Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/XJQrEh3xwh8LaNX9DfsnDvG3zqI.roa
File: XJQrEh3xwh8LaNX9DfsnDvG3zqI.roa (raw, json)
Hash identifier: zSeIbiOnsZR70DP8T6weS/q064m6YNyQLU08KYrzcCE=
Subject key identifier: 5C:94:2B:12:1D:F1:C2:1F:0B:68:D5:FD:0D:FB:27:0E:F1:B7:CE:A2
Certificate issuer: /CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Certificate serial: 01838902C148F6BB703D6C5518C7CA4AD990
Authority key identifier: 31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/XJQrEh3xwh8LaNX9DfsnDvG3zqI.roa
Signing time: Thu 29 Sep 2022 11:30:02 +0000
ROA not before: Thu 29 Sep 2022 11:30:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204818
IP address blocks: 46.16.205.0/24 maxlen: 24
46.16.206.0/24 maxlen: 24
46.16.207.0/24 maxlen: 24
185.148.77.0/24 maxlen: 24
185.148.76.0/24 maxlen: 24
185.148.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:89:02:c1:48:f6:bb:70:3d:6c:55:18:c7:ca:4a:d9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Validity
Not Before: Sep 29 11:30:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c942b121df1c21f0b68d5fd0dfb270ef1b7cea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9b:96:07:37:ae:aa:e7:fd:6d:d9:a5:e5:0b:
58:03:d2:08:3b:4f:6b:d9:e3:ca:5c:8f:a5:e6:29:
34:2e:a1:a7:39:95:1e:3b:58:aa:8b:6f:6c:d8:c2:
aa:8e:5f:e6:eb:fc:86:f7:f9:68:1f:cf:d1:d7:7e:
ed:87:50:09:3c:f0:c3:23:7c:05:85:1c:a9:a3:ec:
ba:84:a3:df:53:02:03:9e:8b:91:b4:c6:b7:21:eb:
b6:c2:5e:d9:73:2c:ac:ff:d9:39:b1:e6:d4:aa:fd:
d7:12:fc:4e:46:71:9f:cf:10:74:23:43:f7:1f:2a:
cb:48:73:25:05:e2:64:d9:7b:6b:df:45:a2:19:71:
1a:ef:f9:3e:15:79:66:cb:99:68:a6:62:ae:15:63:
87:c5:fc:1f:6c:6f:49:af:60:b7:c2:5f:75:a4:9b:
cb:2f:93:f9:94:23:0b:e3:b3:05:e6:a1:20:bf:4e:
bc:c5:5e:ac:b6:84:d0:1f:94:ca:77:45:c0:09:7c:
51:e8:f5:9e:ad:5c:3c:30:4c:aa:19:e8:aa:1a:60:
3f:e6:4d:e3:d7:2f:b2:35:39:c3:03:bb:ae:60:f0:
20:51:95:c8:95:e8:27:1e:3a:48:a3:4b:b6:e1:50:
38:b4:0a:0c:ac:0a:92:06:d6:09:63:19:8e:e2:5d:
44:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:94:2B:12:1D:F1:C2:1F:0B:68:D5:FD:0D:FB:27:0E:F1:B7:CE:A2
X509v3 Authority Key Identifier:
keyid:31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/XJQrEh3xwh8LaNX9DfsnDvG3zqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.205.0-46.16.207.255
185.148.76.0/23
185.148.79.0/24
Signature Algorithm: sha256WithRSAEncryption
54:69:b7:54:74:c9:f0:a7:99:e1:a5:ca:7e:2f:fb:a8:a9:e5:
fa:f1:bd:be:bc:86:33:14:22:d3:89:44:c7:cf:c3:d3:25:b7:
