Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/SvinBfan7qA9rFGTataRtjp8KSg.roa
File: SvinBfan7qA9rFGTataRtjp8KSg.roa (raw, json)
Hash identifier: rMRhAFDRz1EwxMCXpfPMTqAU7n7JG/xDmngUCmNJffo=
Subject key identifier: 4A:F8:A7:05:F6:A7:EE:A0:3D:AC:51:93:6A:D6:91:B6:3A:7C:29:28
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 0476A0FF
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/SvinBfan7qA9rFGTataRtjp8KSg.roa
Signing time: Mon 21 Mar 2022 23:24:20 +0000
ROA not before: Mon 21 Mar 2022 23:24:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12912
IP address blocks: 46.204.0.0/15 maxlen: 15
46.205.192.0/20 maxlen: 20
178.183.0.0/18 maxlen: 18
178.183.224.0/19 maxlen: 19
46.205.208.0/20 maxlen: 20
188.146.0.0/15 maxlen: 15
178.183.32.0/24 maxlen: 24
62.152.128.0/19 maxlen: 19
178.180.0.0/14 maxlen: 14
213.158.192.0/19 maxlen: 19
46.205.240.0/21 maxlen: 21
37.30.0.0/15 maxlen: 15
83.220.96.0/19 maxlen: 19
83.220.101.0/24 maxlen: 24
2001:1b80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74883327 (0x476a0ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Mar 21 23:24:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4af8a705f6a7eea03dac51936ad691b63a7c2928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:c5:73:0a:99:b1:7e:ab:fa:67:e6:eb:28:
1e:0e:44:c8:c5:3c:3e:34:00:f9:99:d2:ff:be:89:
a7:52:8b:f6:29:0e:fe:c3:73:79:2f:6c:41:22:b7:
3b:c6:82:36:a4:36:02:99:e6:c9:50:eb:dd:ca:6e:
57:eb:dd:93:ab:8f:3c:32:6e:9a:eb:49:c8:ee:30:
2c:d6:cd:80:8b:19:aa:ca:d6:ae:a3:a8:df:13:9a:
9d:a2:a1:e2:ae:5c:bd:f0:24:13:0c:d2:d7:9e:35:
05:de:e3:05:6f:b8:16:ed:53:fd:86:54:71:3d:21:
83:5d:30:94:ea:98:08:b4:ee:78:e5:f3:c1:74:64:
7c:61:57:42:86:05:52:cb:78:6c:88:ef:7c:98:4c:
e1:0d:93:c3:b6:6d:43:d0:6c:c7:54:38:22:34:00:
35:dc:5e:17:59:41:d8:1b:ca:38:87:b2:1c:f7:97:
47:5d:b1:64:06:c8:a7:4f:00:31:9d:f3:9e:3e:4e:
9d:ca:e4:76:2f:8a:2e:65:b4:1f:af:10:58:43:64:
6a:00:6a:2b:b2:0e:7b:b3:04:94:64:5e:5c:88:d7:
50:bd:4e:c6:18:6a:a4:f3:d6:0c:eb:70:3c:54:52:
d5:79:76:ab:43:52:9b:c1:8d:3a:28:36:37:bf:d0:
3d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F8:A7:05:F6:A7:EE:A0:3D:AC:51:93:6A:D6:91:B6:3A:7C:29:28
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/SvinBfan7qA9rFGTataRtjp8KSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.30.0.0/15
46.204.0.0/15
62.152.128.0/19
83.220.96.0/19
178.180.0.0/14
188.146.0.0/15
213.158.192.0/19
IPv6:
2001:1b80::/29
Signature Algorithm: sha256WithRSAEncryption
88:c6:ca:c0:c4:28:ae:fc:d0:da:90:ef:85:d3:25:e2:9d:e4:
