Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/ekJEMwC27gTGiYGLqX11jw7YiNE.roa
File: ekJEMwC27gTGiYGLqX11jw7YiNE.roa (raw, json)
Hash identifier: glCzVb8k631hAWZadLwku8+DCQgAcWRpeKuMsPoqZCM=
Subject key identifier: 7A:42:44:33:00:B6:EE:04:C6:89:81:8B:A9:7D:75:8F:0E:D8:88:D1
Certificate issuer: /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial: 01845D9CBCEFDFA186F35013C99087934653
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/ekJEMwC27gTGiYGLqX11jw7YiNE.roa
Signing time: Wed 09 Nov 2022 18:17:43 +0000
ROA not before: Wed 09 Nov 2022 18:17:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2856
IP address blocks: 46.248.112.0/23 maxlen: 23
46.248.108.0/23 maxlen: 23
46.248.110.0/23 maxlen: 23
46.248.106.0/23 maxlen: 23
46.248.118.0/23 maxlen: 23
46.248.114.0/23 maxlen: 23
46.248.116.0/23 maxlen: 23
46.248.124.0/23 maxlen: 23
46.248.122.0/23 maxlen: 23
46.248.120.0/23 maxlen: 23
46.248.126.0/23 maxlen: 23
85.116.2.0/23 maxlen: 23
85.116.4.0/23 maxlen: 23
82.136.52.0/24 maxlen: 24
85.116.0.0/23 maxlen: 23
82.136.62.0/23 maxlen: 23
85.116.10.0/23 maxlen: 23
82.136.61.0/24 maxlen: 24
85.116.6.0/23 maxlen: 23
85.116.12.0/23 maxlen: 23
85.116.14.0/23 maxlen: 23
85.116.16.0/21 maxlen: 21
85.116.24.0/24 maxlen: 24
85.116.30.0/24 maxlen: 24
85.116.29.0/24 maxlen: 24
85.116.31.0/24 maxlen: 24
85.116.26.0/24 maxlen: 24
85.116.25.0/24 maxlen: 24
85.116.28.0/24 maxlen: 24
85.116.27.0/24 maxlen: 24
82.136.7.0/24 maxlen: 24
82.136.17.0/24 maxlen: 24
82.136.13.0/24 maxlen: 24
82.136.20.0/24 maxlen: 24
82.136.26.0/24 maxlen: 24
82.136.37.0/24 maxlen: 24
82.136.43.0/24 maxlen: 24
82.136.47.0/24 maxlen: 24
46.248.98.0/23 maxlen: 23
46.248.96.0/23 maxlen: 23
46.248.100.0/23 maxlen: 23
46.248.102.0/23 maxlen: 23
46.248.104.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5d:9c:bc:ef:df:a1:86:f3:50:13:c9:90:87:93:46:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
Validity
Not Before: Nov 9 18:17:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a42443300b6ee04c689818ba97d758f0ed888d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e8:86:73:24:1d:9f:aa:eb:1c:ee:12:bc:22:
80:1d:db:b7:8d:fc:f5:d3:0e:24:4b:d6:1f:be:67:
a9:e9:fe:2a:e4:a6:93:a3:b8:0d:24:f5:4c:e9:15:
56:7c:d8:59:24:e9:5e:2e:dd:a5:07:74:42:83:2e:
a5:f5:21:17:47:61:46:0a:eb:69:81:b9:59:b7:bf:
c5:14:74:fd:50:ec:67:d3:51:6c:a7:0d:81:c4:af:
6b:d6:72:4a:b5:f5:ac:29:f6:f3:28:62:b7:d3:d6:
95:df:6b:c3:83:7e:9d:a4:2e:71:fe:ec:df:c6:72:
a5:9c:d3:f4:22:22:33:83:bb:c8:28:af:a5:57:c7:
e0:3e:ee:f5:9a:51:35:c6:94:7a:85:91:2b:93:b1:
6a:6f:8e:16:d3:1e:46:4d:2a:ac:0a:88:74:23:a2:
ba:60:79:38:75:c8:d0:03:ce:98:b3:9a:d8:7d:d2:
d8:6e:77:de:6c:63:bb:7f:8c:14:20:1d:f6:bc:b5:
e6:66:ba:3f:d0:fb:40:a9:04:25:c2:44:a2:02:3d:
3a:9c:3a:2d:4e:b0:ed:b8:cd:8e:db:40:50:47:b1:
f5:66:bb:70:fa:0c:12:9a:a7:9f:6b:03:e0:83:c3:
6f:b2:d8:a4:54:69:d0:d3:22:6b:77:92:82:0c:03:
83:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:42:44:33:00:B6:EE:04:C6:89:81:8B:A9:7D:75:8F:0E:D8:88:D1
