Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/Er2RDVYevDcFxXdFHaZUB4ljB84.roa
File: Er2RDVYevDcFxXdFHaZUB4ljB84.roa (raw, json)
Hash identifier: gBWTPhcqAyUp0KrKbgTpikXdqdHxYsHWoVZrwQN0R4s=
Subject key identifier: 12:BD:91:0D:56:1E:BC:37:05:C5:77:45:1D:A6:54:07:89:63:07:CE
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 08C7E073
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/Er2RDVYevDcFxXdFHaZUB4ljB84.roa
Signing time: Sat 01 Jan 2022 12:56:08 +0000
ROA not before: Sat 01 Jan 2022 12:56:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207821
IP address blocks: 46.252.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147316851 (0x8c7e073)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Jan 1 12:56:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12bd910d561ebc3705c577451da65407896307ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:32:ce:ac:c3:3a:fc:51:44:d0:d4:60:21:
ef:65:57:98:a4:23:29:f6:42:30:a4:49:81:14:99:
2d:84:9b:8b:c5:19:60:93:a3:02:80:c3:68:66:91:
72:6b:ee:a8:db:e1:8d:b8:74:a9:36:fb:95:e9:79:
fb:5b:10:a8:f4:30:01:ba:ab:bf:cb:bf:d5:f8:2e:
ec:63:23:ad:a6:8b:51:2d:9f:7d:80:8f:da:05:ae:
69:f8:ef:25:b8:12:03:47:f5:40:5e:14:68:cf:97:
72:12:54:75:06:fc:83:11:7b:8a:da:f5:d6:7a:77:
3f:e7:8c:41:ec:5a:72:6f:9c:6d:4c:16:22:3f:bf:
b6:0f:3b:23:1d:aa:e1:dc:b3:74:c2:fd:b1:dc:77:
97:17:51:08:a0:4c:6e:d1:62:f6:3c:2c:17:ea:9e:
47:ed:9a:16:8f:b8:4b:a2:86:a3:dd:41:04:2e:84:
4e:ac:1a:4c:90:b8:ef:35:c2:b6:2a:07:ce:54:4d:
56:96:b3:a8:39:5b:d9:3a:b2:60:c1:e3:65:1a:60:
1b:cf:26:9d:c2:2d:82:91:4d:c5:bb:f1:4c:0b:25:
d8:38:19:f6:87:cb:fe:78:f9:c9:5f:a0:65:75:2e:
64:56:1a:d2:cb:6a:19:34:60:47:f0:70:1b:65:12:
59:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BD:91:0D:56:1E:BC:37:05:C5:77:45:1D:A6:54:07:89:63:07:CE
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/Er2RDVYevDcFxXdFHaZUB4ljB84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.2.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:ab:92:45:e0:1a:71:7b:73:04:b8:92:a3:4e:03:36:1a:3a:
71:5b:dc:8f:5b:12:a0:0b:66:c5:54:eb:72:bf:8b:c5:fc:12:
b6:ce:52:5c:a5:69:26:36:da:f7:64:55:4e:c4:b7:e4:eb:d8:
1f:a4:f8:2d:e6:05:36:96:29:42:b3:27:1f:a7:6b:a9:cb:ae:
8b:04:33:05:6e:30:fa:a4:00:bc:ac:53:16:d6:77:60:10:66:
d6:3a:47:84:3f:fa:cd:1d:f4:f1:60:8e:64:4f:91:9e:31:f3:
f1:5c:e6:35:b7:80:a6:6f:be:5d:df:58:70:78:b3:92:1a:33:
d6:b2:ca:8f:fc:7a:d1:c0:8b:84:18:66:44:a5:d1:58:8f:84:
af:39:ac:74:5e:51:09:78:63:a7:92:e4:ec:f3:a6:fa:bf:cc:
aa:66:07:b3:96:51:e0:39:34:8b:28:27:a9:db:27:b6:66:f3:
e4:14:90:b2:34:2f:fa:5a:5d:b1:4c:a6:e4:b8:43:26:49:dc:
b7:bf:f7:b0:7b:bd:db:81:ee:e0:57:54:1e:9b:77:1e:bd:57:
df:63:22:60:aa:d7:bc:64:e9:0b:d1:3d:65:53:1c:88:0b:b2:
fc:11:42:e9:b2:b7:27:90:e2:6a:17:40:9a:f4:57:17:b9:f4:
10:b3:18:ae
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECMfgczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ODI4NGYxOGNkNDQ2MDRiZGQ2ZDA4ZjRkODc4ZGM2MTQ1NmM0MGZkMB4XDTIyMDEw
MTEyNTYwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTJiZDkxMGQ1NjFl
YmMzNzA1YzU3NzQ1MWRhNjU0MDc4OTYzMDdjZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL57Ms6swzr8UUTQ1GAh72VXmKQjKfZCMKRJgRSZLYSbi8UZ
YJOjAoDDaGaRcmvuqNvhjbh0qTb7lel5+1sQqPQwAbqrv8u/1fgu7GMjraaLUS2f
fYCP2gWuafjvJbgSA0f1QF4UaM+XchJUdQb8gxF7itr11np3P+eMQexacm+cbUwW
Ij+/tg87Ix2q4dyzdML9sdx3lxdRCKBMbtFi9jwsF+qeR+2aFo+4S6KGo91BBC6E
TqwaTJC47zXCtioHzlRNVpazqDlb2TqyYMHjZRpgG88mncItgpFNxbvxTAsl2DgZ
9ofL/nj5yV+gZXUuZFYa0stqGTRgR/BwG2USWaMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQSvZENVh68NwXFd0UdplQHiWMHzjAfBgNVHSMEGDAWgBTYKE8YzURgS91t
CPTYeNxhRWxA/TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJDaFBHTTFFWUV2ZGJRajAySGpjWVVWc1FQMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWIvMjY1MmNkLTdlY2YtNDllOC1hNGY4LWM3ODY5MTI4NTgyYy8x
L0VyMlJEVllldkRjRnhYZEZIYVpVQjRsakI4NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIv
MjY1MmNkLTdlY2YtNDllOC1hNGY4LWM3ODY5MTI4NTgyYy8xLzJDaFBHTTFFWUV2
ZGJRajAySGpjWVVWc1FQMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC78AjANBgkqhkiG9w0BAQsFAAOC
AQEAvauSReAacXtzBLiSo04DNho6cVvcj1sSoAtmxVTrcr+LxfwSts5SXKVpJjba
92RVTsS35OvYH6T4LeYFNpYpQrMnH6drqcuuiwQzBW4w+qQAvKxTFtZ3YBBm1jpH
hD/6zR308WCOZE+RnjHz8VzmNbeApm++Xd9YcHizkhoz1rLKj/x60cCLhBhmRKXR
WI+ErzmsdF5RCXhjp5Lk7POm+r/MqmYHs5ZR4Dk0iygnqdsntmbz5BSQsjQv+lpd
sUym5LhDJknct7/3sHu924Hu4FdUHpt3Hr1X32MiYKrXvGTpC9E9ZVMciAuy/BFC
6bK3J5DiahdAmvRXF7n0ELMYrg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:39 2023 by rpki-client on console-ams.rpki-client.org