Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/X8hKI_i_8ydFimQz3aS8Z7Cgdps.roa
File: X8hKI_i_8ydFimQz3aS8Z7Cgdps.roa (raw, json)
Hash identifier: w4P/yyQ5qgwSGy9+iFSaS7RN9EJEzf1RniKm4khVTr4=
Subject key identifier: 5F:C8:4A:23:F8:BF:F3:27:45:8A:64:33:DD:A4:BC:67:B0:A0:76:9B
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 03E002DB
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/X8hKI_i_8ydFimQz3aS8Z7Cgdps.roa
Signing time: Sat 01 Jan 2022 11:58:08 +0000
ROA not before: Sat 01 Jan 2022 11:58:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41911
IP address blocks: 176.110.32.0/19 maxlen: 20
46.250.96.0/19 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65012443 (0x3e002db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Jan 1 11:58:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fc84a23f8bff327458a6433dda4bc67b0a0769b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:c5:e2:92:21:75:a8:5b:d0:a5:f4:21:05:
fd:77:96:dd:b6:07:fb:c2:4e:97:a1:dc:79:34:91:
93:bd:6d:22:9f:8a:a5:18:f0:55:91:83:d8:7d:ed:
7b:b3:f2:d5:8f:8f:a8:ed:86:d7:7e:f9:fd:5a:a4:
c7:51:51:2e:c4:f8:43:25:23:4b:5d:f0:29:91:d9:
8b:fa:92:4a:6b:f3:c6:e6:b4:8a:fe:42:a6:fd:dd:
50:9e:ff:d4:02:16:66:e7:af:4a:cb:43:74:19:1c:
ed:16:92:1c:b4:b3:50:d8:e0:50:74:8f:dd:9d:7b:
ce:45:ea:17:2d:53:41:7f:63:a5:e8:52:fe:53:5c:
8a:3a:5b:0d:4a:f3:20:82:16:69:86:81:14:8b:e3:
95:b4:61:20:84:6c:e2:b6:14:02:77:61:eb:1e:48:
e1:46:69:04:9b:8b:04:5b:80:45:d8:3e:13:c7:58:
df:1a:31:de:49:26:a6:9b:73:09:ab:71:08:93:65:
db:1e:f9:1a:50:b6:e2:00:f5:35:b6:69:eb:5e:e2:
50:ba:1e:df:92:d4:12:e2:16:9c:54:b4:ac:73:84:
46:43:71:3a:8b:ce:b3:bc:bc:d6:94:ee:98:cf:3b:
d8:05:e6:23:19:a0:d1:a7:c6:c9:b5:84:60:93:d5:
b2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C8:4A:23:F8:BF:F3:27:45:8A:64:33:DD:A4:BC:67:B0:A0:76:9B
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/X8hKI_i_8ydFimQz3aS8Z7Cgdps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.250.96.0/19
176.110.32.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:bd:92:f7:a1:3e:4f:14:9e:03:e1:4f:17:46:5e:fc:1a:6b:
08:d4:0d:12:90:f5:17:ed:2d:9d:01:24:57:98:d7:51:4f:03:
b8:b2:8d:8d:06:65:81:c4:87:03:f9:ea:b4:19:2b:d4:22:a4:
76:8b:65:6f:1b:af:9e:39:30:d0:a0:87:90:ef:dc:b3:bc:a3:
d6:d2:b2:a0:56:31:bf:97:44:19:c5:e0:c5:f3:0b:41:ab:3f:
fa:08:90:b4:70:de:9e:e3:ad:ee:c2:02:9f:08:91:ec:6b:a3:
14:ed:d4:de:48:3c:9c:b1:d6:fc:1a:64:d8:3a:43:6d:af:b2:
e9:9d:3c:95:4f:6a:6a:d8:4d:23:64:ac:a1:ec:3b:b0:c7:bd:
ca:15:6c:52:e0:aa:d8:9d:9a:90:1f:17:a7:c1:76:f6:79:a1:
32:67:e2:11:87:cc:2b:ca:df:46:20:cd:dd:90:88:3f:ab:eb:
85:0f:c7:fc:30:ad:8b:9c:fb:6c:aa:5e:a9:1a:93:8d:b7:7b:
c6:5a:b9:9c:ad:43:c7:e3:7f:0e:f7:9d:10:9b:a5:5b:81:45:
88:3e:01:e3:0f:3d:af:cd:d5:c1:00:73:44:a4:cf:b6:1c:7a:
40:30:8c:3e:24:07:5d:a7:51:4f:b2:07:bb:35:63:40:26:65:
36:f2:10:c8
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEA+AC2zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ODQxMjgxNDZiN2JlYzhiZDExODViYmUwYzNiOTM0MGFhZjViNzE0MB4XDTIyMDEw
MTExNTgwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWZjODRhMjNmOGJm
ZjMyNzQ1OGE2NDMzZGRhNGJjNjdiMGEwNzY5YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMIDxeKSIXWoW9Cl9CEF/XeW3bYH+8JOl6HceTSRk71tIp+K
pRjwVZGD2H3te7Py1Y+PqO2G1375/Vqkx1FRLsT4QyUjS13wKZHZi/qSSmvzxua0
iv5Cpv3dUJ7/1AIWZuevSstDdBkc7RaSHLSzUNjgUHSP3Z17zkXqFy1TQX9jpehS
/lNcijpbDUrzIIIWaYaBFIvjlbRhIIRs4rYUAndh6x5I4UZpBJuLBFuARdg+E8dY
3xox3kkmpptzCatxCJNl2x75GlC24gD1NbZp617iULoe35LUEuIWnFS0rHOERkNx
OovOs7y81pTumM872AXmIxmg0afGybWEYJPVsp8CAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBRfyEoj+L/zJ0WKZDPdpLxnsKB2mzAfBgNVHSMEGDAWgBT4QSgUa3vsi9EY
W74MO5NAqvW3FDAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtRUVvRkd0NzdJdlJHRnUtRER1VFFLcjF0eFEuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzYyL2ZiMjQxMS00ODViLTQxNDMtOTI0MS0xMzgzOTY0MGE2MDQv
MS9YOGhLSV9pXzh5ZEZpbVF6M2FTOFo3Q2dkcHMucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYy
L2ZiMjQxMS00ODViLTQxNDMtOTI0MS0xMzgzOTY0MGE2MDQvMS8xLUVFb0ZHdDc3
SXZSR0Z1LUREdVRRS3IxdHhRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFLvpgAwQFsG4gMA0GCSqGSIb3
DQEBCwUAA4IBAQArvZL3oT5PFJ4D4U8XRl78GmsI1A0SkPUX7S2dASRXmNdRTwO4
so2NBmWBxIcD+eq0GSvUIqR2i2VvG6+eOTDQoIeQ79yzvKPW0rKgVjG/l0QZxeDF
8wtBqz/6CJC0cN6e463uwgKfCJHsa6MU7dTeSDycsdb8GmTYOkNtr7LpnTyVT2pq
2E0jZKyh7Duwx73KFWxS4KrYnZqQHxenwXb2eaEyZ+IRh8wryt9GIM3dkIg/q+uF
D8f8MK2LnPtsql6pGpONt3vGWrmcrUPH438O950Qm6VbgUWIPgHjDz2vzdXBAHNE
pM+2HHpAMIw+JAddp1FPsge7NWNAJmU28hDI
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:29 2025 by rpki-client