Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/Sivxo4GcDHLGEzoEYxzFXa3yj_E.roa
File: Sivxo4GcDHLGEzoEYxzFXa3yj_E.roa (raw, json)
Hash identifier: /9iqbkX0uoyAdqTDh/JbDG4zybzIh5Rg79/+2Ms4/Zo=
Subject key identifier: 4A:2B:F1:A3:81:9C:0C:72:C6:13:3A:04:63:1C:C5:5D:AD:F2:8F:F1
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 0185A5D43061AAFCAFDF6E8CB70F0223B550
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/Sivxo4GcDHLGEzoEYxzFXa3yj_E.roa
Signing time: Thu 12 Jan 2023 11:53:44 +0000
ROA not before: Thu 12 Jan 2023 11:53:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48806
IP address blocks: 92.240.148.0/24 maxlen: 24
46.244.96.0/24 maxlen: 24
92.240.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:d4:30:61:aa:fc:af:df:6e:8c:b7:0f:02:23:b5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 12 11:53:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a2bf1a3819c0c72c6133a04631cc55dadf28ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:62:3b:cb:be:dd:68:24:e2:dc:aa:7c:01:6b:
36:c2:48:39:43:3e:a3:07:5b:26:9b:d0:9e:5e:c8:
82:bf:3c:2d:f7:20:17:3c:ad:db:ca:8b:ba:30:90:
2a:b6:da:2c:9f:e2:0d:09:09:e5:f8:df:b9:e3:3d:
8c:9e:32:6a:0c:fe:5c:8c:d1:14:af:69:91:21:2d:
03:42:37:17:c3:e5:b8:c3:5b:05:cd:05:5a:c0:84:
3a:f6:62:30:c2:77:0a:cd:11:53:ff:3e:92:d6:a3:
5b:5d:39:4a:7a:e9:47:52:48:b8:e6:aa:5c:fe:42:
b7:16:5d:97:d0:3f:68:77:5b:cd:c1:65:01:68:cd:
37:c4:6f:9f:40:18:bf:8a:99:29:ef:39:03:b7:36:
4f:c9:92:e4:c3:be:8f:4c:bd:ce:cc:b7:d6:d8:a4:
8c:71:c4:2d:e0:64:82:df:1c:de:65:4f:0e:c9:21:
f7:24:60:ad:a0:28:1f:9e:68:9f:1c:aa:31:24:c8:
04:eb:be:2c:47:02:31:20:07:ba:26:10:3b:c5:ee:
8d:f2:7f:bd:d1:09:59:27:3e:38:be:2c:8a:dc:1c:
9d:ab:4a:ee:2f:db:b8:4d:25:f7:82:b7:b4:82:8c:
2d:1f:02:ce:28:0a:e6:74:aa:70:74:ce:eb:91:c6:
23:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2B:F1:A3:81:9C:0C:72:C6:13:3A:04:63:1C:C5:5D:AD:F2:8F:F1
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/Sivxo4GcDHLGEzoEYxzFXa3yj_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.96.0/24
92.240.148.0/24
92.240.150.0/24
Signature Algorithm: sha256WithRSAEncryption
04:6e:9f:9f:42:db:18:2c:5b:3c:c5:66:4b:ed:4d:c6:25:3f:
66:9f:45:5c:a6:4d:d0:95:5a:3a:3b:4c:a6:3d:8c:08:a0:4a:
a6:e0:f6:69:90:ac:81:d8:38:a3:97:1a:d1:95:27:8a:c9:92:
48:a5:d2:37:c9:0d:9d:7b:76:43:39:72:bd:8c:c0:82:c8:15:
51:c9:1e:41:13:44:cd:d8:c4:f5:ba:f9:69:9a:5b:72:be:25:
29:05:88:92:61:e9:4f:4a:b3:b5:a5:ba:e6:04:e9:06:03:e5:
a6:d2:cc:4a:d4:c1:f9:ee:55:da:1f:6c:61:4a:e8:e2:f1:d3:
48:9f:f7:50:c1:f4:7b:9b:30:28:c7:ab:d0:72:f3:e1:e9:82:
d7:ed:da:b2:37:e8:de:85:5a:21:ff:a4:be:0e:77:71:2c:c0:
0a:8c:c1:e6:04:2c:0d:6e:0d:b1:d8:d3:7c:fa:ae:89:96:bb:
c2:51:6e:f7:b4:f6:d0:fe:53:74:4f:54:0c:9c:a0:82:1e:78:
b3:2c:77:15:6e:c9:c5:32:6e:7f:7a:ab:d8:c1:01:b5:25:fd:
7d:61:f7:90:b6:e6:17:69:47:82:4d:26:6e:dd:12:bb:77:7a:
b5:98:41:96:23:24:23:91:b2:41:d0:be:db:f2:c5:bd:93:8b:
e2:c0:f6:8e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYWl1DBhqvyv326Mtw8CI7VQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjI2YzkwOWViNDk1MTE1NGJjZWU4MjIxZTQzOTUxYjQy
NTc2MjQwHhcNMjMwMTEyMTE1MzQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTJiZjFhMzgxOWMwYzcyYzYxMzNhMDQ2MzFjYzU1ZGFkZjI4ZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGI7y77daCTi3Kp8AWs2wkg5Qz6j
B1smm9CeXsiCvzwt9yAXPK3byou6MJAqttosn+INCQnl+N+54z2MnjJqDP5cjNEU
r2mRIS0DQjcXw+W4w1sFzQVawIQ69mIwwncKzRFT/z6S1qNbXTlKeulHUki45qpc
/kK3Fl2X0D9od1vNwWUBaM03xG+fQBi/ipkp7zkDtzZPyZLkw76PTL3OzLfW2KSM
ccQt4GSC3xzeZU8OySH3JGCtoCgfnmifHKoxJMgE674sRwIxIAe6JhA7xe6N8n+9
0QlZJz44viyK3Bydq0ruL9u4TSX3gre0gowtHwLOKArmdKpwdM7rkcYjFQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEor8aOBnAxyxhM6BGMcxV2t8o/xMB8GA1UdIwQY
MBaAFI5ibJCetJURVLzugiHkOVG0JXYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAt
ZTk3ZDFkMDIyMGFmLzEvU2l2eG80R2NESExHRXpvRVl4ekZYYTN5al9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAtZTk3ZDFkMDIyMGFm
LzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALvRgAwQA
XPCUAwQAXPCWMA0GCSqGSIb3DQEBCwUAA4IBAQAEbp+fQtsYLFs8xWZL7U3GJT9m
n0Vcpk3QlVo6O0ymPYwIoEqm4PZpkKyB2DijlxrRlSeKyZJIpdI3yQ2de3ZDOXK9
jMCCyBVRyR5BE0TN2MT1uvlpmltyviUpBYiSYelPSrO1pbrmBOkGA+Wm0sxK1MH5
7lXaH2xhSuji8dNIn/dQwfR7mzAox6vQcvPh6YLX7dqyN+jehVoh/6S+DndxLMAK
jMHmBCwNbg2x2NN8+q6JlrvCUW73tPbQ/lN0T1QMnKCCHnizLHcVbsnFMm5/eqvY
wQG1Jf19YfeQtuYXaUeCTSZu3RK7d3q1mEGWIyQjkbJB0L7b8sW9k4viwPaO
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:10 2025 by rpki-client