Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/x7_8QpTFqfAu_Nd7ef9FCW8wnmg.roa
File: x7_8QpTFqfAu_Nd7ef9FCW8wnmg.roa (raw, json)
Hash identifier: ghpZti0DdBOXE4+J++EXZQAiOaHqsO0BgjeDmlMmI4s=
Subject key identifier: C7:BF:FC:42:94:C5:A9:F0:2E:FC:D7:7B:79:FF:45:09:6F:30:9E:68
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01839401C9024B4325CE9151552EE1216797
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/x7_8QpTFqfAu_Nd7ef9FCW8wnmg.roa
Signing time: Sat 01 Oct 2022 14:44:48 +0000
ROA not before: Sat 01 Oct 2022 14:44:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 162.217.251.0/24 maxlen: 24
155.254.62.0/24 maxlen: 24
107.161.174.0/24 maxlen: 24
107.161.175.0/24 maxlen: 24
107.181.135.0/24 maxlen: 24
2a07:9940:3333::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:94:01:c9:02:4b:43:25:ce:91:51:55:2e:e1:21:67:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Oct 1 14:44:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7bffc4294c5a9f02efcd77b79ff45096f309e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:d0:1d:f5:49:7b:09:c7:6a:5f:67:04:a8:
13:2e:85:42:67:9f:4e:7e:b1:0a:60:ad:cd:4c:3f:
c7:29:a5:ff:15:e8:83:e6:38:a8:e4:7d:79:ed:d7:
09:92:52:18:27:95:09:e8:e9:60:31:d0:31:b3:52:
4d:b4:45:80:02:b4:de:7a:58:57:60:ec:e4:87:fd:
d2:0e:ab:14:2b:03:02:a2:d3:a7:74:de:f6:89:0d:
3c:6a:67:81:a0:55:3e:01:1f:6e:fb:29:5a:bb:bf:
20:ac:df:ff:02:35:69:13:74:b0:73:61:5d:cd:eb:
e9:65:3a:a9:c4:8c:1d:a4:f1:d6:f2:79:30:28:37:
d4:76:2b:3c:e3:1e:a3:74:5a:58:c3:5d:c6:aa:49:
c5:c0:fb:70:5c:17:24:96:87:3b:dc:66:5b:91:b4:
5e:bd:8b:bb:62:76:7c:2e:ed:d1:cc:94:93:b7:fb:
b7:89:f1:f8:f5:3d:b8:c8:ea:4b:d2:f8:00:94:f9:
3a:d0:14:04:b7:89:4a:a3:e6:ae:dc:d6:77:d0:77:
0d:ae:a7:63:ab:45:1f:0b:cf:0a:c3:49:f4:46:32:
82:49:5b:6c:c6:1f:72:a8:ad:d7:d2:2b:b6:08:97:
0a:7e:0f:d1:8f:14:5e:5c:f8:7b:35:57:27:b2:1a:
85:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BF:FC:42:94:C5:A9:F0:2E:FC:D7:7B:79:FF:45:09:6F:30:9E:68
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/x7_8QpTFqfAu_Nd7ef9FCW8wnmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.161.174.0/23
107.181.135.0/24
155.254.62.0/24
162.217.251.0/24
IPv6:
2a07:9940:3333::/48
Signature Algorithm: sha256WithRSAEncryption
6a:af:7c:87:c8:36:a2:df:41:d2:fd:24:56:9f:ae:6d:45:f6:
c5:fb:75:fd:cc:89:1c:51:87:bf:d7:61:03:f0:b5:13:16:58:
29:ee:76:f4:da:ef:65:ab:0a:59:8f:c2:4a:40:7d:f1:b2:3a:
fc:0b:d3:af:16:7d:71:ee:8c:56:86:ca:f1:a4:ad:c6:1c:7a:
7c:ce:f8:6d:a3:8d:05:29:63:6e:15:87:27:81:d6:6a:a1:00:
20:c5:1e:ce:c6:83:17:b2:1c:8a:1a:e6:6b:b5:51:5b:f2:2e:
d8:a9:01:02:7d:8e:52:a0:bc:6b:c3:f5:28:be:d9:46:84:8d:
25:95:ac:6b:6c:82:f5:82:13:e4:f9:a6:c2:87:ee:61:1f:f4:
77:7e:8f:2b:5f:e6:e9:e7:f6:90:22:25:cb:ff:85:3c:99:93:
03:0d:09:89:93:aa:86:72:be:03:37:3c:81:3c:80:83:24:94:
a9:0b:27:28:d9:2b:bb:d2:50:6b:cc:e0:01:c1:4c:cb:7e:d7:
a6:11:a3:fe:cc:ef:b8:45:25:92:91:49:07:8a:fb:9a:44:81:
34:f3:88:ff:ff:65:d5:9f:66:9b:62:00:29:f0:94:12:b0:bc:
25:ac:86:30:ad:ab:8a:91:f9:f6:94:53:6f:4a:04:22:0f:55:
22:5a:59:a4
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYOUAckCS0MlzpFRVS7hIWeXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz
NGQ2MDMwHhcNMjIxMDAxMTQ0NDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2JmZmM0Mjk0YzVhOWYwMmVmY2Q3N2I3OWZmNDUwOTZmMzA5ZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFrQHfVJewnHal9nBKgTLoVCZ59O
frEKYK3NTD/HKaX/FeiD5jio5H157dcJklIYJ5UJ6OlgMdAxs1JNtEWAArTeelhX
YOzkh/3SDqsUKwMCotOndN72iQ08ameBoFU+AR9u+ylau78grN//AjVpE3Swc2Fd
zevpZTqpxIwdpPHW8nkwKDfUdis84x6jdFpYw13GqknFwPtwXBckloc73GZbkbRe
vYu7YnZ8Lu3RzJSTt/u3ifH49T24yOpL0vgAlPk60BQEt4lKo+au3NZ30HcNrqdj
q0UfC88Kw0n0RjKCSVtsxh9yqK3X0iu2CJcKfg/RjxReXPh7NVcnshqFeQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFMe//EKUxanwLvzXe3n/RQlvMJ5oMB8GA1UdIwQY
MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It
MzdiNjJkMjIzOTI0LzEveDdfOFFwVEZxZkF1X05kN2VmOUZDVzh3bm1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0
LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQBa6GuAwQA
a7WHAwQAm/4+AwQAotn7MA8EAgACMAkDBwAqB5lAMzMwDQYJKoZIhvcNAQELBQAD
ggEBAGqvfIfINqLfQdL9JFafrm1F9sX7df3MiRxRh7/XYQPwtRMWWCnudvTa72Wr
ClmPwkpAffGyOvwL068WfXHujFaGyvGkrcYcenzO+G2jjQUpY24VhyeB1mqhACDF
Hs7GgxeyHIoa5mu1UVvyLtipAQJ9jlKgvGvD9Si+2UaEjSWVrGtsgvWCE+T5psKH
7mEf9Hd+jytf5unn9pAiJcv/hTyZkwMNCYmTqoZyvgM3PIE8gIMklKkLJyjZK7vS
UGvM4AHBTMt+16YRo/7M77hFJZKRSQeK+5pEgTTziP//ZdWfZptiACnwlBKwvCWs
hjCtq4qR+faUU29KBCIPVSJaWaQ=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:20 2023 by rpki-client on console-fra.rpki-client.org