93:09:ee:c7:73:eb:31:07:90:9f:f5:55:c3:43:c4:89:d4:ff:
c9:bd:eb:b4:46:b9:e8:c1:31:91:36:e2:92:00:99:5d:91:b6:
5e:cd:4d:c8:97:e6:24:86:5d:9c:77:37:5e:e6:b9:00:5c:c2:
0f:29:29:51:0d:91:f9:30:14:7e:4f:ff:9d:bc:c9:e9:a7:eb:
f7:cf:eb:fb:0a:4c:bf:90:c0:b6:b6:a6:45:7a:62:a3:79:4e:
4b:b5:d8:fe:0e:d2:b5:39:a4:97:08:04:f6:cc:b9:f5:c3:65:
0a:8f:3b:4b:f3:f0:37:26:55:b3:cc:54:e4:1a:2f:4e:c5:cc:
92:14:fb:b7:99:a4:49:28:73:be:73:23:be:60:5b:bd:a3:c8:
16:fd:5b:70:07:4f:ba:2d:7b:76:ab:21:82:ec:65:8f:97:f9:
83:1b:a2:04:c9:93:64:cf:49:37:43:85:41:7d:97:89:fe:ca:
24:f4:87:8f:44:8a:86:81:89:0f:06:9b:fc:75:15:87:9b:61:
00:6c:2b:85:2b:01:03:f8:60:10:27:6e:b1:6c:22:05:b4:86:
a8:bc:5a:6d:90:a6:e0:7d:84:ca:fd:36:f7:71:60:bd:12:10:
7b:dd:c7:2d
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIEBHag/zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
OGQyNGFkZGNjM2Q1Yjc3YTA5OWE5MDcxMjIyNTJhNDdjOGY2MzEwMB4XDTIyMDMy
MTIzMjQyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGFmOGE3MDVmNmE3
ZWVhMDNkYWM1MTkzNmFkNjkxYjYzYTdjMjkyODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMFyxXMKmbF+q/pn5usoHg5EyMU8PjQA+ZnS/76Jp1KL9ikO
/sNzeS9sQSK3O8aCNqQ2ApnmyVDr3cpuV+vdk6uPPDJumutJyO4wLNbNgIsZqsrW
rqOo3xOanaKh4q5cvfAkEwzS1541Bd7jBW+4Fu1T/YZUcT0hg10wlOqYCLTueOXz
wXRkfGFXQoYFUst4bIjvfJhM4Q2Tw7ZtQ9Bsx1Q4IjQANdxeF1lB2BvKOIeyHPeX
R12xZAbIp08AMZ3znj5Oncrkdi+KLmW0H68QWENkagBqK7IOe7MElGReXIjXUL1O
xhhqpPPWDOtwPFRS1Xl2q0NSm8GNOig2N7/QPesCAwEAAaOCAjgwggI0MB0GA1Ud
DgQWBBRK+KcF9qfuoD2sUZNq1pG2OnwpKDAfBgNVHSMEGDAWgBRo0krdzD1bd6CZ
qQcSIlKkfI9jEDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FOSkszY3c5VzNlZ21ha0hFaUpTcEh5UFl4QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjIvNTFhNjU1LTI3MzUtNDllZi04MGRmLWIzMTZkYjU5MzhmZi8x
L1N2aW5CZmFuN3FBOXJGR1RhdGFSdGpwOEtTZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIv
NTFhNjU1LTI3MzUtNDllZi04MGRmLWIzMTZkYjU5MzhmZi8xL2FOSkszY3c5VzNl
Z21ha0hFaUpTcEh5UFl4QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBO
BggrBgEFBQcBBwEB/wQ/MD0wLAQCAAEwJgMDASUeAwMBLswDBAU+mIADBAVT3GAD
AwKytAMDAbySAwQF1Z7AMA0EAgACMAcDBQMgARuAMA0GCSqGSIb3DQEBCwUAA4IB
AQCIxsrAxCiu/NDakO+F0yXineSTCe7Hc+sxB5Cf9VXDQ8SJ1P/Jveu0RrnowTGR
NuKSAJldkbZezU3Il+Ykhl2cdzde5rkAXMIPKSlRDZH5MBR+T/+dvMnpp+v3z+v7
Cky/kMC2tqZFemKjeU5Ltdj+DtK1OaSXCAT2zLn1w2UKjztL8/A3JlWzzFTkGi9O
xcySFPu3maRJKHO+cyO+YFu9o8gW/VtwB0+6LXt2qyGC7GWPl/mDG6IEyZNkz0k3
Q4VBfZeJ/sok9IePRIqGgYkPBpv8dRWHm2EAbCuFKwED+GAQJ26xbCIFtIaovFpt
kKbgfYTK/Tb3cWC9EhB73cct
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org