Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/B2Ik8WZtOT3zyNi2jjFLvTOWRHk.roa
File: B2Ik8WZtOT3zyNi2jjFLvTOWRHk.roa (raw, json)
Hash identifier: f95dSiNjK8sDyfXQJmkoXYgcgAEn2Y/IKCItkKiZbTk=
Subject key identifier: 07:62:24:F1:66:6D:39:3D:F3:C8:D8:B6:8E:31:4B:BD:33:96:44:79
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 045B3B5E
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/B2Ik8WZtOT3zyNi2jjFLvTOWRHk.roa
Signing time: Thu 10 Mar 2022 22:27:41 +0000
ROA not before: Thu 10 Mar 2022 22:27:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12912
IP address blocks: 46.205.192.0/20 maxlen: 20
178.183.0.0/18 maxlen: 18
178.183.224.0/19 maxlen: 19
46.205.208.0/20 maxlen: 20
178.183.32.0/24 maxlen: 24
213.158.192.0/19 maxlen: 19
46.205.240.0/21 maxlen: 21
2001:1b80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73087838 (0x45b3b5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Mar 10 22:27:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=076224f1666d393df3c8d8b68e314bbd33964479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3f:2b:11:c3:0a:55:9e:49:95:18:ee:3b:43:
ce:30:5d:36:6a:bc:38:5c:2d:5a:fa:3c:fa:8a:01:
6c:80:43:fd:bb:05:89:c3:90:06:b3:86:1e:af:62:
13:40:17:f9:c7:04:29:0b:d2:83:3f:a0:76:b8:a8:
39:f6:0c:33:a7:61:d9:49:8c:b2:ac:46:b9:d3:de:
50:d6:ea:85:ac:3a:ad:ec:6f:35:1d:5e:2b:92:29:
3c:c1:6c:b2:65:fd:3e:66:e4:c2:34:85:87:72:a4:
1f:59:01:5e:39:ff:4f:6d:cc:8b:04:38:cf:43:07:
f2:a8:b1:64:53:5e:d4:0c:2c:29:4a:db:0b:85:a9:
e7:67:df:a5:4e:b5:75:45:3c:c3:30:76:ac:90:29:
e2:f2:f6:79:a5:be:68:e1:f3:d9:27:fe:83:6c:a3:
db:2d:59:97:21:cc:e8:1a:58:1d:85:24:75:63:07:
eb:9c:60:62:45:4c:5e:6c:de:9b:fc:c8:8e:aa:02:
65:f1:b0:90:2a:d6:d0:1d:69:fa:d8:b6:f8:09:03:
36:dc:02:ef:13:15:bb:56:98:a8:8a:13:b0:39:2e:
cd:de:18:9b:d3:8a:a4:94:1b:f6:46:68:89:e6:42:
6d:fc:62:7e:97:03:9e:ab:1b:63:e4:51:47:6d:85:
81:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:62:24:F1:66:6D:39:3D:F3:C8:D8:B6:8E:31:4B:BD:33:96:44:79
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/B2Ik8WZtOT3zyNi2jjFLvTOWRHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.205.192.0/19
46.205.240.0/21
178.183.0.0/18
178.183.224.0/19
213.158.192.0/19
IPv6:
2001:1b80::/29
Signature Algorithm: sha256WithRSAEncryption
00:11:fa:e2:d1:e3:e0:c8:e9:3b:a0:63:33:b0:e8:e0:b3:28:
87:8c:b3:3e:ad:ff:92:b4:16:1a:9b:d3:00:71:80:6f:a9:54:
fa:14:95:e8:84:b8:98:4f:41:63:c9:e3:9d:f0:46:48:35:4d:
