Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/r9_H5_NB7Pp4z89uCWhy7VylLAw.roa
File: r9_H5_NB7Pp4z89uCWhy7VylLAw.roa (raw, json)
Hash identifier: /BQuNTpOk5on8emYghB/I6/Wkob1PFGctM+Jo0o3Y+k=
Subject key identifier: AF:DF:C7:E7:F3:41:EC:FA:78:CF:CF:6E:09:68:72:ED:5C:A5:2C:0C
Certificate issuer: /CN=32507f9e078be89932e91b23acf882ab467c6aa7
Certificate serial: 0182EF3B61C7CE029F2B5B173BDD70A63152
Authority key identifier: 32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/r9_H5_NB7Pp4z89uCWhy7VylLAw.roa
Signing time: Tue 30 Aug 2022 14:50:22 +0000
ROA not before: Tue 30 Aug 2022 14:50:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197503
IP address blocks: 46.149.144.0/20 maxlen: 20
46.149.146.0/23 maxlen: 23
46.149.152.0/23 maxlen: 23
46.149.148.0/23 maxlen: 23
46.149.150.0/23 maxlen: 23
46.149.156.0/23 maxlen: 23
46.149.158.0/23 maxlen: 23
46.149.154.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:3b:61:c7:ce:02:9f:2b:5b:17:3b:dd:70:a6:31:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32507f9e078be89932e91b23acf882ab467c6aa7
Validity
Not Before: Aug 30 14:50:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afdfc7e7f341ecfa78cfcf6e096872ed5ca52c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c7:e8:b5:82:7c:5d:70:64:2c:bf:9c:60:76:
f5:7b:f6:fe:1e:e2:b3:53:99:84:7e:84:28:93:19:
95:95:4a:c5:91:83:b1:b1:e1:60:ad:09:14:aa:57:
df:2c:9f:da:9f:a0:78:0b:b8:53:ae:37:b5:ef:5a:
41:41:ac:8d:d2:98:33:2c:63:ab:28:49:a9:58:56:
7a:f7:2e:1c:f1:bb:5b:26:03:58:6e:37:63:89:49:
34:45:89:3a:26:c2:3e:8d:e2:a1:7e:b4:5c:e4:fb:
4d:8a:60:69:39:eb:7a:03:5d:4d:55:7a:05:07:93:
5a:29:b7:51:09:c6:b3:2c:79:57:f7:e1:b5:76:8b:
fd:09:07:29:cd:e4:fe:21:7d:58:71:22:56:28:98:
37:94:58:46:cf:42:d5:e0:f8:7a:ba:95:9e:ba:c1:
a1:87:0b:3b:cf:b3:b1:5e:3c:77:5a:a3:95:3e:ee:
47:4c:1f:a4:b2:d9:e8:ad:1f:7f:66:7a:5e:f1:ea:
2c:c8:d7:c8:4f:77:74:69:a7:ec:da:97:b3:cf:b3:
d3:1b:ee:e1:b7:7d:17:50:f9:16:9d:1e:4f:dd:12:
a9:68:a4:56:b4:72:6b:69:cb:c9:c6:61:42:9f:b4:
18:8a:dc:2c:24:b5:04:42:3d:84:d8:a3:6d:82:36:
cb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DF:C7:E7:F3:41:EC:FA:78:CF:CF:6E:09:68:72:ED:5C:A5:2C:0C
X509v3 Authority Key Identifier:
keyid:32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/r9_H5_NB7Pp4z89uCWhy7VylLAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.144.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:7e:2a:43:c5:db:a5:e5:8e:c2:2c:ce:ab:e1:3f:29:0d:9c:
