Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/7_uQ_2v4kb1Ve5cE6q3QlL12GKs.roa
File: 7_uQ_2v4kb1Ve5cE6q3QlL12GKs.roa (raw, json)
Hash identifier: xpX7zNVQLJd88HHw/FHTHBWrZABLUaPOs3aHPOmVl1Q=
Subject key identifier: EF:FB:90:FF:6B:F8:91:BD:55:7B:97:04:EA:AD:D0:94:BD:76:18:AB
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 046DFF6A
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/7_uQ_2v4kb1Ve5cE6q3QlL12GKs.roa
Signing time: Thu 17 Mar 2022 22:44:32 +0000
ROA not before: Thu 17 Mar 2022 22:44:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12912
IP address blocks: 46.204.0.0/15 maxlen: 15
46.205.192.0/20 maxlen: 20
178.183.0.0/18 maxlen: 18
178.183.224.0/19 maxlen: 19
46.205.208.0/20 maxlen: 20
178.183.32.0/24 maxlen: 24
62.152.128.0/19 maxlen: 19
213.158.192.0/19 maxlen: 19
46.205.240.0/21 maxlen: 21
83.220.96.0/19 maxlen: 19
37.30.0.0/15 maxlen: 15
83.220.101.0/24 maxlen: 24
2001:1b80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74317674 (0x46dff6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Mar 17 22:44:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=effb90ff6bf891bd557b9704eaadd094bd7618ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:5e:ca:74:57:f8:8a:dd:eb:c5:c8:3d:8b:
cf:dd:dd:fe:1f:63:7d:7e:6d:9b:43:05:6a:a7:d3:
37:7f:c5:06:9b:9f:db:4b:79:6d:46:b2:1b:d1:91:
43:a1:7c:c3:96:a4:67:a2:78:d5:04:68:08:bc:6f:
99:70:53:c3:95:40:d3:8d:2b:b5:fa:d1:65:95:8e:
55:53:63:02:b1:3d:2b:fd:fd:9e:b6:eb:db:15:e9:
9c:bd:c0:76:5b:83:72:b0:ee:ec:c3:7e:70:49:26:
9d:b5:02:82:a2:09:3e:11:68:64:ca:b0:8a:34:3b:
f3:e2:78:fe:0b:b1:31:a4:88:bd:83:17:22:c8:71:
99:7a:1c:5c:98:4a:3e:07:3a:56:d4:d1:8a:6c:6b:
6d:5b:03:27:73:bc:58:c3:38:11:05:95:e1:13:75:
d4:d6:0a:10:3d:ea:41:e9:bc:03:3f:3e:a6:c8:fd:
69:b7:eb:05:65:f3:46:de:e3:c0:a8:a1:70:40:f8:
11:e2:93:ea:85:2a:a8:5d:0c:67:aa:be:14:a5:82:
c4:e1:01:e6:9d:c6:fd:62:2e:25:e0:24:b1:cf:10:
da:00:02:56:32:6f:ad:23:85:eb:e2:6a:f7:eb:4f:
de:20:6c:e8:24:43:50:bc:86:08:b4:3c:ad:29:63:
c7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FB:90:FF:6B:F8:91:BD:55:7B:97:04:EA:AD:D0:94:BD:76:18:AB
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/7_uQ_2v4kb1Ve5cE6q3QlL12GKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.30.0.0/15
46.204.0.0/15
62.152.128.0/19
83.220.96.0/19
178.183.0.0/18
178.183.224.0/19
213.158.192.0/19
IPv6:
2001:1b80::/29
Signature Algorithm: sha256WithRSAEncryption
5e:fc:e7:55:51:87:63:b0:bf:89:8c:61:83:df:64:df:11:43:
b9:e7:09:e8:b5:6c:c4:bc:e7:ae:9b:90:f4:a2:a3:12:60:75:
