Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/dNLSHyQxxWVexcbfncqYEDY1Zvo.roa
File: dNLSHyQxxWVexcbfncqYEDY1Zvo.roa (raw, json)
Hash identifier: ntTZBAYXd501Wx0Vm0RbUJQXF71b8bIRWJkYuO2XEEc=
Subject key identifier: 74:D2:D2:1F:24:31:C5:65:5E:C5:C6:DF:9D:CA:98:10:36:35:66:FA
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0185719560B87FB88CDF5F23B9075C0158D6
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/dNLSHyQxxWVexcbfncqYEDY1Zvo.roa
Signing time: Mon 02 Jan 2023 08:24:53 +0000
ROA not before: Mon 02 Jan 2023 08:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207636
IP address blocks: 46.3.192.0/19 maxlen: 19
46.232.0.0/17 maxlen: 24
149.126.192.0/18 maxlen: 24
46.3.224.0/19 maxlen: 19
46.3.0.0/16 maxlen: 24
80.243.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:60:b8:7f:b8:8c:df:5f:23:b9:07:5c:01:58:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74d2d21f2431c5655ec5c6df9dca9810363566fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a5:18:c3:e5:0c:5c:da:7b:01:cc:1b:7c:de:
5c:de:b7:b9:72:f1:04:7c:23:5d:36:45:d9:c4:7c:
31:88:5b:3e:8e:da:df:35:8c:66:70:38:75:c8:ff:
b4:15:e4:53:ab:1b:ce:99:04:47:cd:81:3d:98:dc:
10:65:d2:d5:cd:9a:3c:78:ed:2f:0f:d3:f5:84:1c:
bc:76:33:83:e6:24:f8:74:df:02:51:dc:52:0d:c5:
d1:d4:7f:f2:59:ab:17:9f:77:cd:4c:5d:7f:8f:41:
a9:08:0b:a2:4d:ed:6d:0d:1c:92:d7:85:ba:86:ad:
b4:61:3f:aa:55:0d:d9:27:19:1b:7c:c3:2e:c0:e0:
b3:4b:3d:d0:49:91:06:54:f1:6a:eb:ef:85:da:03:
bf:36:ba:5f:7f:6a:ca:1c:ca:8c:c8:79:b6:6b:12:
1b:dc:27:54:d5:a5:15:45:8b:71:b8:f3:b4:67:af:
18:4f:e7:51:c2:21:77:23:9f:89:e0:30:27:ac:b5:
59:56:f2:00:6e:a3:a5:54:42:69:3e:87:19:2e:94:
b1:84:bb:2b:b5:91:d4:68:f1:17:69:36:bd:46:f6:
cc:2b:de:79:9e:58:18:84:72:84:d6:47:07:d7:ec:
da:b3:d5:ef:71:d4:7e:0e:03:4e:03:d4:05:11:06:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D2:D2:1F:24:31:C5:65:5E:C5:C6:DF:9D:CA:98:10:36:35:66:FA
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/dNLSHyQxxWVexcbfncqYEDY1Zvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/16
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
11:bb:d0:5a:12:d2:69:c0:e3:4a:1f:26:7a:14:45:1c:de:90:
0b:2b:7e:c8:14:e8:89:31:b2:f6:36:6f:93:50:bd:df:1d:17:
48:d0:44:27:5a:10:6a:2e:7c:68:4c:2e:c8:92:e5:8a:5e:d9:
74:3e:1e:66:a8:08:80:88:7f:61:29:4f:21:a7:4b:75:5e:a5:
ed:d3:00:4d:ac:cc:53:0f:9e:5b:13:36:6a:ad:88:54:61:ef:
07:5c:be:57:3b:eb:2a:f3:22:f6:d5:e3:14:9b:2a:56:1d:84:
f4:09:3f:64:00:15:71:1e:23:14:e4:9d:25:51:e7:2c:4d:19:
b0:00:d1:a8:f6:16:83:b7:13:6b:a5:85:82:5c:99:ea:05:06:
71:e8:fa:55:b9:6a:64:36:52:2f:f9:84:4a:02:8c:8d:c1:60:
14:bf:36:1e:d8:ba:d5:2e:97:a8:71:a8:71:f9:96:fe:a3:a2:
5e:fb:b4:db:c9:16:ae:cd:0e:cf:29:f1:e3:f2:91:ef:b6:0e:
0e:55:70:ee:19:65:de:5d:3c:65:6d:86:0a:90:41:91:a9:15:
85:f8:94:55:be:76:45:ad:f1:14:14:ef:c3:e5:87:8f:40:99:
67:91:5f:74:a2:f5:ed:44:db:41:8c:1e:41:47:c6:68:a3:63:
8f:6b:7c:67
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVxlWC4f7iM318juQdcAVjWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwMTAyMDgyNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGQyZDIxZjI0MzFjNTY1NWVjNWM2ZGY5ZGNhOTgxMDM2MzU2NmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKUYw+UMXNp7AcwbfN5c3re5cvEE
fCNdNkXZxHwxiFs+jtrfNYxmcDh1yP+0FeRTqxvOmQRHzYE9mNwQZdLVzZo8eO0v
D9P1hBy8djOD5iT4dN8CUdxSDcXR1H/yWasXn3fNTF1/j0GpCAuiTe1tDRyS14W6
hq20YT+qVQ3ZJxkbfMMuwOCzSz3QSZEGVPFq6++F2gO/Nrpff2rKHMqMyHm2axIb
3CdU1aUVRYtxuPO0Z68YT+dRwiF3I5+J4DAnrLVZVvIAbqOlVEJpPocZLpSxhLsr
tZHUaPEXaTa9RvbMK955nlgYhHKE1kcH1+zas9XvcdR+DgNOA9QFEQYE7QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHTS0h8kMcVlXsXG353KmBA2NWb6MB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvZE5MU0h5UXh4V1ZleGNiZm5jcVlFRFkxWnZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwMALgMDBAcu
6AADBARQ84ADBAaVfsAwDQYJKoZIhvcNAQELBQADggEBABG70FoS0mnA40ofJnoU
RRzekAsrfsgU6IkxsvY2b5NQvd8dF0jQRCdaEGoufGhMLsiS5Ype2XQ+HmaoCICI
f2EpTyGnS3Vepe3TAE2szFMPnlsTNmqtiFRh7wdcvlc76yrzIvbV4xSbKlYdhPQJ
P2QAFXEeIxTknSVR5yxNGbAA0aj2FoO3E2ulhYJcmeoFBnHo+lW5amQ2Ui/5hEoC
jI3BYBS/Nh7YutUul6hxqHH5lv6jol77tNvJFq7NDs8p8ePyke+2Dg5VcO4ZZd5d
PGVthgqQQZGpFYX4lFW+dkWt8RQU78Plh49AmWeRX3Si9e1E20GMHkFHxmijY49r
fGc=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:10 2025 by rpki-client