Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/DHtOHBSu21msHIKqVQP8_tu2DmQ.roa
File: DHtOHBSu21msHIKqVQP8_tu2DmQ.roa (raw, json)
Hash identifier: HOXQacNsZ6mh6/wyMzZOOPg3vpMySZbkGTSRjuLYPHo=
Subject key identifier: 0C:7B:4E:1C:14:AE:DB:59:AC:1C:82:AA:55:03:FC:FE:DB:B6:0E:64
Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial: 0945835A
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/DHtOHBSu21msHIKqVQP8_tu2DmQ.roa
Signing time: Sat 01 Jan 2022 12:56:12 +0000
ROA not before: Sat 01 Jan 2022 12:56:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42422
IP address blocks: 46.36.36.0/24 maxlen: 24
46.36.38.0/24 maxlen: 24
46.36.35.0/24 maxlen: 24
46.36.37.0/24 maxlen: 24
46.36.39.0/24 maxlen: 24
46.36.41.0/24 maxlen: 24
46.36.40.0/24 maxlen: 24
2a02:25b0:aaaa::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155550554 (0x945835a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Validity
Not Before: Jan 1 12:56:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c7b4e1c14aedb59ac1c82aa5503fcfedbb60e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:2c:bb:49:49:2b:93:07:66:e9:e2:29:96:
5a:8d:64:8c:60:e8:48:bc:79:f5:1e:55:40:c2:37:
f7:ac:93:42:68:0d:8a:d0:b3:b3:b8:72:b2:49:65:
73:19:44:ec:e7:78:a0:d8:51:61:7a:3c:31:04:f1:
e9:58:b8:6f:17:f7:a5:b2:da:3c:11:47:3b:33:e3:
55:50:67:75:83:27:f5:af:2f:04:69:bb:50:60:f4:
c2:b1:3a:06:5d:51:c9:7e:aa:3b:c3:88:b1:48:d2:
33:64:2d:69:b6:71:da:af:35:56:ce:ef:e2:94:bd:
3f:ff:6f:19:a1:44:39:04:0f:f0:3d:3d:e5:ea:5d:
7f:57:b9:34:1d:9a:81:e1:81:b8:4f:38:b0:17:2a:
4a:30:4f:7d:2e:c9:0e:4e:1d:34:46:27:ed:36:fb:
48:74:4f:19:cf:5b:eb:82:98:29:d5:53:a2:9e:d4:
9a:a4:16:b1:fa:51:4e:ce:81:b3:9b:05:68:8a:b9:
42:20:9c:5c:3b:a5:52:ac:a2:9e:a0:2b:7b:e9:60:
de:48:01:32:54:f5:7d:68:ed:52:ba:79:dc:95:28:
0e:5b:69:d9:42:da:8e:8c:4c:6e:00:03:ef:1c:52:
d2:0e:e1:5d:80:f1:05:9f:bc:fa:0b:dc:e5:9e:8d:
a8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7B:4E:1C:14:AE:DB:59:AC:1C:82:AA:55:03:FC:FE:DB:B6:0E:64
X509v3 Authority Key Identifier:
keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/DHtOHBSu21msHIKqVQP8_tu2DmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.35.0-46.36.41.255
IPv6:
2a02:25b0:aaaa::/48
Signature Algorithm: sha256WithRSAEncryption
5c:c8:27:7a:98:ca:d1:c0:5c:32:40:19:fa:78:7c:9a:70:34:
95:2a:34:1b:65:f8:86:91:0b:bc:bc:5d:51:60:ed:e8:e4:a9:
c9:c4:27:a9:a9:31:0e:8e:f7:26:dd:c6:08:85:2c:e3:b1:c0:
