36:e6:
8a:f8:2a:27:21:10:3e:44:99:d9:75:59:ad:62:fb:05:98:c8:
93:9d:af:d8:f5:29:4c:19:ca:b4:59:26:d8:57:00:29:6e:35:
15:5a:c5:cc:d6:28:9e:17:29:cf:77:6a:ec:c3:ef:f5:1d:8f:
17:2c:a6:d5:94:6f:c2:a5:63:de:a4:ec:ae:74:bf:09:0f:5b:
19:8b:95:41:99:61:5f:a2:b6:d9:3e:15:af:78:a0:1b:86:5c:
d4:5f:35:71:33:23:fb:2c:87:87:6c:cc:27:0d:a7:a4:27:b2:
b0:f1:9c:20:c0:25:5e:a9:2f:16:1a:82:9e:75:9e:af:b3:5a:
d8:28:23:45:3b:05:f0:95:8c:7d:19:5a:d5:fc:20:d3:c0:97:
30:21:d5:6e:cc:6b:15:c7:d0:b7:bf:6d:39:9b:46:b7:49:85:
d6:8a:82:5d:80:7d:6b:1e:3d:4c:c4:0c:09:3c:56:c6:45:fc:
c1:3a:f5:ca:0e:9b:06:3e:be:27:7c:6b:84:af:38:1b:ff:8a:
da:6d:f1:6c:c2:f8:54:8b:b3:20:69:6a:9b:7c:46:fd:37:75:
10:b2:e9:1d:1e:a3:2e:c1:13:a8:d9:0a:dd:5d:c9:0f:6c:a8:
92:13:41:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:52:08 2025 by rpki-client