X509v3 Authority Key Identifier:
keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/ekJEMwC27gTGiYGLqX11jw7YiNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.96.0/19
82.136.7.0/24
82.136.13.0/24
82.136.17.0/24
82.136.20.0/24
82.136.26.0/24
82.136.37.0/24
82.136.43.0/24
82.136.47.0/24
82.136.52.0/24
82.136.61.0-82.136.63.255
85.116.0.0/21
85.116.10.0-85.116.31.255
Signature Algorithm: sha256WithRSAEncryption
73:01:82:0a:04:bd:76:66:00:54:85:e0:bf:ef:d4:98:15:57:
45:80:f1:a9:f0:7b:a4:b4:53:75:04:10:d9:3c:d0:88:5c:07:
c3:14:9c:59:99:dc:10:f3:3e:39:9c:f0:3c:5d:ba:20:6f:04:
90:7a:53:39:cf:2e:dc:1a:30:e4:ce:67:65:00:51:1e:3b:35:
2c:0c:83:c6:5b:9f:ce:32:47:ba:40:7c:b7:21:2e:bd:2e:97:
d9:96:21:dd:35:fb:d8:5e:91:59:48:b7:61:c7:e7:a8:d7:91:
f5:c5:42:85:7e:29:9e:df:51:ca:67:b2:c0:f2:bc:c0:58:4d:
62:a3:fc:30:b5:5b:0e:4f:f9:e4:31:82:58:cc:22:3e:96:19:
39:5a:b9:c0:98:d8:b3:0a:e8:87:06:bc:64:b0:e3:65:47:fc:
29:39:a8:b6:5b:ea:cd:f5:3f:ba:44:4b:52:29:8c:fe:c9:41:
41:d6:fc:97:d3:e4:0c:08:71:ef:f2:5e:a8:52:03:42:48:49:
d6:06:4a:74:7d:47:38:a7:4e:60:01:dd:9f:49:0d:a6:2e:89:
e6:79:36:b1:22:94:10:97:f4:69:9b:a6:ab:30:a2:47:5d:c4:
67:28:44:de:4b:80:fe:ef:6d:b2:1c:b3:d3:1f:bf:1a:fc:f1:
14:2a:0a:59
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAYRdnLzv36GG81ATyZCHk0ZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzOTMyNzgyZWU3NzU4OTkwNDA0ZmExY2NmYjA5ZWMyM2E4
NjEyM2YwHhcNMjIxMTA5MTgxNzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTQyNDQzMzAwYjZlZTA0YzY4OTgxOGJhOTdkNzU4ZjBlZDg4OGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheiGcyQdn6rrHO4SvCKAHdu3jfz1
0w4kS9Yfvmep6f4q5KaTo7gNJPVM6RVWfNhZJOleLt2lB3RCgy6l9SEXR2FGCutp
gblZt7/FFHT9UOxn01Fspw2BxK9r1nJKtfWsKfbzKGK309aV32vDg36dpC5x/uzf
xnKlnNP0IiIzg7vIKK+lV8fgPu71mlE1xpR6hZErk7Fqb44W0x5GTSqsCoh0I6K6
YHk4dcjQA86Ys5rYfdLYbnfebGO7f4wUIB32vLXmZro/0PtAqQQlwkSiAj06nDot
TrDtuM2O20BQR7H1Zrtw+gwSmqefawPgg8NvstikVGnQ0yJrd5KCDAODmwIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFHpCRDMAtu4ExomBi6l9dY8O2IjRMB8GA1UdIwQY
MBaAFBOTJ4Lud1iZBAT6HM+wnsI6hhI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYt
NGIxZjYxNjUzZjNkLzEvZWtKRU13QzI3Z1RHaVlHTHFYMTFqdzdZaU5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYtNGIxZjYxNjUzZjNk
LzEvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQFLvhgAwQA
UogHAwQAUogNAwQAUogRAwQAUogUAwQAUogaAwQAUoglAwQAUogrAwQAUogvAwQA
Uog0MAwDBABSiD0DBAZSiAADBANVdAAwDAMEAVV0CgMEBVV0ADANBgkqhkiG9w0B
AQsFAAOCAQEAcwGCCgS9dmYAVIXgv+/UmBVXRYDxqfB7pLRTdQQQ2TzQiFwHwxSc
WZncEPM+OZzwPF26IG8EkHpTOc8u3Bow5M5nZQBRHjs1LAyDxlufzjJHukB8tyEu
vS6X2ZYh3TX72F6RWUi3YcfnqNeR9cVChX4pnt9RymeywPK8wFhNYqP8MLVbDk/5
5DGCWMwiPpYZOVq5wJjYswrohwa8ZLDjZUf8KTmotlvqzfU/ukRLUimM/slBQdb8
l9PkDAhx7/JeqFIDQkhJ1gZKdH1HOKdOYAHdn0kNpi6J5nk2sSKUEJf0aZumqzCi
R13EZyhE3kuA/u9tshyz0x+/GvzxFCoKWQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:52 2023 by rpki-client on console-ams.rpki-client.org