Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/JHDWlsyEnD_DHQLaNoj_AoT2Yr8.roa
File: JHDWlsyEnD_DHQLaNoj_AoT2Yr8.roa (raw, json)
Hash identifier: RUHhUWzgxVE7JciUwO5cqe6WuljOIZM7iKvnHkR5ZvQ=
Subject key identifier: 24:70:D6:96:CC:84:9C:3F:C3:1D:02:DA:36:88:FF:02:84:F6:62:BF
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 08697B99
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/JHDWlsyEnD_DHQLaNoj_AoT2Yr8.roa
Signing time: Sat 01 Jan 2022 13:03:04 +0000
ROA not before: Sat 01 Jan 2022 13:03:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 46.232.80.0/20 maxlen: 22
46.232.112.0/20 maxlen: 22
149.126.192.0/18 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141130649 (0x8697b99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 13:03:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2470d696cc849c3fc31d02da3688ff0284f662bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:cc:a6:b3:e3:8b:26:16:fc:4b:76:09:ce:
e2:8f:6f:35:f0:81:66:4d:dd:85:da:66:48:9f:60:
77:73:a7:60:f1:ab:82:46:9e:31:1f:de:11:20:6d:
b3:da:80:d0:72:e9:55:6a:68:57:bc:01:e2:46:f9:
a2:dc:e0:05:8b:dc:fb:41:d4:a5:8a:bf:97:76:08:
b1:a5:ae:17:48:f9:fc:79:a4:96:45:a0:7c:c3:ab:
96:52:d5:bc:8b:e0:53:6f:d7:49:7e:2e:a8:f0:52:
3a:09:9e:af:40:b5:42:44:71:62:7d:1b:48:0f:aa:
3d:56:e6:07:3f:f8:ed:88:7b:df:7f:99:46:e9:6a:
a7:cd:e5:24:1e:7e:8e:e2:01:88:3b:80:a9:90:80:
ec:9d:11:93:8a:08:97:54:f3:79:08:27:c4:14:53:
f6:1b:60:85:c1:b1:99:d0:4f:06:b1:a4:fb:9b:84:
05:17:64:0e:0c:d5:00:21:24:cb:9f:a3:a3:c3:0e:
91:00:90:b2:c2:35:53:08:70:46:54:91:1d:34:4b:
1c:8a:ca:79:c4:3e:6f:85:10:60:9e:b2:36:f7:65:
c7:03:37:86:40:27:86:cd:8e:94:d2:1e:e4:a6:0e:
f8:d8:a8:b1:2d:62:f8:ec:c1:0b:78:90:94:86:95:
c6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:70:D6:96:CC:84:9C:3F:C3:1D:02:DA:36:88:FF:02:84:F6:62:BF
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/JHDWlsyEnD_DHQLaNoj_AoT2Yr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.80.0/20
46.232.112.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
18:08:a3:0d:b1:7a:8a:f4:2e:8b:09:18:28:cd:7d:05:21:17:
50:33:52:c6:5b:a3:64:9e:eb:e1:0d:77:f5:08:b0:8a:11:6b:
27:c9:84:39:e4:86:df:64:16:ab:cb:0d:96:47:1c:b7:3b:3d:
da:2c:fa:f5:7b:05:35:fb:7a:3d:38:43:5f:7b:32:e5:25:6a:
ea:22:3c:9c:95:ba:c7:5e:5c:3e:70:f1:7d:e6:b0:45:a1:0b:
7d:5d:b1:d8:b3:3e:6d:ed:8c:34:ca:6e:a8:0b:cc:c3:e2:10:
9c:4e:82:8e:61:e5:50:74:9a:6a:4b:c7:4d:31:96:6f:f6:2c:
14:1b:70:f4:af:bf:01:b6:c4:cd:84:dc:52:82:9d:ee:39:05:
29:b5:84:2b:f1:ba:a0:db:6f:c3:54:21:52:ab:52:27:27:5c:
6f:4f:7c:9c:dd:20:98:01:94:f5:e2:7b:6b:8b:60:43:5a:7b:
4d:a9:cf:7d:58:f2:d0:e2:3e:7d:8e:b8:1f:a3:8b:ad:db:b9:
e1:4d:79:f0:26:8f:fc:71:90:c6:d7:47:53:c0:99:71:9e:c6:
82:e2:51:02:60:99:1b:30:e9:3b:7b:e9:52:3b:3b:5a:40:e7:
d6:91:f4:fc:b9:4a:08:ff:2a:1a:af:e6:68:37:56:e3:37:e9:
47:3c:28:47
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIECGl7mTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NTg4ZjE5N2Y5N2U4OTAwNzU1NTQ0ZTgxMGNkZGVmOWQ5MGZiYzQxMB4XDTIyMDEw
MTEzMDMwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjQ3MGQ2OTZjYzg0
OWMzZmMzMWQwMmRhMzY4OGZmMDI4NGY2NjJiZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMXGzKaz44smFvxLdgnO4o9vNfCBZk3dhdpmSJ9gd3OnYPGr
gkaeMR/eESBts9qA0HLpVWpoV7wB4kb5otzgBYvc+0HUpYq/l3YIsaWuF0j5/Hmk
lkWgfMOrllLVvIvgU2/XSX4uqPBSOgmer0C1QkRxYn0bSA+qPVbmBz/47Yh733+Z
Rulqp83lJB5+juIBiDuAqZCA7J0Rk4oIl1TzeQgnxBRT9htghcGxmdBPBrGk+5uE
BRdkDgzVACEky5+jo8MOkQCQssI1UwhwRlSRHTRLHIrKecQ+b4UQYJ6yNvdlxwM3
hkAnhs2OlNIe5KYO+NiosS1i+OzBC3iQlIaVxsECAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQkcNaWzIScP8MdAto2iP8ChPZivzAfBgNVHSMEGDAWgBRViPGX+X6JAHVV
ROgQzd752Q+8QTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZZanhsX2wtaVFCMVZVVG9FTTNlLWRrUHZFRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvNjIyOTgxLTk2NTAtNDI3MS05MmNhLTdjZmVmNDI3NmEwZi8x
L0pIRFdsc3lFbkRfREhRTGFOb2pfQW9UMllyOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
NjIyOTgxLTk2NTAtNDI3MS05MmNhLTdjZmVmNDI3NmEwZi8xL1ZZanhsX2wtaVFC
MVZVVG9FTTNlLWRrUHZFRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEBC7oUAMEBC7ocAMEBpV+wDANBgkq
hkiG9w0BAQsFAAOCAQEAGAijDbF6ivQuiwkYKM19BSEXUDNSxlujZJ7r4Q139Qiw
ihFrJ8mEOeSG32QWq8sNlkcctzs92iz69XsFNft6PThDX3sy5SVq6iI8nJW6x15c
PnDxfeawRaELfV2x2LM+be2MNMpuqAvMw+IQnE6CjmHlUHSaakvHTTGWb/YsFBtw
9K+/AbbEzYTcUoKd7jkFKbWEK/G6oNtvw1QhUqtSJydcb098nN0gmAGU9eJ7a4tg
Q1p7TanPfVjy0OI+fY64H6OLrdu54U158CaP/HGQxtdHU8CZcZ7GguJRAmCZGzDp
O3vpUjs7WkDn1pH0/LlKCP8qGq/maDdW4zfpRzwoRw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:40 2025 by rpki-client