06:e6:5f:a7:cc:2e:9f:ce:4c:38:dd:e4:a0:8f:0f:3a:3f:1a:
38:81:e6:5a:6c:48:bd:67:c2:4f:26:da:61:ea:fc:79:d6:e8:
37:8e:7d:fe:cf:34:95:81:df:f5:c1:c1:a1:c7:90:8f:b2:c8:
74:6d:14:af:ff:54:39:53:a4:90:0e:f8:c1:a1:ca:16:e6:43:
ea:61:23:2a:16:95:31:8c:ae:e6:62:87:df:3d:14:bb:4e:7e:
0c:27:02:fe:b6:41:74:03:f7:93:65:e6:89:5b:f8:5a:27:ee:
0b:f5:ca:c2:b4:e0:63:e1:61:05:ad:99:e3:99:84:ea:0e:fb:
4a:a4:5d:ec:8d:d2:13:b4:97:8e:c8:3b:43:ec:3f:57:aa:5f:
55:91:f3:92:bf:65:91:4b:01:33:51:e4:0e:f1:15:14:dc:c2:
57:3d:9e:1a:12:67:21:b3:41:91:7c:1c:85:b3:74:07:f9:67:
a2:ce:fb:e7:4f:21:91:c2:b6:f3:82:79:86:48:4b:5e:ad:74:
98:cf:ec:f1:2f:c1:56:25:f0:4f:30:92:48:a6:a0:17:85:8f:
10:e7:12:cf
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYOJAsFI9rtwPWxVGMfKStmQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYTNkYTZkMGZhZmQyN2QwMWI3NDcwM2JiMzlkOGMxMTVl
ODY0MTIwHhcNMjIwOTI5MTEzMDAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Yzk0MmIxMjFkZjFjMjFmMGI2OGQ1ZmQwZGZiMjcwZWYxYjdjZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJuWBzeuquf9bdml5QtYA9IIO09r
2ePKXI+l5ik0LqGnOZUeO1iqi29s2MKqjl/m6/yG9/loH8/R137th1AJPPDDI3wF
hRypo+y6hKPfUwIDnouRtMa3Ieu2wl7Zcyys/9k5sebUqv3XEvxORnGfzxB0I0P3
HyrLSHMlBeJk2Xtr30WiGXEa7/k+FXlmy5lopmKuFWOHxfwfbG9Jr2C3wl91pJvL
L5P5lCML47MF5qEgv068xV6stoTQH5TKd0XACXxR6PWerVw8MEyqGeiqGmA/5k3j
1y+yNTnDA7uuYPAgUZXIlegnHjpIo0u24VA4tAoMrAqSBtYJYxmO4l1EfQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFFyUKxId8cIfC2jV/Q37Jw7xt86iMB8GA1UdIwQY
MBaAFDGj2m0Pr9J9AbdHA7s52MEV6GQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWFQYWJRLXYwbjBCdDBjRHV6bll3UlhvWkJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yMDI5MDAtM2Q3Mi00MDViLTllZjYt
NmNkNGM5ODBhNTIzLzEvWEpRckVoM3h3aDhMYU5YOURmc25EdkczenFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yMDI5MDAtM2Q3Mi00MDViLTllZjYtNmNkNGM5ODBhNTIz
LzEvTWFQYWJRLXYwbjBCdDBjRHV6bll3UlhvWkJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAuEM0D
BAQuEMADBAG5lEwDBAC5lE8wDQYJKoZIhvcNAQELBQADggEBAFRpt1R0yfCnmeGl
yn4v+6ip5frxvb68hjMUItOJRMfPw9MltwbmX6fMLp/OTDjd5KCPDzo/GjiB5lps
SL1nwk8m2mHq/HnW6DeOff7PNJWB3/XBwaHHkI+yyHRtFK//VDlTpJAO+MGhyhbm
Q+phIyoWlTGMruZih989FLtOfgwnAv62QXQD95Nl5olb+Fon7gv1ysK04GPhYQWt
meOZhOoO+0qkXeyN0hO0l47IO0PsP1eqX1WR85K/ZZFLATNR5A7xFRTcwlc9nhoS
ZyGzQZF8HIWzdAf5Z6LO++dPIZHCtvOCeYZIS16tdJjP7PEvwVYl8E8wkkimoBeF
jxDnEs8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:56 2024 by rpki-client on console-fra.rpki-client.org