Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Xfx1CJRPfA-GrILF2pax_fq7cGM.roa
File: Xfx1CJRPfA-GrILF2pax_fq7cGM.roa (raw, json)
Hash identifier: 49uY7CrGiT+tRxKKI05lNz/pGpCeKqtqXqMC/xqzM6s=
Subject key identifier: 5D:FC:75:08:94:4F:7C:0F:86:AC:82:C5:DA:96:B1:FD:FA:BB:70:63
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 39577B06
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Xfx1CJRPfA-GrILF2pax_fq7cGM.roa
Signing time: Wed 23 Mar 2022 06:05:02 +0000
ROA not before: Wed 23 Mar 2022 06:05:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47814
IP address blocks: 46.19.204.251/32 maxlen: 32
46.19.205.0/24 maxlen: 24
46.19.206.0/24 maxlen: 24
94.101.238.0/24 maxlen: 24
185.176.116.0/22 maxlen: 22
94.101.233.206/32 maxlen: 32
2001:1bf8::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 962034438 (0x39577b06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Mar 23 06:05:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dfc7508944f7c0f86ac82c5da96b1fdfabb7063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:15:ab:ac:66:e1:db:e5:d8:50:04:9f:0c:
ef:9c:2c:75:10:e2:d4:80:8a:0d:c8:87:4f:e1:82:
eb:70:45:74:e8:4a:ff:aa:75:5e:14:ad:f0:24:66:
d8:7f:24:dd:cf:36:30:48:87:7f:67:40:63:01:28:
8e:e2:65:ff:cc:3f:7f:11:17:55:ef:67:b4:47:f6:
7d:6a:d4:9c:15:4c:eb:07:c6:d1:a5:f6:7f:51:fa:
d8:8d:13:8e:ec:50:26:18:8b:f5:74:09:97:76:88:
d5:c7:0e:3e:af:f5:3a:51:8d:94:eb:4e:14:8c:76:
01:9a:7c:7b:8a:28:cb:f9:8c:9e:03:aa:77:51:6b:
31:08:f0:56:18:f6:7a:87:f2:72:c0:82:d8:63:eb:
c8:20:30:20:f5:57:ce:82:66:a8:b5:05:09:12:5d:
de:85:25:18:86:4c:aa:7e:5c:88:29:81:40:d6:e6:
8e:36:f7:b8:a1:95:b0:92:e0:39:88:43:20:55:ab:
ec:83:d0:12:13:81:70:74:23:6d:1c:c9:a2:2e:b1:
5f:5b:5d:cd:da:55:fa:38:80:fe:74:7d:ff:32:2a:
2a:05:aa:2e:81:5b:26:5b:50:4c:26:1f:eb:36:1a:
34:29:17:7b:62:68:c3:0b:5f:15:3b:1d:84:03:cf:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FC:75:08:94:4F:7C:0F:86:AC:82:C5:DA:96:B1:FD:FA:BB:70:63
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Xfx1CJRPfA-GrILF2pax_fq7cGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.204.251/32
46.19.205.0-46.19.206.255
94.101.233.206/32
94.101.238.0/24
185.176.116.0/22
IPv6:
2001:1bf8::/29
Signature Algorithm: sha256WithRSAEncryption
52:0f:3b:19:0e:5d:7c:8b:7f:3a:41:0e:6c:e3:75:91:4e:a6:
87:95:86:22:c7:24:27:25:fb:e0:90:13:ef:f1:2e:98:ac:78:
cc:8a:b8:f3:64:c8:e7:d0:d8:7a:b1:13:0b:96:d7:a2:00:85:
