Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1-fdaP_yYWTGD8pvX_eDbuv6KCSw.roa
File: 1-fdaP_yYWTGD8pvX_eDbuv6KCSw.roa (raw, json)
Hash identifier: UTNQWvkUXJxgXBZ9gIaFBSdUjYqqaXoD8gDKJaOvnxw=
Subject key identifier: F9:F7:5A:3F:FC:98:59:31:83:F2:9B:D7:FD:E0:DB:BA:FE:8A:09:2C
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 086CA714
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1-fdaP_yYWTGD8pvX_eDbuv6KCSw.roa
Signing time: Sat 01 Jan 2022 13:03:06 +0000
ROA not before: Sat 01 Jan 2022 13:03:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30407
IP address blocks: 46.232.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141338388 (0x86ca714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 13:03:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9f75a3ffc98593183f29bd7fde0dbbafe8a092c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:53:3b:f2:3d:df:19:72:28:eb:02:6a:ca:
a9:73:fc:87:23:aa:9f:96:c0:5b:cf:3b:b6:f3:1e:
f1:f4:46:19:ea:7d:2f:df:55:9a:a7:29:a2:b5:23:
a6:19:c4:f5:5e:05:30:36:51:3f:67:13:3c:78:67:
c8:da:6e:83:f9:57:5f:5c:58:ca:0a:a9:10:2b:95:
99:41:ff:f1:9b:2f:d2:28:06:85:a9:37:c1:70:b2:
c9:e9:84:b4:33:c6:ca:01:f9:4a:35:c7:59:e4:24:
a9:65:11:17:56:10:6a:33:e0:d3:aa:96:e2:c8:34:
a3:bc:a5:62:b0:9b:60:f5:fc:fb:79:ac:bf:f5:32:
e3:8d:53:9e:e6:3d:0e:d0:31:15:69:e9:f6:55:4f:
97:01:9f:e2:f6:e7:3b:3e:d3:19:ff:13:24:16:90:
b7:67:4e:14:18:63:af:82:7e:5c:11:be:8d:1d:12:
ff:24:15:14:82:50:4d:29:f8:a7:df:6d:d8:c9:f7:
41:30:be:b4:99:e0:76:10:eb:3f:f4:66:a8:bb:a1:
ca:8a:ad:22:9d:da:40:5e:f0:fe:fe:b1:9b:6b:b0:
9b:a9:df:39:cf:44:e2:cd:c8:ea:a1:78:8e:26:ad:
26:d4:8d:ab:da:cf:5e:da:a6:15:45:62:16:3e:95:
de:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F7:5A:3F:FC:98:59:31:83:F2:9B:D7:FD:E0:DB:BA:FE:8A:09:2C
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1-fdaP_yYWTGD8pvX_eDbuv6KCSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
74:8a:42:71:53:f6:1f:52:70:42:23:59:62:2f:4d:02:d5:70:
3d:1c:db:75:fa:2c:11:f5:ba:00:13:68:6c:c6:ee:23:48:82:
3b:35:3d:00:af:a5:42:99:79:23:d7:09:9d:8a:0a:e2:a7:cb:
0e:f5:73:70:88:56:86:a5:da:cf:23:ef:07:f6:fb:fc:35:26:
bc:67:90:35:94:19:e7:87:65:eb:07:97:d4:a7:c5:4a:85:39:
c5:ce:07:a3:25:77:a0:ba:48:31:0e:f6:c6:f5:fb:ae:eb:71:
be:09:83:1a:c5:64:f0:de:a2:f7:d2:12:ef:3b:30:8e:e1:22:
72:1f:44:e0:23:f5:eb:d8:49:c0:d4:c1:77:c3:dc:7e:52:94:
84:a8:b0:3b:96:e1:98:b8:13:86:ac:d0:06:cd:23:40:61:2e:
40:fe:89:64:03:1b:3a:6a:76:11:9c:15:4f:0d:6e:3c:c1:b3:
68:da:ce:e4:a4:45:1e:b9:a4:b6:7e:a4:bc:e1:8b:c4:b1:4c:
82:f4:c9:cf:19:e9:ef:54:2f:15:ea:31:a1:b8:9d:18:27:d4:
17:61:19:a9:8e:5b:1f:4d:48:6a:1f:0a:2e:e1:dc:5c:20:7c:
24:0f:8c:49:05:1d:0b:39:15:23:39:19:66:59:dd:78:0a:47:
75:6a:94:3b
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIECGynFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NTg4ZjE5N2Y5N2U4OTAwNzU1NTQ0ZTgxMGNkZGVmOWQ5MGZiYzQxMB4XDTIyMDEw
MTEzMDMwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjlmNzVhM2ZmYzk4
NTkzMTgzZjI5YmQ3ZmRlMGRiYmFmZThhMDkyYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMBoUzvyPd8ZcijrAmrKqXP8hyOqn5bAW887tvMe8fRGGep9
L99VmqcporUjphnE9V4FMDZRP2cTPHhnyNpug/lXX1xYygqpECuVmUH/8Zsv0igG
hak3wXCyyemEtDPGygH5SjXHWeQkqWURF1YQajPg06qW4sg0o7ylYrCbYPX8+3ms
v/Uy441TnuY9DtAxFWnp9lVPlwGf4vbnOz7TGf8TJBaQt2dOFBhjr4J+XBG+jR0S
/yQVFIJQTSn4p99t2Mn3QTC+tJngdhDrP/RmqLuhyoqtIp3aQF7w/v6xm2uwm6nf
Oc9E4s3I6qF4jiatJtSNq9rPXtqmFUViFj6V3vECAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT591o//JhZMYPym9f94Nu6/ooJLDAfBgNVHSMEGDAWgBRViPGX+X6JAHVV
ROgQzd752Q+8QTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZZanhsX2wtaVFCMVZVVG9FTTNlLWRrUHZFRS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvNjIyOTgxLTk2NTAtNDI3MS05MmNhLTdjZmVmNDI3NmEwZi8x
LzEtZmRhUF95WVdUR0Q4cHZYX2VEYnV2NktDU3cucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2
LzYyMjk4MS05NjUwLTQyNzEtOTJjYS03Y2ZlZjQyNzZhMGYvMS9WWWp4bF9sLWlR
QjFWVVRvRU0zZS1ka1B2RUUuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQu6DAwDQYJKoZIhvcNAQELBQAD
ggEBAHSKQnFT9h9ScEIjWWIvTQLVcD0c23X6LBH1ugATaGzG7iNIgjs1PQCvpUKZ
eSPXCZ2KCuKnyw71c3CIVoal2s8j7wf2+/w1JrxnkDWUGeeHZesHl9SnxUqFOcXO
B6Mld6C6SDEO9sb1+67rcb4JgxrFZPDeovfSEu87MI7hInIfROAj9evYScDUwXfD
3H5SlISosDuW4Zi4E4as0AbNI0BhLkD+iWQDGzpqdhGcFU8NbjzBs2jazuSkRR65
pLZ+pLzhi8SxTIL0yc8Z6e9ULxXqMaG4nRgn1BdhGamOWx9NSGofCi7h3FwgfCQP
jEkFHQs5FSM5GWZZ3XgKR3VqlDs=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:51 2025 by rpki-client