18:d1:94:ee:90:04:13:b7:82:d8:33:2e:08:d7:d5:c2:46:16:
80:54:b6:65:db:c2:55:3b:70:fe:d6:23:a0:18:fc:18:a7:27:
8c:da:9e:cf:d1:7c:fc:60:c0:23:57:9e:4f:e8:ff:34:72:a9:
b8:8f:36:dd:00:ab:11:8f:28:4e:ad:5d:39:0c:57:76:b8:e6:
a8:3f:c5:ef:87:04:74:9b:f8:48:e2:e4:01:45:38:22:f3:5f:
f5:05:53:e1:74:7c:b3:6a:f2:72:35:7e:71:4b:34:a3:02:9a:
5c:31:b8:ff:0f:b6:78:a3:cf:b8:7c:75:b7:02:18:48:38:e8:
ed:c1:58:3e:9d:a7:a5:8d:34:cc:8c:d2:3a:65:0b:b9:fd:db:
8d:53:32:f2:9a:6e:5d:f9:6d:c9:6b:b4:3d:be:0f:40:08:ff:
6f:43:ec:6c:da:42:b6:0e:f1:31:8f:43:97:95:e1:fa:1f:c4:
ea:a5:79:56:59:22:60:50:ce:a6:c0:92:2c:9d:81:9e:67:ca:
24:98:a7:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIEBFs7XjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
OGQyNGFkZGNjM2Q1Yjc3YTA5OWE5MDcxMjIyNTJhNDdjOGY2MzEwMB4XDTIyMDMx
MDIyMjc0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDc2MjI0ZjE2NjZk
MzkzZGYzYzhkOGI2OGUzMTRiYmQzMzk2NDQ3OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANA/KxHDClWeSZUY7jtDzjBdNmq8OFwtWvo8+ooBbIBD/bsF
icOQBrOGHq9iE0AX+ccEKQvSgz+gdrioOfYMM6dh2UmMsqxGudPeUNbqhaw6rexv
NR1eK5IpPMFssmX9PmbkwjSFh3KkH1kBXjn/T23MiwQ4z0MH8qixZFNe1AwsKUrb
C4Wp52ffpU61dUU8wzB2rJAp4vL2eaW+aOHz2Sf+g2yj2y1ZlyHM6BpYHYUkdWMH
65xgYkVMXmzem/zIjqoCZfGwkCrW0B1p+ti2+AkDNtwC7xMVu1aYqIoTsDkuzd4Y
m9OKpJQb9kZoieZCbfxifpcDnqsbY+RRR22FgZUCAwEAAaOCAjAwggIsMB0GA1Ud
DgQWBBQHYiTxZm05PfPI2LaOMUu9M5ZEeTAfBgNVHSMEGDAWgBRo0krdzD1bd6CZ
qQcSIlKkfI9jEDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FOSkszY3c5VzNlZ21ha0hFaUpTcEh5UFl4QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjIvNTFhNjU1LTI3MzUtNDllZi04MGRmLWIzMTZkYjU5MzhmZi8x
L0IySWs4V1p0T1QzenlOaTJqakZMdlRPV1JIay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIv
NTFhNjU1LTI3MzUtNDllZi04MGRmLWIzMTZkYjU5MzhmZi8xL2FOSkszY3c5VzNl
Z21ha0hFaUpTcEh5UFl4QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEBS7NwAMEAy7N8AMEBrK3AAMEBbK3
4AMEBdWewDANBAIAAjAHAwUDIAEbgDANBgkqhkiG9w0BAQsFAAOCAQEAABH64tHj
4MjpO6BjM7Do4LMoh4yzPq3/krQWGpvTAHGAb6lU+hSV6IS4mE9BY8njnfBGSDVN
GNGU7pAEE7eC2DMuCNfVwkYWgFS2ZdvCVTtw/tYjoBj8GKcnjNqez9F8/GDAI1ee
T+j/NHKpuI823QCrEY8oTq1dOQxXdrjmqD/F74cEdJv4SOLkAUU4IvNf9QVT4XR8
s2rycjV+cUs0owKaXDG4/w+2eKPPuHx1twIYSDjo7cFYPp2npY00zIzSOmULuf3b
jVMy8ppuXfltyWu0Pb4PQAj/b0PsbNpCtg7xMY9Dl5Xh+h/E6qV5VlkiYFDOpsCS
LJ2BnmfKJJinlA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 20:01:22 2025 by rpki-client