49:e5:91:3c:7f:58:32:68:48:6f:2a:47:9e:03:83:4e:c3:fb:
83:e0:fd:8b:76:b8:cc:19:a1:87:1e:27:74:a9:3e:fd:75:f6:
47:37:73:58:65:e1:ad:ff:c7:b7:e2:8a:10:a7:56:f4:ef:a5:
ff:9f:30:99:04:cd:d0:d6:0b:f8:b6:94:ba:cf:ec:c8:b3:fd:
6e:ac:b8:b1:4f:c7:5c:e9:8c:57:1a:47:67:cf:4c:3c:50:df:
3d:9a:e4:3f:21:93:b3:15:6b:18:2f:b7:92:8c:42:50:80:09:
7e:fb:f7:71:e2:19:00:77:c6:52:af:b2:2f:e4:15:c3:9e:99:
c0:88:c8:8d:89:09:cf:a5:3e:3c:5a:e3:44:ce:c5:99:3f:37:
06:11:39:00:f8:3c:66:6c:ec:f8:10:26:c0:87:0a:66:d7:c8:
35:71:89:30:b2:04:ff:a1:1c:24:81:02:2b:72:60:af:58:b8:
e6:2f:6e:1d:13:75:4d:8b:fb:a9:49:be:94:53:d7:90:66:5b:
6f:8a:5a:3a:f1:b6:c1:f0:b3:dc:e6:18:b1:92:16:e8:4c:18:
0f:23:f9:95:3e:86:88:be:d4:e4:6e:7d:39:57:30:d3:9a:7a:
7a:6c:70:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLvO2HHzgKfK1sXO91wpjFSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNTA3ZjllMDc4YmU4OTkzMmU5MWIyM2FjZjg4MmFiNDY3
YzZhYTcwHhcNMjIwODMwMTQ1MDIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmRmYzdlN2YzNDFlY2ZhNzhjZmNmNmUwOTY4NzJlZDVjYTUyYzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8fotYJ8XXBkLL+cYHb1e/b+HuKz
U5mEfoQokxmVlUrFkYOxseFgrQkUqlffLJ/an6B4C7hTrje171pBQayN0pgzLGOr
KEmpWFZ69y4c8btbJgNYbjdjiUk0RYk6JsI+jeKhfrRc5PtNimBpOet6A11NVXoF
B5NaKbdRCcazLHlX9+G1dov9CQcpzeT+IX1YcSJWKJg3lFhGz0LV4Ph6upWeusGh
hws7z7OxXjx3WqOVPu5HTB+kstnorR9/Znpe8eosyNfIT3d0aafs2pezz7PTG+7h
t30XUPkWnR5P3RKpaKRWtHJracvJxmFCn7QYitwsJLUEQj2E2KNtgjbLDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK/fx+fzQez6eM/Pbglocu1cpSwMMB8GA1UdIwQY
MBaAFDJQf54Hi+iZMukbI6z4gqtGfGqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxCX25nZUw2Smt5NlJzanJQaUNxMFo4YXFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jZGFlOWItMTk0NS00ZTk5LThiNWEt
OWQxOTZhMGUzMmEwLzEvcjlfSDVfTkI3UHA0ejg5dUNXaHk3VnlsTEF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jZGFlOWItMTk0NS00ZTk5LThiNWEtOWQxOTZhMGUzMmEw
LzEvTWxCX25nZUw2Smt5NlJzanJQaUNxMFo4YXFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELpWQMA0G
CSqGSIb3DQEBCwUAA4IBAQAafipDxdul5Y7CLM6r4T8pDZxJ5ZE8f1gyaEhvKkee
A4NOw/uD4P2LdrjMGaGHHid0qT79dfZHN3NYZeGt/8e34ooQp1b076X/nzCZBM3Q
1gv4tpS6z+zIs/1urLixT8dc6YxXGkdnz0w8UN89muQ/IZOzFWsYL7eSjEJQgAl+
+/dx4hkAd8ZSr7Iv5BXDnpnAiMiNiQnPpT48WuNEzsWZPzcGETkA+DxmbOz4ECbA
hwpm18g1cYkwsgT/oRwkgQIrcmCvWLjmL24dE3VNi/upSb6UU9eQZltvilo68bbB
8LPc5hixkhboTBgPI/mVPoaIvtTkbn05VzDTmnp6bHBg
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:38 2023 by rpki-client on console-fra.rpki-client.org