Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/KKgTdm6zKVxOvbYe-xCRq0srH2k.roa
File: KKgTdm6zKVxOvbYe-xCRq0srH2k.roa (raw, json)
Hash identifier: Z4HRT5SRLos2K96ENu2qAXLY1hnh2qJLKNPFV5IkUqk=
Subject key identifier: 28:A8:13:76:6E:B3:29:5C:4E:BD:B6:1E:FB:10:91:AB:4B:2B:1F:69
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 0186C0A0AC16FA816AB0C4657A69187FA2A8
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/KKgTdm6zKVxOvbYe-xCRq0srH2k.roa
Signing time: Wed 08 Mar 2023 09:50:00 +0000
ROA not before: Wed 08 Mar 2023 09:50:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 46.244.111.0/24 maxlen: 24
46.244.110.0/24 maxlen: 24
46.244.109.0/24 maxlen: 24
46.244.108.0/24 maxlen: 24
46.244.108.0/22 maxlen: 24
46.244.115.0/24 maxlen: 24
46.244.114.0/23 maxlen: 24
46.244.114.0/24 maxlen: 24
46.244.97.0/24 maxlen: 24
46.244.18.0/23 maxlen: 24
92.240.144.0/22 maxlen: 24
92.240.151.0/24 maxlen: 24
92.240.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c0:a0:ac:16:fa:81:6a:b0:c4:65:7a:69:18:7f:a2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Mar 8 09:50:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28a813766eb3295c4ebdb61efb1091ab4b2b1f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:77:0e:86:72:92:2e:1f:ab:43:a5:2e:13:c9:
0d:09:49:09:97:32:82:cd:6a:ee:e6:c5:3f:ff:d2:
e7:be:98:1b:e0:9b:f2:67:49:24:b7:a4:a6:fa:ee:
05:96:8e:b7:34:bf:c9:70:dc:6c:4a:6b:4e:80:c6:
3f:d1:31:a2:b2:83:f6:ed:ee:94:c3:d8:40:e7:1b:
73:36:83:d4:09:c8:88:c6:a8:db:4f:2c:39:42:75:
41:62:8c:de:13:2f:b1:de:40:63:37:ab:ce:52:ca:
95:37:65:1e:72:4d:6f:ce:97:dd:73:16:9b:35:fe:
71:68:2b:87:81:6b:54:63:cb:bb:be:95:dd:8b:55:
db:f5:75:f0:d3:f6:64:e3:f7:06:c1:5f:40:c6:58:
5c:ca:0f:e1:c3:ea:f9:48:0e:5b:0d:26:7e:70:31:
e5:58:f6:a7:f1:de:a2:e6:4c:57:bb:a2:40:30:8a:
dd:ad:7b:58:8d:7d:89:83:f3:26:95:b6:72:6d:43:
40:f6:e1:e3:ef:46:50:0f:22:72:e2:f6:0e:1c:66:
d6:4e:1e:eb:e5:25:e8:16:c3:e7:20:d5:79:5c:06:
57:90:08:71:6d:47:89:e1:85:43:9c:ab:cf:90:34:
1a:c5:28:a1:37:8f:be:b4:ea:57:dc:2d:06:c1:cc:
ab:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A8:13:76:6E:B3:29:5C:4E:BD:B6:1E:FB:10:91:AB:4B:2B:1F:69
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/KKgTdm6zKVxOvbYe-xCRq0srH2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.18.0/23
46.244.97.0/24
46.244.108.0/22
46.244.114.0/23
92.240.144.0/22
92.240.149.0/24