8f:fc:6f:0a:c9:a4:9e:9c:16:00:81:b4:f6:db:2a:69:79:5c:
56:d7:f5:b1:7c:86:22:e9:af:45:f7:45:41:cb:50:9e:d2:5b:
c3:98:2a:16:d0:12:6a:c7:f5:2b:b9:45:ea:f9:fc:b3:b4:01:
03:88:d9:ad:a6:23:be:d3:0f:b3:b5:40:dd:d9:41:d7:85:ac:
5a:b5:19:d0:39:84:c7:0c:20:2a:81:2d:65:5f:86:2f:d0:ae:
9f:68:28:83:9e:89:07:4e:48:a2:69:77:90:ef:8c:ff:8f:1c:
56:1a:01:6a:a1:b4:f5:1b:2c:42:06:a3:9f:73:12:24:8a:ea:
bc:e9:f4:db:00:e8:b4:e9:01:c6:dd:63:c7:bb:99:07:df:70:
bc:d4:53:11:6f:df:62:d5:37:6c:6a:c6:59:0e:b0:76:49:6c:
dd:4e:36:01:51:bd:9e:01:a8:b3:94:91:3a:4c:32:90:86:d2:
c8:e3:35:6f:bb:ea:91:78:c1:54:3a:13:ed:75:b1:52:f6:02:
b0:5c:91:4a:c8:37:10:0f:75:9d:11:84:83:c2:8c:b4:b5:ff:
cc:e6:e8:3f
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIEBG3/ajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
OGQyNGFkZGNjM2Q1Yjc3YTA5OWE5MDcxMjIyNTJhNDdjOGY2MzEwMB4XDTIyMDMx
NzIyNDQzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWZmYjkwZmY2YmY4
OTFiZDU1N2I5NzA0ZWFhZGQwOTRiZDc2MThhYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMGqXsp0V/iK3evFyD2Lz93d/h9jfX5tm0MFaqfTN3/FBpuf
20t5bUayG9GRQ6F8w5akZ6J41QRoCLxvmXBTw5VA040rtfrRZZWOVVNjArE9K/39
nrbr2xXpnL3AdluDcrDu7MN+cEkmnbUCgqIJPhFoZMqwijQ78+J4/guxMaSIvYMX
IshxmXocXJhKPgc6VtTRimxrbVsDJ3O8WMM4EQWV4RN11NYKED3qQem8Az8+psj9
abfrBWXzRt7jwKihcED4EeKT6oUqqF0MZ6q+FKWCxOEB5p3G/WIuJeAksc8Q2gAC
VjJvrSOF6+Jq9+tP3iBs6CRDULyGCLQ8rSljx/0CAwEAAaOCAjowggI2MB0GA1Ud
DgQWBBTv+5D/a/iRvVV7lwTqrdCUvXYYqzAfBgNVHSMEGDAWgBRo0krdzD1bd6CZ
qQcSIlKkfI9jEDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FOSkszY3c5VzNlZ21ha0hFaUpTcEh5UFl4QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjIvNTFhNjU1LTI3MzUtNDllZi04MGRmLWIzMTZkYjU5MzhmZi8x
LzdfdVFfMnY0a2IxVmU1Y0U2cTNRbEwxMkdLcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIv
NTFhNjU1LTI3MzUtNDllZi04MGRmLWIzMTZkYjU5MzhmZi8xL2FOSkszY3c5VzNl
Z21ha0hFaUpTcEh5UFl4QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBQ
BggrBgEFBQcBBwEB/wRBMD8wLgQCAAEwKAMDASUeAwMBLswDBAU+mIADBAVT3GAD
BAaytwADBAWyt+ADBAXVnsAwDQQCAAIwBwMFAyABG4AwDQYJKoZIhvcNAQELBQAD
ggEBAF7851VRh2Owv4mMYYPfZN8RQ7nnCei1bMS8566bkPSioxJgdY/8bwrJpJ6c
FgCBtPbbKml5XFbX9bF8hiLpr0X3RUHLUJ7SW8OYKhbQEmrH9Su5Rer5/LO0AQOI
2a2mI77TD7O1QN3ZQdeFrFq1GdA5hMcMICqBLWVfhi/Qrp9oKIOeiQdOSKJpd5Dv
jP+PHFYaAWqhtPUbLEIGo59zEiSK6rzp9NsA6LTpAcbdY8e7mQffcLzUUxFv32LV
N2xqxlkOsHZJbN1ONgFRvZ4BqLOUkTpMMpCG0sjjNW+76pF4wVQ6E+11sVL2ArBc
kUrINxAPdZ0RhIPCjLS1/8zm6D8=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:36 2025 by rpki-client