Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/YtH9REzBZyuhthUrRfjhYEHu_lw.roa
File: YtH9REzBZyuhthUrRfjhYEHu_lw.roa (raw, json)
Hash identifier: 3jberqVydfpftYz50X/jOARDIOtnujSyDlYvWQQevhc=
Subject key identifier: 62:D1:FD:44:4C:C1:67:2B:A1:B6:15:2B:45:F8:E1:60:41:EE:FE:5C
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01839E0A3C5E3DECCDB47DC1EA5C3E2D7CDC
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/YtH9REzBZyuhthUrRfjhYEHu_lw.roa
Signing time: Mon 03 Oct 2022 13:30:14 +0000
ROA not before: Mon 03 Oct 2022 13:30:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 979
IP address blocks: 46.3.112.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9e:0a:3c:5e:3d:ec:cd:b4:7d:c1:ea:5c:3e:2d:7c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Oct 3 13:30:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62d1fd444cc1672ba1b6152b45f8e16041eefe5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:cd:37:28:fc:29:08:4a:c0:6e:d2:17:78:
41:1a:98:9a:78:24:61:84:6e:18:08:1d:74:53:66:
f8:a7:7e:32:0f:b5:d7:fb:8c:bf:92:ed:75:02:05:
5c:e5:df:47:29:6a:62:1f:f0:8d:bf:0b:6f:eb:c8:
53:bb:50:d8:15:68:bf:d8:a7:04:d1:67:f8:55:41:
74:bf:39:cb:51:d7:1f:94:5f:2b:d4:5a:24:64:7e:
38:74:b2:2e:67:b1:28:32:a5:07:9c:62:bd:e0:d1:
74:06:20:13:0f:00:37:7b:ed:08:4d:c6:a5:7b:2c:
ff:52:99:ac:91:20:0c:28:fd:6c:aa:a6:6a:02:8b:
a9:a8:b5:ca:53:66:71:80:af:73:98:8f:66:1b:4e:
40:7f:be:c3:a1:e8:77:e9:72:cd:3e:21:c7:a2:d2:
5f:d9:ad:ed:d9:1e:e7:3b:2a:bc:ce:67:57:42:3a:
3f:93:0f:dd:08:84:66:89:fb:a3:1e:7c:f9:58:8b:
70:0f:ba:0f:ca:d8:43:46:87:41:fd:05:2e:a0:b2:
8d:43:dc:40:f8:05:aa:f6:25:e3:5e:5a:a1:29:ac:
df:04:8c:f4:d9:84:9d:15:da:ef:74:a1:d3:78:4c:
14:9c:64:89:e3:ce:7f:de:61:6f:12:c1:57:8b:64:
60:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D1:FD:44:4C:C1:67:2B:A1:B6:15:2B:45:F8:E1:60:41:EE:FE:5C
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/YtH9REzBZyuhthUrRfjhYEHu_lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.112.0/23
Signature Algorithm: sha256WithRSAEncryption
87:4f:c1:da:c8:e6:40:6a:6c:85:c2:18:7a:4c:78:42:96:35:
70:94:f3:f7:4c:3c:34:e0:df:0e:8b:b5:90:6f:62:df:e6:2a:
7d:13:4c:3a:63:bf:99:ab:57:e2:ae:cb:83:cb:b5:cc:96:38:
7a:d1:bd:a5:47:41:c9:f2:2a:19:2e:8a:65:b2:30:12:c5:23:
b1:d5:8a:7b:f3:e1:33:bf:a6:80:35:d9:49:89:71:d7:f9:e1:
77:85:14:f8:56:03:e4:57:fb:b4:a7:f6:fe:3a:cd:12:88:64:
09:2c:d5:13:d0:09:87:97:fb:f8:9d:9f:74:b6:06:41:ea:64:
16:54:0d:b4:57:a7:bb:fd:9e:6b:ad:2c:2b:89:87:8a:7a:be:
85:c2:be:95:ae:3b:48:79:5b:a3:09:0c:9f:76:ba:f3:47:86:
3b:9a:e4:f3:b0:f5:62:ec:4f:a3:84:b2:51:2f:31:cf:f3:ea:
09:e9:ec:80:c1:71:5c:73:da:9a:d0:36:32:4e:3e:af:a9:64:
47:bc:26:af:bf:2c:f9:15:12:69:e8:36:90:ef:c3:f7:7b:8c:
fd:5a:60:cc:f3:60:5c:83:27:fc:b5:76:b5:da:8a:e6:b7:ad:
6d:e5:4f:ee:b8:3c:c8:fb:9c:b2:f7:85:8b:d2:ef:73:5d:28:
34:43:9d:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOeCjxePezNtH3B6lw+LXzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjIxMDAzMTMzMDE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmQxZmQ0NDRjYzE2NzJiYTFiNjE1MmI0NWY4ZTE2MDQxZWVmZTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNrNNyj8KQhKwG7SF3hBGpiaeCRh
hG4YCB10U2b4p34yD7XX+4y/ku11AgVc5d9HKWpiH/CNvwtv68hTu1DYFWi/2KcE
0Wf4VUF0vznLUdcflF8r1FokZH44dLIuZ7EoMqUHnGK94NF0BiATDwA3e+0ITcal
eyz/UpmskSAMKP1sqqZqAoupqLXKU2ZxgK9zmI9mG05Af77Doeh36XLNPiHHotJf
2a3t2R7nOyq8zmdXQjo/kw/dCIRmifujHnz5WItwD7oPythDRodB/QUuoLKNQ9xA
+AWq9iXjXlqhKazfBIz02YSdFdrvdKHTeEwUnGSJ485/3mFvEsFXi2RgqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGLR/URMwWcrobYVK0X44WBB7v5cMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvWXRIOVJFekJaeXVodGhVclJmamhZRUh1X2x3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLgNwMA0G
CSqGSIb3DQEBCwUAA4IBAQCHT8HayOZAamyFwhh6THhCljVwlPP3TDw04N8Oi7WQ
b2Lf5ip9E0w6Y7+Zq1firsuDy7XMljh60b2lR0HJ8ioZLoplsjASxSOx1Yp78+Ez
v6aANdlJiXHX+eF3hRT4VgPkV/u0p/b+Os0SiGQJLNUT0AmHl/v4nZ90tgZB6mQW
VA20V6e7/Z5rrSwriYeKer6Fwr6VrjtIeVujCQyfdrrzR4Y7muTzsPVi7E+jhLJR
LzHP8+oJ6eyAwXFcc9qa0DYyTj6vqWRHvCavvyz5FRJp6DaQ78P3e4z9WmDM82Bc
gyf8tXa12ormt61t5U/uuDzI+5yy94WL0u9zXSg0Q510
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:53 2025 by rpki-client