02:66:82:c2:89:76:0b:1d:7f:bc:c2:12:48:f3:d2:06:93:ff:
95:78:6d:f8:7a:0c:3e:73:b3:e0:46:ea:37:c0:20:78:6a:91:
48:ac:0e:e2:99:39:fc:fb:08:77:d1:5f:68:85:a4:9b:cd:89:
7c:61:20:17:35:30:56:09:25:a8:40:ef:d2:a2:92:52:04:79:
1a:4c:05:fb:5e:97:36:87:87:f7:ae:6b:23:11:b1:e9:ca:a5:
ec:7b:c3:b9:3c:7b:5f:f9:35:19:d6:a8:f0:82:ac:ee:91:8f:
ed:22:a3:83:8a:02:4e:01:ce:4f:a9:4e:93:15:fc:5f:cc:af:
0a:9c:04:e8:d6:00:45:7f:2b:0b:10:a9:db:8b:b7:d9:6e:0f:
87:17:e1:1f:b6:fd:4e:d8:35:35:77:b6:87:10:15:3e:a2:24:
21:bc:16:5b:dc:6e:a6:a5:26:bc:3a:d1:6d:93:e4:9e:5d:c4:
34:22:1c:cd:e2:04:07:b5:91:d9:a8:2b:ce:fe:98:bf:ed:5f:
61:2b:11:56
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIEOVd7BjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YjA5NTJjOGJhOGRhZGIxZDM0ZGU2YzZhOTM4NjRhNjA5ZmM0MWVjMB4XDTIyMDMy
MzA2MDUwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWRmYzc1MDg5NDRm
N2MwZjg2YWM4MmM1ZGE5NmIxZmRmYWJiNzA2MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM+gFausZuHb5dhQBJ8M75wsdRDi1ICKDciHT+GC63BFdOhK
/6p1XhSt8CRm2H8k3c82MEiHf2dAYwEojuJl/8w/fxEXVe9ntEf2fWrUnBVM6wfG
0aX2f1H62I0TjuxQJhiL9XQJl3aI1ccOPq/1OlGNlOtOFIx2AZp8e4ooy/mMngOq
d1FrMQjwVhj2eofycsCC2GPryCAwIPVXzoJmqLUFCRJd3oUlGIZMqn5ciCmBQNbm
jjb3uKGVsJLgOYhDIFWr7IPQEhOBcHQjbRzJoi6xX1tdzdpV+jiA/nR9/zIqKgWq
LoFbJltQTCYf6zYaNCkXe2JowwtfFTsdhAPPGoECAwEAAaOCAjowggI2MB0GA1Ud
DgQWBBRd/HUIlE98D4asgsXalrH9+rtwYzAfBgNVHSMEGDAWgBSrCVLIuo2tsdNN
5sapOGSmCfxB7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3F3bFN5THFOcmJIVFRlYkdxVGhrcGduOFFldy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGUvMzU1NWZlLTEyY2QtNDAyYS1hODEwLTU1NTRkNmUxNjg2Zi8x
L1hmeDFDSlJQZkEtR3JJTEYycGF4X2ZxN2NHTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUv
MzU1NWZlLTEyY2QtNDAyYS1hODEwLTU1NTRkNmUxNjg2Zi8xL3F3bFN5THFOcmJI
VFRlYkdxVGhrcGduOFFldy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBQ
BggrBgEFBQcBBwEB/wRBMD8wLgQCAAEwKAMFAC4TzPswDAMEAC4TzQMEAC4TzgMF
AF5l6c4DBABeZe4DBAK5sHQwDQQCAAIwBwMFAyABG/gwDQYJKoZIhvcNAQELBQAD
ggEBAFIPOxkOXXyLfzpBDmzjdZFOpoeVhiLHJCcl++CQE+/xLpiseMyKuPNkyOfQ
2HqxEwuW16IAhQJmgsKJdgsdf7zCEkjz0gaT/5V4bfh6DD5zs+BG6jfAIHhqkUis
DuKZOfz7CHfRX2iFpJvNiXxhIBc1MFYJJahA79KiklIEeRpMBftelzaHh/euayMR
senKpex7w7k8e1/5NRnWqPCCrO6Rj+0io4OKAk4Bzk+pTpMV/F/MrwqcBOjWAEV/
KwsQqduLt9luD4cX4R+2/U7YNTV3tocQFT6iJCG8FlvcbqalJrw60W2T5J5dxDQi
HM3iBAe1kdmoK87+mL/tX2ErEVY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:37 2023 by rpki-client on console-ams.rpki-client.org