Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/dUKnc0nJQobSxE-w3AvRu1XiIwg.roa
File: dUKnc0nJQobSxE-w3AvRu1XiIwg.roa (raw, json)
Hash identifier: ocEWsszC5st/+IkRJOicXtTa1cNBtyvl+nZMjSuCstE=
Subject key identifier: 75:42:A7:73:49:C9:42:86:D2:C4:4F:B0:DC:0B:D1:BB:55:E2:23:08
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0183F6DBEE9EC52446E8CE59FC15761451E4
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/dUKnc0nJQobSxE-w3AvRu1XiIwg.roa
Signing time: Thu 20 Oct 2022 19:25:52 +0000
ROA not before: Thu 20 Oct 2022 19:25:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 46.232.80.0/20 maxlen: 24
149.126.192.0/18 maxlen: 24
46.3.0.0/16 maxlen: 24
46.232.24.0/21 maxlen: 24
46.232.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f6:db:ee:9e:c5:24:46:e8:ce:59:fc:15:76:14:51:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Oct 20 19:25:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7542a77349c94286d2c44fb0dc0bd1bb55e22308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:23:d9:03:36:9d:ca:99:09:6d:75:7c:8e:53:
5b:7c:82:9e:9c:c1:a9:21:35:c4:7c:93:22:6c:81:
f2:05:51:d1:90:20:ff:9f:77:1e:e7:1b:34:5a:a6:
11:a4:bd:7b:65:3b:4e:4d:2b:08:6c:8f:3f:4a:15:
4f:e1:57:dd:a7:9b:2d:8f:37:7e:26:bb:b4:90:19:
92:e2:1b:0c:50:f9:9a:4c:43:78:79:ab:42:08:78:
f3:d3:a3:52:e6:f1:36:f9:1c:f1:aa:d0:62:f8:42:
ac:7a:ca:f8:f7:e4:47:30:62:36:05:98:21:30:aa:
39:c7:ab:9c:f5:11:3e:3e:7d:c1:70:3f:e3:34:df:
f6:5a:74:7d:61:a2:85:09:a8:31:15:ba:1c:0b:53:
9f:7b:16:a1:af:2b:e4:a5:7a:20:f7:3b:ff:37:cf:
24:50:a7:ae:ee:f4:5b:d0:e3:3a:78:15:ea:c3:24:
f4:ac:51:16:7b:35:9f:19:0e:1a:80:32:aa:ff:0f:
ec:39:bd:78:c4:0d:38:b4:02:17:4e:63:ea:4d:93:
a6:86:e1:9e:17:f7:3e:fe:de:b6:b7:dc:76:ae:86:
63:2b:2e:6d:b6:a2:65:56:21:75:81:70:5c:bb:47:
09:96:c0:30:1c:31:3f:55:6e:f1:90:95:72:41:e9:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:42:A7:73:49:C9:42:86:D2:C4:4F:B0:DC:0B:D1:BB:55:E2:23:08
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/dUKnc0nJQobSxE-w3AvRu1XiIwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/16
46.232.24.0-46.232.47.255
46.232.80.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
84:91:29:f0:e1:0f:fe:73:08:2e:ec:df:79:a9:4d:1a:b5:9d:
f3:85:e3:8c:53:e1:31:e7:15:c1:d0:b7:70:86:73:b6:b3:13:
d0:32:90:05:1f:84:dd:c0:7c:eb:ff:b0:91:48:39:5b:38:9e:
3e:fd:06:2a:77:12:8c:b6:c7:24:cf:ad:cb:ef:dc:f3:ab:6c:
dc:80:8d:aa:68:43:78:84:41:f9:5f:40:55:fb:56:27:d2:8e:
2c:e3:b7:59:ba:f1:f8:dc:88:50:8d:90:e7:b8:9a:97:a7:97:
90:04:59:b6:88:66:0e:b1:d2:9d:24:de:df:e7:a4:7e:f9:04:
09:86:0b:aa:c6:54:7b:44:15:c4:ff:fa:a1:85:8d:2d:5c:29:
11:78:46:29:19:42:c6:d9:37:b3:de:4a:38:cb:eb:9b:ff:07:
31:a5:a7:5b:94:14:48:9d:20:62:99:69:f5:93:e3:22:eb:d2:
42:62:14:b8:da:ab:75:5f:b2:06:cd:d6:90:44:63:9e:be:26:
91:3d:b5:ad:d5:aa:c3:04:a8:76:7b:97:fe:16:1c:0f:d9:4b:
22:9c:60:03:1b:9a:ac:35:49:e3:29:89:94:3f:76:47:2a:13:
d6:b2:42:59:3a:41:04:37:d6:9f:20:8b:b7:09:f3:ef:ce:f6:
be:1d:79:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYP22+6exSRG6M5Z/BV2FFHkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjIxMDIwMTkyNTUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTQyYTc3MzQ5Yzk0Mjg2ZDJjNDRmYjBkYzBiZDFiYjU1ZTIyMzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiPZAzadypkJbXV8jlNbfIKenMGp
ITXEfJMibIHyBVHRkCD/n3ce5xs0WqYRpL17ZTtOTSsIbI8/ShVP4Vfdp5stjzd+
Jru0kBmS4hsMUPmaTEN4eatCCHjz06NS5vE2+RzxqtBi+EKsesr49+RHMGI2BZgh
MKo5x6uc9RE+Pn3BcD/jNN/2WnR9YaKFCagxFbocC1OfexahryvkpXog9zv/N88k
UKeu7vRb0OM6eBXqwyT0rFEWezWfGQ4agDKq/w/sOb14xA04tAIXTmPqTZOmhuGe
F/c+/t62t9x2roZjKy5ttqJlViF1gXBcu0cJlsAwHDE/VW7xkJVyQekoWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVCp3NJyUKG0sRPsNwL0btV4iMIMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvZFVLbmMwbkpRb2JTeEUtdzNBdlJ1MVhpSXdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAlBAIAATAfAwMALgMwDAME
Ay7oGAMEBC7oIAMEBC7oUAMEBpV+wDANBgkqhkiG9w0BAQsFAAOCAQEAhJEp8OEP
/nMILuzfealNGrWd84XjjFPhMecVwdC3cIZztrMT0DKQBR+E3cB86/+wkUg5Wzie
Pv0GKncSjLbHJM+ty+/c86ts3ICNqmhDeIRB+V9AVftWJ9KOLOO3Wbrx+NyIUI2Q
57ial6eXkARZtohmDrHSnSTe3+ekfvkECYYLqsZUe0QVxP/6oYWNLVwpEXhGKRlC
xtk3s95KOMvrm/8HMaWnW5QUSJ0gYplp9ZPjIuvSQmIUuNqrdV+yBs3WkERjnr4m
kT21rdWqwwSodnuX/hYcD9lLIpxgAxuarDVJ4ymJlD92RyoT1rJCWTpBBDfWnyCL
twnz7872vh15QQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:57 2025 by rpki-client