Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/BUYIcvSl0xtpGsqKVgNLLgVWDVI.roa
File: BUYIcvSl0xtpGsqKVgNLLgVWDVI.roa (raw, json)
Hash identifier: NsJuroPOGAinMYpFssmhFjpWNmfNJO7AoWVx3PHF5tM=
Subject key identifier: 05:46:08:72:F4:A5:D3:1B:69:1A:CA:8A:56:03:4B:2E:05:56:0D:52
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018BF0370DA05CD0429D7E5BC6572C07F332
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/BUYIcvSl0xtpGsqKVgNLLgVWDVI.roa
Signing time: Tue 21 Nov 2023 04:50:21 +0000
ROA not before: Tue 21 Nov 2023 04:50:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.110.0/24 maxlen: 24
46.20.108.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:37:0d:a0:5c:d0:42:9d:7e:5b:c6:57:2c:07:f3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Nov 21 04:50:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05460872f4a5d31b691aca8a56034b2e05560d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d0:f0:ca:d2:29:69:de:0d:db:05:62:36:2b:
b8:ef:ac:9c:34:75:2f:b0:56:0c:98:08:d7:9f:9c:
b3:43:ed:98:79:65:12:08:b4:8c:a7:a3:7b:3c:0f:
18:bc:ac:bc:df:26:dd:6f:0e:a9:c7:12:95:de:52:
7b:5d:46:91:88:02:3e:36:fa:f5:7c:42:50:da:0c:
5e:47:11:88:1d:b5:58:ef:90:1b:5a:69:11:0a:88:
7c:d1:e0:43:25:ae:ce:63:cc:25:b9:b1:37:b4:e7:
c1:4c:7f:1c:99:21:2c:6a:4d:8d:75:d7:9b:5a:76:
40:d9:84:9a:28:bb:47:42:81:49:b7:95:27:31:9e:
48:63:36:ce:6c:ab:05:61:04:b1:c4:ec:6e:32:ac:
98:d9:5a:6c:ca:e0:bb:73:93:85:ec:db:27:90:11:
71:29:d0:18:ef:f1:2f:9e:6b:02:bd:7b:21:70:27:
42:dd:81:3e:99:50:75:a9:c1:1f:f6:cc:92:bc:59:
81:de:e2:92:7b:bf:ff:07:06:b1:e5:7e:df:b9:14:
00:22:95:a1:50:9c:a7:53:02:50:21:95:b9:61:f7:
49:ae:f7:a2:74:0e:be:e1:57:88:67:d6:fc:92:d4:
f4:0e:de:79:4f:38:1f:c6:05:b5:c2:70:5e:f7:8c:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:46:08:72:F4:A5:D3:1B:69:1A:CA:8A:56:03:4B:2E:05:56:0D:52
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/BUYIcvSl0xtpGsqKVgNLLgVWDVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.108.0/24
46.20.110.0/24
185.160.194.0/23
185.169.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c9:a8:b0:d5:4e:c2:47:ed:28:a3:dd:d3:e3:1d:77:a4:c1:
3c:33:3d:46:fb:67:9a:d5:91:09:5f:f6:79:0c:5b:8c:91:22:
1e:1b:02:3d:c2:d6:1d:5c:e4:b5:d2:02:cf:a9:45:fe:1d:a1:
1c:f5:e9:3e:65:48:2a:bf:19:1f:95:0a:98:e2:23:52:f4:5e:
45:18:2b:9b:63:c9:b9:ce:6d:06:2a:77:93:cc:4b:a8:8c:74:
7d:a1:4a:aa:46:ba:f4:67:d3:f6:63:2e:bd:5f:50:7f:d0:f5:
76:14:0f:4d:1a:10:c5:a2:ee:c5:df:23:2d:1b:0e:8b:4d:55:
24:ab:cc:90:ac:a2:0d:65:2f:90:bd:92:30:97:45:4c:76:d9:
f4:83:41:46:bd:ca:78:d6:d7:c1:1b:c3:67:0b:65:1c:8b:81:
8d:b8:7c:7c:df:32:28:93:c7:bb:9f:8c:57:5b:fe:d0:b9:2e:
57:74:20:e1:03:bd:e0:77:21:ce:47:65:07:1d:73:e9:81:56:
74:48:a2:88:1e:26:9a:52:48:ba:6c:1a:13:89:78:b5:e0:12:
4d:c4:a1:17:9f:6c:11:8b:44:80:40:44:f5:af:b9:52:50:d1:
67:a5:a7:0e:21:f6:41:ea:b0:4c:ab:d4:ad:33:f6:e7:7f:54:
0f:b9:77:10
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYvwNw2gXNBCnX5bxlcsB/MyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjMxMTIxMDQ1MDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTQ2MDg3MmY0YTVkMzFiNjkxYWNhOGE1NjAzNGIyZTA1NTYwZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdDwytIpad4N2wViNiu476ycNHUv
sFYMmAjXn5yzQ+2YeWUSCLSMp6N7PA8YvKy83ybdbw6pxxKV3lJ7XUaRiAI+Nvr1
fEJQ2gxeRxGIHbVY75AbWmkRCoh80eBDJa7OY8wlubE3tOfBTH8cmSEsak2Nddeb
WnZA2YSaKLtHQoFJt5UnMZ5IYzbObKsFYQSxxOxuMqyY2VpsyuC7c5OF7NsnkBFx
KdAY7/EvnmsCvXshcCdC3YE+mVB1qcEf9sySvFmB3uKSe7//Bwax5X7fuRQAIpWh
UJynUwJQIZW5YfdJrveidA6+4VeIZ9b8ktT0Dt55TzgfxgW1wnBe94yAMQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAVGCHL0pdMbaRrKilYDSy4FVg1SMB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvQlVZSWN2U2wweHRwR3NxS1ZnTkxMZ1ZXRFZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALhRsAwQA
LhRuAwQBuaDCAwQAuandMA0GCSqGSIb3DQEBCwUAA4IBAQAvyaiw1U7CR+0oo93T
4x13pME8Mz1G+2ea1ZEJX/Z5DFuMkSIeGwI9wtYdXOS10gLPqUX+HaEc9ek+ZUgq
vxkflQqY4iNS9F5FGCubY8m5zm0GKneTzEuojHR9oUqqRrr0Z9P2Yy69X1B/0PV2
FA9NGhDFou7F3yMtGw6LTVUkq8yQrKINZS+QvZIwl0VMdtn0g0FGvcp41tfBG8Nn
C2Uci4GNuHx83zIok8e7n4xXW/7QuS5XdCDhA73gdyHOR2UHHXPpgVZ0SKKIHiaa
Uki6bBoTiXi14BJNxKEXn2wRi0SAQET1r7lSUNFnpacOIfZB6rBMq9StM/bnf1QP
uXcQ
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:38 2025 by rpki-client