a9:d8:c0:24:e9:41:c4:cc:00:34:0e:76:f5:18:4f:e1:9b:0a:
42:ba:ac:11:40:e3:a0:29:f0:01:2f:1d:c7:40:7b:e8:5d:94:
3a:51:b4:c4:94:8e:f8:3e:30:c4:7e:e2:49:f1:45:83:ff:c8:
45:43:ec:de:d6:7a:e4:c5:fd:be:d3:be:9a:d8:88:5b:03:3d:
4d:a0:65:67:74:10:f7:34:74:e1:36:6d:47:fb:3c:a4:f3:5b:
c7:bd:28:6d:92:75:3b:92:2c:83:6a:c6:38:9f:04:8d:08:b7:
e4:30:53:28:ca:d8:f8:bc:c4:d2:8d:b3:b3:5e:78:bf:fc:c9:
68:52:55:f7:2c:81:33:7c:85:4a:74:1e:af:fa:d4:c4:51:21:
10:89:e9:ac:6e:2f:bc:c2:e8:6b:44:e6:91:0c:7f:2e:2b:c6:
76:53:29:13:ff:43:85:c2:e2:74:e3:8d:e9:74:eb:24:cc:25:
21:c1:1a:11:df:e4:2c:c0:91:39:74:15:8b:4d:ce:65:5c:4e:
70:e1:52:e2
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIECUWDWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
Yzk4OGI5M2FiN2EyOTk5YTMyNTVlZWFlNGUxOGFiMjNiMmUwZjNlMB4XDTIyMDEw
MTEyNTYxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGM3YjRlMWMxNGFl
ZGI1OWFjMWM4MmFhNTUwM2ZjZmVkYmI2MGU2NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKojLLtJSSuTB2bp4imWWo1kjGDoSLx59R5VQMI396yTQmgN
itCzs7hyskllcxlE7Od4oNhRYXo8MQTx6Vi4bxf3pbLaPBFHOzPjVVBndYMn9a8v
BGm7UGD0wrE6Bl1RyX6qO8OIsUjSM2QtabZx2q81Vs7v4pS9P/9vGaFEOQQP8D09
5epdf1e5NB2ageGBuE84sBcqSjBPfS7JDk4dNEYn7Tb7SHRPGc9b64KYKdVTop7U
mqQWsfpRTs6Bs5sFaIq5QiCcXDulUqyinqAre+lg3kgBMlT1fWjtUrp53JUoDltp
2ULajoxMbgAD7xxS0g7hXYDxBZ+8+gvc5Z6NqMkCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBQMe04cFK7bWawcgqpVA/z+27YOZDAfBgNVHSMEGDAWgBRMmIuTq3opmaMl
Xurk4YqyOy4PPjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RKaUxrNnQ2S1ptakpWN3E1T0dLc2pzdUR6NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvNGMxZjU5LTBjMTItNDE1My1hMTVjLTcxNWY5Y2Q2MzA4Ni8x
L0RIdE9IQlN1MjFtc0hJS3FWUVA4X3R1MkRtUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
NGMxZjU5LTBjMTItNDE1My1hMTVjLTcxNWY5Y2Q2MzA4Ni8xL1RKaUxrNnQ2S1pt
akpWN3E1T0dLc2pzdUR6NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA4
BggrBgEFBQcBBwEB/wQpMCcwFAQCAAEwDjAMAwQALiQjAwQBLiQoMA8EAgACMAkD
BwAqAiWwqqowDQYJKoZIhvcNAQELBQADggEBAFzIJ3qYytHAXDJAGfp4fJpwNJUq
NBtl+IaRC7y8XVFg7ejkqcnEJ6mpMQ6O9ybdxgiFLOOxwKnYwCTpQcTMADQOdvUY
T+GbCkK6rBFA46Ap8AEvHcdAe+hdlDpRtMSUjvg+MMR+4knxRYP/yEVD7N7WeuTF
/b7TvprYiFsDPU2gZWd0EPc0dOE2bUf7PKTzW8e9KG2SdTuSLINqxjifBI0It+Qw
UyjK2Pi8xNKNs7NeeL/8yWhSVfcsgTN8hUp0Hq/61MRRIRCJ6axuL7zC6GtE5pEM
fy4rxnZTKRP/Q4XC4nTjjel06yTMJSHBGhHf5CzAkTl0FYtNzmVcTnDhUuI=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:41 2025 by rpki-client