Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/C7NDIP0MSoUGo78M_EBzFZm2TRI.roa
File: C7NDIP0MSoUGo78M_EBzFZm2TRI.roa (raw, json)
Hash identifier: fRhfbOPF7djF3/hsx0qXC3kFUhyqIS4Upyg1GwweKpg=
Subject key identifier: 0B:B3:43:20:FD:0C:4A:85:06:A3:BF:0C:FC:40:73:15:99:B6:4D:12
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018408D734908038866318879EABD53AF7B0
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/C7NDIP0MSoUGo78M_EBzFZm2TRI.roa
Signing time: Mon 24 Oct 2022 07:13:52 +0000
ROA not before: Mon 24 Oct 2022 07:13:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202132
IP address blocks: 46.10.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:08:d7:34:90:80:38:86:63:18:87:9e:ab:d5:3a:f7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Oct 24 07:13:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bb34320fd0c4a8506a3bf0cfc40731599b64d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:77:6a:c9:83:b8:35:6d:38:0b:c0:10:f4:
af:f3:79:df:fa:1b:f4:fa:ed:10:3a:75:83:6a:7d:
ae:bd:2d:bb:67:7d:9c:08:d7:1d:36:42:3f:1b:8b:
12:87:ea:5c:d8:e1:ae:de:1b:34:39:6b:b3:22:65:
7e:28:3a:d6:b7:19:ac:72:b3:17:83:83:43:2b:e7:
2f:42:7e:7a:92:7a:8f:80:1a:de:5a:73:97:b6:b8:
b2:16:47:4b:3c:c0:2f:c0:1b:7a:b8:a1:b8:c4:85:
c5:5c:f1:0d:c1:80:d3:1c:ff:95:b5:93:df:d6:0c:
59:33:ef:3e:31:f7:1b:66:de:c3:30:ea:cf:b0:af:
38:77:a3:53:fb:df:01:c6:a0:dd:9a:12:a5:dd:56:
5b:35:4e:8a:0a:0d:59:34:02:42:0e:da:4a:2f:45:
ed:9a:20:cb:7a:5d:64:04:b7:8b:21:6d:3c:f3:14:
9f:73:4a:f6:84:ca:83:33:9d:3b:82:eb:bc:ee:4d:
3d:18:fb:d0:ce:a5:59:cd:84:16:1a:35:b5:f1:fc:
5b:9b:cb:38:ed:ec:44:84:0d:e2:5a:53:9b:52:be:
c1:1d:50:8c:91:88:af:02:3f:1b:33:0c:a4:c7:f3:
b3:90:e9:03:6c:46:34:c6:71:7c:46:17:3b:1f:d9:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B3:43:20:FD:0C:4A:85:06:A3:BF:0C:FC:40:73:15:99:B6:4D:12
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/C7NDIP0MSoUGo78M_EBzFZm2TRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.10.193.0/24
Signature Algorithm: sha256WithRSAEncryption
17:a7:29:e1:73:4c:df:07:97:da:a3:b4:39:eb:9c:f0:c4:64:
18:02:79:ef:ec:e4:47:75:ef:cd:de:fe:ac:6c:f1:75:61:bd:
a7:f9:e1:9a:c9:15:10:22:a7:53:2f:51:58:38:a4:b7:66:cf:
e1:f1:b0:71:ca:60:a5:8c:d3:42:81:bd:41:4b:89:d0:5d:ca:
a9:68:5a:82:61:35:78:72:ba:d3:25:a6:08:7e:43:41:93:75:
c7:b6:7d:ce:ff:88:25:e5:ef:8f:8f:38:4f:94:f4:ad:ed:fd:
ae:82:55:c1:2c:c4:f1:34:b9:fd:0a:26:85:da:5d:f9:2e:04:
2c:94:bc:15:bb:6f:b7:25:0a:cc:df:b5:63:0c:02:01:c7:77:
f7:aa:33:06:9a:b2:28:a1:f7:9e:19:28:a3:12:ef:cc:50:f8:
cb:c0:58:65:ba:7f:75:9c:05:23:a9:f3:f0:6b:b2:bc:76:7a:
25:0c:28:22:5c:b4:4c:89:f0:0b:8a:0b:10:db:95:06:cf:b9:
33:e7:94:54:6f:f6:b3:c1:ae:9c:5e:b7:e9:32:23:26:9f:b9:
2e:c0:90:49:f7:02:bc:ba:78:b6:02:2c:03:94:e8:26:31:3a:
52:f2:24:39:71:df:10:15:b7:ea:8e:76:77:da:1c:c6:3b:55:
fc:65:24:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQI1zSQgDiGYxiHnqvVOvewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjIxMDI0MDcxMzUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmIzNDMyMGZkMGM0YTg1MDZhM2JmMGNmYzQwNzMxNTk5YjY0ZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT93asmDuDVtOAvAEPSv83nf+hv0
+u0QOnWDan2uvS27Z32cCNcdNkI/G4sSh+pc2OGu3hs0OWuzImV+KDrWtxmscrMX
g4NDK+cvQn56knqPgBreWnOXtriyFkdLPMAvwBt6uKG4xIXFXPENwYDTHP+VtZPf
1gxZM+8+MfcbZt7DMOrPsK84d6NT+98BxqDdmhKl3VZbNU6KCg1ZNAJCDtpKL0Xt
miDLel1kBLeLIW088xSfc0r2hMqDM507guu87k09GPvQzqVZzYQWGjW18fxbm8s4
7exEhA3iWlObUr7BHVCMkYivAj8bMwykx/OzkOkDbEY0xnF8Rhc7H9kYTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAuzQyD9DEqFBqO/DPxAcxWZtk0SMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvQzdORElQME1Tb1VHbzc4TV9FQnpGWm0yVFJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALgrBMA0G
CSqGSIb3DQEBCwUAA4IBAQAXpynhc0zfB5fao7Q565zwxGQYAnnv7ORHde/N3v6s
bPF1Yb2n+eGayRUQIqdTL1FYOKS3Zs/h8bBxymCljNNCgb1BS4nQXcqpaFqCYTV4
crrTJaYIfkNBk3XHtn3O/4gl5e+PjzhPlPSt7f2uglXBLMTxNLn9CiaF2l35LgQs
lLwVu2+3JQrM37VjDAIBx3f3qjMGmrIoofeeGSijEu/MUPjLwFhlun91nAUjqfPw
a7K8dnolDCgiXLRMifALigsQ25UGz7kz55RUb/azwa6cXrfpMiMmn7kuwJBJ9wK8
uni2AiwDlOgmMTpS8iQ5cd8QFbfqjnZ32hzGO1X8ZSQj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org