Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/e2T1XTg35CCGZTfiHuaRtAmEOZ0.roa
File: e2T1XTg35CCGZTfiHuaRtAmEOZ0.roa (raw, json)
Hash identifier: pQ6GgKXYS5LwxQuTukNWzqPM8fVebJWI450YNm559mY=
Subject key identifier: 7B:64:F5:5D:38:37:E4:20:86:65:37:E2:1E:E6:91:B4:09:84:39:9D
Certificate issuer: /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial: 01888D39717DF5276D9360DAED276C0EE4EE
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/e2T1XTg35CCGZTfiHuaRtAmEOZ0.roa
Signing time: Mon 05 Jun 2023 20:22:11 +0000
ROA not before: Mon 05 Jun 2023 20:22:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48208
IP address blocks: 46.238.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8d:39:71:7d:f5:27:6d:93:60:da:ed:27:6c:0e:e4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Validity
Not Before: Jun 5 20:22:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b64f55d3837e420866537e21ee691b40984399d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:4d:7d:7f:eb:e5:99:8f:00:e3:79:58:c1:
87:f0:fe:a6:03:d2:a8:cd:48:2e:8e:02:d2:17:aa:
d9:16:00:f7:99:5c:aa:0c:9a:a1:90:7b:a7:ec:3a:
7d:d4:92:37:6c:2b:53:ec:60:53:cb:52:a3:0e:ea:
c4:6b:7e:16:39:3d:60:1c:20:df:b6:1d:f9:d6:dc:
c7:25:0b:e9:b5:e8:10:62:2e:54:7f:6c:22:c2:a0:
c1:ee:4e:e2:f3:53:23:e4:93:c1:46:fa:80:4e:7f:
da:f9:28:6f:a0:86:36:25:f6:b4:f4:fb:4b:7d:06:
c0:17:62:50:c3:55:df:8c:a3:a2:2f:ea:1e:98:6f:
8d:a8:ab:8a:4d:de:e6:4b:82:7f:72:3e:bc:7e:88:
e8:87:e0:7e:cd:b6:fd:60:10:e2:ec:58:3d:d5:16:
7d:40:8f:aa:aa:b8:11:30:cc:66:62:50:24:c3:d4:
53:b2:05:b3:02:61:b8:6b:5f:89:cd:71:70:ba:ff:
92:cf:83:42:02:c9:17:10:8e:31:b8:d9:26:9f:58:
6c:59:41:4b:71:9d:cb:85:68:9e:f8:c8:9d:66:cf:
67:94:1c:9f:10:d1:4c:61:6f:93:4e:7c:b0:a5:34:
fe:ae:db:32:b8:9b:82:a0:a7:a9:c6:f9:d1:da:ce:
ae:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:64:F5:5D:38:37:E4:20:86:65:37:E2:1E:E6:91:B4:09:84:39:9D
X509v3 Authority Key Identifier:
keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/e2T1XTg35CCGZTfiHuaRtAmEOZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.238.233.0/24
Signature Algorithm: sha256WithRSAEncryption
61:43:2f:f8:83:4c:17:26:8d:ce:95:fc:5a:bc:f7:27:55:d1:
17:0f:c5:eb:1f:cd:14:84:f4:87:97:3d:78:17:91:25:3b:f6:
be:93:04:2e:ce:89:ad:77:f0:bb:13:06:b9:aa:f9:a2:c5:2d:
d7:10:28:ec:f0:b9:eb:de:5b:86:02:40:4f:84:ac:24:2f:80:
e0:4f:0b:db:85:ba:e3:4d:c0:95:c8:69:f0:f8:d5:0e:bd:c9:
bd:5f:02:9a:b5:0e:d5:7e:93:15:2e:ff:1f:a0:21:8d:1d:66:
0a:f9:62:e4:46:bb:ec:e5:c1:e0:48:fa:68:d1:4e:de:f8:63:
b9:02:5d:08:af:e5:91:34:ed:4d:af:3b:bd:26:72:71:0d:97:
f7:06:ab:e5:23:45:00:ef:52:28:df:f1:f1:a1:81:8b:55:05:
e5:f7:02:01:a8:59:74:e6:2d:8b:f0:95:84:c4:37:92:80:b0:
97:fd:7c:1f:f8:c3:d5:b7:42:25:c5:ee:1b:bf:f2:62:b0:41:
57:08:82:8c:2d:ef:87:47:08:96:ff:37:f9:d1:6b:f6:9e:9d:
93:40:6f:0a:a3:f5:8a:fb:fc:b8:5b:a1:88:f4:d5:ce:c7:46:
f4:37:06:41:37:9a:20:2c:cc:dd:9c:37:6d:d0:06:08:4b:bd:
0a:27:b0:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiNOXF99Sdtk2Da7SdsDuTuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZThmNTZiYzFmNTAxMDI5MTY4MWJjMmQ4YzAyZjlhY2Jm
NzE0YTAwHhcNMjMwNjA1MjAyMjExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjY0ZjU1ZDM4MzdlNDIwODY2NTM3ZTIxZWU2OTFiNDA5ODQzOTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcNNfX/r5ZmPAON5WMGH8P6mA9Ko
zUgujgLSF6rZFgD3mVyqDJqhkHun7Dp91JI3bCtT7GBTy1KjDurEa34WOT1gHCDf
th351tzHJQvptegQYi5Uf2wiwqDB7k7i81Mj5JPBRvqATn/a+ShvoIY2Jfa09PtL
fQbAF2JQw1XfjKOiL+oemG+NqKuKTd7mS4J/cj68fojoh+B+zbb9YBDi7Fg91RZ9
QI+qqrgRMMxmYlAkw9RTsgWzAmG4a1+JzXFwuv+Sz4NCAskXEI4xuNkmn1hsWUFL
cZ3LhWie+MidZs9nlByfENFMYW+TTnywpTT+rtsyuJuCoKepxvnR2s6uYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHtk9V04N+QghmU34h7mkbQJhDmdMB8GA1UdIwQY
MBaAFOLo9WvB9QECkWgbwtjAL5rL9xSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVqMWE4SDFBUUtSYUJ2QzJNQXZtc3YzRktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84MDQyYmYtNzFiYS00ZmJkLTllMTct
NDQ3ZWRjNGY5YWY2LzEvZTJUMVhUZzM1Q0NHWlRmaUh1YVJ0QW1FT1owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC84MDQyYmYtNzFiYS00ZmJkLTllMTctNDQ3ZWRjNGY5YWY2
LzEvNHVqMWE4SDFBUUtSYUJ2QzJNQXZtc3YzRktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALu7pMA0G
CSqGSIb3DQEBCwUAA4IBAQBhQy/4g0wXJo3OlfxavPcnVdEXD8XrH80UhPSHlz14
F5ElO/a+kwQuzomtd/C7Ewa5qvmixS3XECjs8Lnr3luGAkBPhKwkL4DgTwvbhbrj
TcCVyGnw+NUOvcm9XwKatQ7VfpMVLv8foCGNHWYK+WLkRrvs5cHgSPpo0U7e+GO5
Al0Ir+WRNO1Nrzu9JnJxDZf3BqvlI0UA71Io3/HxoYGLVQXl9wIBqFl05i2L8JWE
xDeSgLCX/Xwf+MPVt0Ilxe4bv/JisEFXCIKMLe+HRwiW/zf50Wv2np2TQG8Ko/WK
+/y4W6GI9NXOx0b0NwZBN5ogLMzdnDdt0AYIS70KJ7A/
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:27 2025 by rpki-client