Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/RUQaM4kBRh4NXgYYTSCHMZ0wuvw.roa
File: RUQaM4kBRh4NXgYYTSCHMZ0wuvw.roa (raw, json)
Hash identifier: BXXfVaFXIUWljemJ0eEgtmSIA6T1u+g0cXbzf83jsAs=
Subject key identifier: 45:44:1A:33:89:01:46:1E:0D:5E:06:18:4D:20:87:31:9D:30:BA:FC
Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Certificate serial: 018BF6FD0F1A17B12D44AD51EABA3C56D3F5
Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/RUQaM4kBRh4NXgYYTSCHMZ0wuvw.roa
Signing time: Wed 22 Nov 2023 12:24:21 +0000
ROA not before: Wed 22 Nov 2023 12:24:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 46.149.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:fd:0f:1a:17:b1:2d:44:ad:51:ea:ba:3c:56:d3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Validity
Not Before: Nov 22 12:24:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45441a338901461e0d5e06184d2087319d30bafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:8e:5c:88:02:9e:c3:db:42:4b:87:b4:6e:98:
a2:63:c8:d1:82:da:c0:e4:64:6e:7f:ae:7d:d1:a9:
b1:9f:c9:12:df:0c:d1:25:bf:80:0f:ab:4d:4b:a7:
e1:c4:78:42:32:b4:53:1a:a5:cb:b9:36:07:5f:1a:
5a:6d:ab:86:64:8a:85:17:3c:0a:54:0c:b6:2b:7e:
64:3f:da:be:d2:12:a0:3c:08:ec:f8:59:ee:65:a3:
a7:15:fd:02:69:c4:ef:cd:d9:fe:0f:46:66:43:40:
8b:b9:4e:06:9e:1e:43:4e:58:65:9b:e1:ea:6b:4c:
3a:6b:15:f1:f8:53:79:b0:03:3a:78:53:ff:b1:30:
b1:61:43:21:c8:12:f7:14:5c:40:04:66:e6:38:8c:
f7:1d:c0:b5:54:99:ee:6b:14:ef:b6:b9:5f:db:30:
f1:36:b1:e3:05:b9:ab:0b:15:b3:db:08:4d:ea:75:
c9:9d:04:0c:7a:d9:99:eb:2a:2e:44:27:ac:0d:0b:
7d:3e:d9:f4:d1:55:e7:14:0b:8f:f2:5b:cd:2a:69:
4c:1e:de:45:9d:c0:21:a0:48:e4:90:20:3c:75:f0:
92:25:b7:16:4d:0a:43:11:71:7e:ae:7a:55:f5:66:
76:41:55:d2:cd:76:b3:3f:3a:b3:78:d2:1b:b2:e9:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:44:1A:33:89:01:46:1E:0D:5E:06:18:4D:20:87:31:9D:30:BA:FC
X509v3 Authority Key Identifier:
keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/RUQaM4kBRh4NXgYYTSCHMZ0wuvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.128.0/20
Signature Algorithm: sha256WithRSAEncryption
92:6f:b0:a5:d1:12:aa:4f:ab:9d:9a:54:2d:cc:36:0e:fe:1f:
b6:6f:c9:d6:80:a4:79:c9:43:e7:68:78:5f:a8:c9:62:27:83:
c5:01:c7:05:83:65:5a:44:ec:49:1d:6a:cb:43:e0:47:2e:98:
93:d9:af:72:dc:4c:5e:87:c0:00:df:41:65:c0:fe:dc:5f:6b:
86:c7:f3:03:b9:02:fe:c8:af:bb:72:ce:0b:02:67:aa:34:e6:
63:5e:e2:81:88:24:9c:33:90:84:f0:34:6a:e9:2c:66:78:47:
36:66:f5:15:41:d5:77:d2:9f:24:02:4b:72:a7:ba:68:ac:93:
e6:24:ed:41:96:45:8f:0f:f5:7d:42:98:db:fd:32:60:8c:63:
76:df:b2:fe:37:59:33:cf:ef:87:de:d2:85:07:b7:93:f0:ca:
52:50:2d:3e:e8:4c:44:a0:6f:e6:ee:74:59:d6:8b:99:e1:56:
39:3a:af:0f:f5:08:7e:94:ab:aa:64:10:b9:30:21:51:0b:f5:
7e:d4:80:77:32:2c:bd:0d:3b:e0:2b:3a:92:87:e1:3c:9e:3a:
93:2f:33:cf:f4:2d:44:45:25:e2:a5:ed:b5:db:4f:ad:ac:ca:
77:01:21:cb:4d:9b:7c:cd:fe:71:54:18:d2:f2:8b:3d:98:bc:
89:c0:15:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYv2/Q8aF7EtRK1R6ro8VtP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOGRkNWZlNDE3OWU4YmRhMjg1MzI1NjE5MTlmNmQwNzg3
N2M2M2QwHhcNMjMxMTIyMTIyNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTQ0MWEzMzg5MDE0NjFlMGQ1ZTA2MTg0ZDIwODczMTlkMzBiYWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA945ciAKew9tCS4e0bpiiY8jRgtrA
5GRuf6590amxn8kS3wzRJb+AD6tNS6fhxHhCMrRTGqXLuTYHXxpabauGZIqFFzwK
VAy2K35kP9q+0hKgPAjs+FnuZaOnFf0CacTvzdn+D0ZmQ0CLuU4Gnh5DTlhlm+Hq
a0w6axXx+FN5sAM6eFP/sTCxYUMhyBL3FFxABGbmOIz3HcC1VJnuaxTvtrlf2zDx
NrHjBbmrCxWz2whN6nXJnQQMetmZ6youRCesDQt9Ptn00VXnFAuP8lvNKmlMHt5F
ncAhoEjkkCA8dfCSJbcWTQpDEXF+rnpV9WZ2QVXSzXazPzqzeNIbsukq9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEVEGjOJAUYeDV4GGE0ghzGdMLr8MB8GA1UdIwQY
MBaAFP+N1f5Beei9ooUyVhkZ9tB4d8Y9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQt
MDZhNDA0NDM1ZTUwLzEvUlVRYU00a0JSaDROWGdZWVRTQ0hNWjB3dXZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQtMDZhNDA0NDM1ZTUw
LzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELpWAMA0G
CSqGSIb3DQEBCwUAA4IBAQCSb7Cl0RKqT6udmlQtzDYO/h+2b8nWgKR5yUPnaHhf
qMliJ4PFAccFg2VaROxJHWrLQ+BHLpiT2a9y3Exeh8AA30FlwP7cX2uGx/MDuQL+
yK+7cs4LAmeqNOZjXuKBiCScM5CE8DRq6SxmeEc2ZvUVQdV30p8kAktyp7porJPm
JO1BlkWPD/V9Qpjb/TJgjGN237L+N1kzz++H3tKFB7eT8MpSUC0+6ExEoG/m7nRZ
1ouZ4VY5Oq8P9Qh+lKuqZBC5MCFRC/V+1IB3Miy9DTvgKzqSh+E8njqTLzPP9C1E
RSXipe2120+trMp3ASHLTZt8zf5xVBjS8os9mLyJwBWv
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:54 2025 by rpki-client