Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/bqKtwdtZ1S1LUvYZwMdP5WnyUck.roa
File: bqKtwdtZ1S1LUvYZwMdP5WnyUck.roa (raw, json)
Hash identifier: 8A+HBLooqszaUct/QhpDk3NhIIsK1PlCL8oNOhkNBCM=
Subject key identifier: 6E:A2:AD:C1:DB:59:D5:2D:4B:52:F6:19:C0:C7:4F:E5:69:F2:51:C9
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018252E9B36D18CD48EF3E482D5E90DAA60D
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/bqKtwdtZ1S1LUvYZwMdP5WnyUck.roa
Signing time: Sun 31 Jul 2022 06:20:23 +0000
ROA not before: Sun 31 Jul 2022 06:20:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49100
IP address blocks: 46.209.122.0/24 maxlen: 24
46.209.234.0/24 maxlen: 24
5.160.106.0/24 maxlen: 24
77.104.114.0/23 maxlen: 23
46.209.102.0/24 maxlen: 24
46.209.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:52:e9:b3:6d:18:cd:48:ef:3e:48:2d:5e:90:da:a6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jul 31 06:20:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ea2adc1db59d52d4b52f619c0c74fe569f251c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:7d:f4:a9:6a:7a:80:65:8e:8b:2f:31:ff:
98:ca:d7:0b:94:d7:02:d9:e3:10:f1:f4:66:88:49:
f7:79:95:44:18:1b:15:74:b9:e5:f5:96:2f:97:c1:
ae:6c:ff:ae:fc:82:14:0c:3d:92:b9:39:4a:4b:14:
5a:1a:d4:78:90:13:a0:be:1c:d3:94:c4:a3:c1:01:
59:ed:a3:6a:00:1c:c7:e8:5f:a3:41:d7:5f:d3:f2:
b5:c9:a0:70:ef:2c:da:7b:6e:7b:53:b1:4d:ba:65:
d6:bc:5e:ff:75:f1:84:13:62:04:68:98:23:6f:47:
f1:2e:e5:b6:57:3c:f2:0b:e6:5e:8e:06:5d:e9:0c:
14:56:4f:46:79:45:b8:f5:45:99:1e:91:cb:76:e3:
ec:6b:44:26:41:01:07:7a:cd:28:9f:32:e1:48:4d:
ae:4f:64:1c:c1:19:6c:59:41:5f:d1:9d:87:fc:f2:
21:6a:de:24:50:14:0a:92:f1:fc:32:4e:ee:7f:18:
4f:81:69:02:33:3f:cd:ab:4e:1b:7b:75:b7:f6:69:
47:ee:41:12:ab:a2:e6:2e:74:20:bf:f1:03:76:88:
c2:b1:ed:e7:0f:40:08:d3:f7:d4:c5:af:37:45:a0:
fb:bb:99:0f:e6:73:c5:69:38:54:f6:6a:95:e6:10:
9c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A2:AD:C1:DB:59:D5:2D:4B:52:F6:19:C0:C7:4F:E5:69:F2:51:C9
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/bqKtwdtZ1S1LUvYZwMdP5WnyUck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.106.0/24
46.209.10.0/24
46.209.102.0/24
46.209.122.0/24
46.209.234.0/24
77.104.114.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:e9:b9:d2:ca:bd:e9:52:a1:3b:32:46:ee:81:c0:56:9d:9e:
9f:62:73:2f:01:93:1c:dc:86:94:17:02:70:17:98:92:58:50:
27:2c:27:9c:c6:cd:66:10:cc:28:f2:02:52:86:2b:28:2a:b5:
57:09:a0:3e:a9:ac:f6:4d:00:d3:5d:af:1d:97:1b:55:23:50:
fc:9b:08:7a:76:e9:02:27:21:cd:ac:34:b9:9d:97:c3:c9:d1:
e2:bd:8d:76:0b:3b:ec:45:e5:10:6f:1f:bf:17:ca:32:2d:96:
73:36:46:70:1a:60:06:96:ad:31:1d:b6:9d:57:49:f3:ab:1c:
ec:33:eb:af:e0:c4:e1:82:a8:c8:a0:98:34:a5:65:a0:57:e8:
80:70:a0:55:2d:93:48:e4:3a:ab:78:bc:6a:3a:6c:f4:ce:86:
6d:c9:43:65:0b:e0:83:70:9d:3f:e0:28:e4:5f:1b:b1:e9:51:
7b:65:ed:1c:29:71:d8:a3:91:c5:5d:6f:c3:9e:c4:d1:b3:59:
f3:e7:60:d5:b5:88:69:27:a3:e7:35:68:90:01:c9:fe:35:2b:
aa:24:9c:e6:be:10:26:e1:c2:d9:f7:d7:d6:c3:28:72:85:fa:
da:a1:1e:dc:c3:b5:0b:74:42:37:d5:07:81:fd:d6:47:89:f3:
44:65:d1:6e
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYJS6bNtGM1I7z5ILV6Q2qYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjIwNzMxMDYyMDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWEyYWRjMWRiNTlkNTJkNGI1MmY2MTljMGM3NGZlNTY5ZjI1MWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNB99KlqeoBljosvMf+YytcLlNcC
2eMQ8fRmiEn3eZVEGBsVdLnl9ZYvl8GubP+u/IIUDD2SuTlKSxRaGtR4kBOgvhzT
lMSjwQFZ7aNqABzH6F+jQddf0/K1yaBw7yzae257U7FNumXWvF7/dfGEE2IEaJgj
b0fxLuW2VzzyC+ZejgZd6QwUVk9GeUW49UWZHpHLduPsa0QmQQEHes0onzLhSE2u
T2QcwRlsWUFf0Z2H/PIhat4kUBQKkvH8Mk7ufxhPgWkCMz/Nq04be3W39mlH7kES
q6LmLnQgv/EDdojCse3nD0AI0/fUxa83RaD7u5kP5nPFaThU9mqV5hCcOwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFG6ircHbWdUtS1L2GcDHT+Vp8lHJMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvYnFLdHdkdFoxUzFMVXZZWndNZFA1V255VWNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQABaBqAwQA
LtEKAwQALtFmAwQALtF6AwQALtHqAwQBTWhyMA0GCSqGSIb3DQEBCwUAA4IBAQCl
6bnSyr3pUqE7MkbugcBWnZ6fYnMvAZMc3IaUFwJwF5iSWFAnLCecxs1mEMwo8gJS
hisoKrVXCaA+qaz2TQDTXa8dlxtVI1D8mwh6dukCJyHNrDS5nZfDydHivY12Czvs
ReUQbx+/F8oyLZZzNkZwGmAGlq0xHbadV0nzqxzsM+uv4MThgqjIoJg0pWWgV+iA
cKBVLZNI5DqreLxqOmz0zoZtyUNlC+CDcJ0/4CjkXxux6VF7Ze0cKXHYo5HFXW/D
nsTRs1nz52DVtYhpJ6PnNWiQAcn+NSuqJJzmvhAm4cLZ99fWwyhyhfraoR7cw7UL
dEI31QeB/dZHifNEZdFu
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:06 2023 by rpki-client on console-ams.rpki-client.org