92.240.151.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:68:11:1e:bd:bf:90:af:28:3d:f5:2a:f5:a3:c5:94:a5:13:
a5:55:7f:dd:97:1e:e3:13:63:bc:81:fc:03:ec:0e:c5:cf:55:
22:f6:86:58:56:92:8a:9a:a4:80:3a:0c:c7:42:60:5a:de:0f:
a5:c1:e5:94:f6:58:a7:cc:b5:cc:2b:c2:a0:42:70:15:a1:28:
34:4c:85:02:cb:b4:bf:93:86:39:50:8b:77:d1:ca:b2:77:79:
b1:05:df:5d:e8:83:48:57:a0:be:a1:45:0b:cc:ac:44:5a:75:
4a:a1:04:df:3e:d9:25:b0:b8:7e:28:de:fb:85:0c:67:c4:b9:
a3:56:21:a8:0c:6c:19:1f:17:a8:08:be:5b:38:79:6b:8d:64:
77:f2:0d:e4:40:cf:3e:a5:ad:c5:67:66:f1:dc:3d:d9:f5:ce:
ab:cf:92:84:67:85:4e:3f:de:4f:08:ea:5a:f1:fc:25:db:8d:
b7:7f:b3:61:ff:c7:5f:21:04:e3:56:e1:51:16:c1:b1:ee:08:
63:42:5f:ae:cb:b3:cd:1a:b8:22:fc:db:bf:e0:9e:13:70:be:
7d:d3:71:1d:e7:fa:0d:ff:0f:43:5e:cc:fe:f9:5d:5a:9b:34:
a3:2c:69:f4:18:41:1d:96:50:ca:57:d2:87:6e:a5:78:1e:a8:
bf:31:6c:13
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYbAoKwW+oFqsMRlemkYf6KoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjI2YzkwOWViNDk1MTE1NGJjZWU4MjIxZTQzOTUxYjQy
NTc2MjQwHhcNMjMwMzA4MDk1MDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGE4MTM3NjZlYjMyOTVjNGViZGI2MWVmYjEwOTFhYjRiMmIxZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXcOhnKSLh+rQ6UuE8kNCUkJlzKC
zWru5sU//9Lnvpgb4JvyZ0kkt6Sm+u4Flo63NL/JcNxsSmtOgMY/0TGisoP27e6U
w9hA5xtzNoPUCciIxqjbTyw5QnVBYozeEy+x3kBjN6vOUsqVN2Ueck1vzpfdcxab
Nf5xaCuHgWtUY8u7vpXdi1Xb9XXw0/Zk4/cGwV9Axlhcyg/hw+r5SA5bDSZ+cDHl
WPan8d6i5kxXu6JAMIrdrXtYjX2Jg/MmlbZybUNA9uHj70ZQDyJy4vYOHGbWTh7r
5SXoFsPnINV5XAZXkAhxbUeJ4YVDnKvPkDQaxSihN4++tOpX3C0GwcyrGwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFCioE3ZusylcTr22HvsQkatLKx9pMB8GA1UdIwQY
MBaAFI5ibJCetJURVLzugiHkOVG0JXYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAt
ZTk3ZDFkMDIyMGFmLzEvS0tnVGRtNnpLVnhPdmJZZS14Q1JxMHNySDJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAtZTk3ZDFkMDIyMGFm
LzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBLvQSAwQA
LvRhAwQCLvRsAwQBLvRyAwQCXPCQAwQAXPCVAwQAXPCXMA0GCSqGSIb3DQEBCwUA
A4IBAQCraBEevb+Qryg99Sr1o8WUpROlVX/dlx7jE2O8gfwD7A7Fz1Ui9oZYVpKK
mqSAOgzHQmBa3g+lweWU9linzLXMK8KgQnAVoSg0TIUCy7S/k4Y5UIt30cqyd3mx
Bd9d6INIV6C+oUULzKxEWnVKoQTfPtklsLh+KN77hQxnxLmjViGoDGwZHxeoCL5b
OHlrjWR38g3kQM8+pa3FZ2bx3D3Z9c6rz5KEZ4VOP95PCOpa8fwl2423f7Nh/8df
IQTjVuFRFsGx7ghjQl+uy7PNGrgi/Nu/4J4TcL5903Ed5/oN/w9DXsz++V1amzSj
LGn0GEEdllDKV9KHbqV4Hqi/MWwT
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:12:12 2025 by rpki-client