Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/0-j2SvbDjCdF8zK_D7osiUEi-R4.roa
File: 0-j2SvbDjCdF8zK_D7osiUEi-R4.roa (raw, json)
Hash identifier: adZWlHCH1xKYMUF9vXEX4NrwN6FYjNM9sgpaJXQS67s=
Subject key identifier: D3:E8:F6:4A:F6:C3:8C:27:45:F3:32:BF:0F:BA:2C:89:41:22:F9:1E
Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial: 0184D3D2582F6F7DBBD192503BE418E46504
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/0-j2SvbDjCdF8zK_D7osiUEi-R4.roa
Signing time: Fri 02 Dec 2022 17:11:28 +0000
ROA not before: Fri 02 Dec 2022 17:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197465
IP address blocks: 46.23.242.0/24 maxlen: 24
46.23.240.0/20 maxlen: 20
46.23.241.0/24 maxlen: 24
2a02:5000::/32 maxlen: 32
2a02:5000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:d2:58:2f:6f:7d:bb:d1:92:50:3b:e4:18:e4:65:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
Validity
Not Before: Dec 2 17:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3e8f64af6c38c2745f332bf0fba2c894122f91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:6d:b1:7e:b2:14:e2:b6:a5:0f:40:5d:82:
6a:d1:c0:f7:a5:11:c2:45:a9:89:b7:f4:86:c0:3b:
d5:d6:67:3d:4c:d4:10:b9:35:33:4d:dc:9b:ce:a6:
b9:94:b4:a9:a8:d8:88:e4:cc:c7:be:cb:13:bc:5f:
fc:53:e2:31:ca:67:33:23:28:12:51:2e:d3:ed:05:
1e:32:65:51:68:f3:9a:cd:31:2c:03:78:0f:f5:3b:
a4:57:4d:3b:a3:4d:1d:61:50:0e:88:90:ba:c9:27:
26:42:79:6a:a2:da:d0:29:8b:b3:2b:19:8e:6f:f3:
9c:f1:91:49:38:d9:12:67:be:1d:c2:87:70:43:91:
09:a2:f6:6a:75:8a:21:00:67:d0:ad:e3:52:14:19:
62:7f:4b:8b:1e:65:e8:40:53:f8:ad:16:42:f5:3b:
56:1d:3f:22:ad:86:81:f3:d6:3b:93:ca:5b:69:b7:
3c:55:6c:a1:e9:7c:18:b5:10:e2:c9:72:f7:ad:2f:
54:89:ce:35:05:fd:a1:64:30:9b:de:57:79:bd:09:
4c:83:73:3d:92:17:f6:d1:58:8a:da:ef:5f:d6:91:
d7:7d:08:70:23:32:8d:a6:18:33:2b:06:c6:05:66:
87:15:7c:af:f3:63:28:12:ed:1f:d2:8a:6a:d7:1b:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E8:F6:4A:F6:C3:8C:27:45:F3:32:BF:0F:BA:2C:89:41:22:F9:1E
X509v3 Authority Key Identifier:
keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/0-j2SvbDjCdF8zK_D7osiUEi-R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.240.0/20
IPv6:
2a02:5000::/32
Signature Algorithm: sha256WithRSAEncryption
37:6b:22:8f:bc:40:5f:e3:4a:7f:34:8e:d1:03:1f:11:d5:c5:
27:d4:6e:44:17:50:03:cf:b3:52:c2:51:f5:2d:17:55:d2:58:
26:af:91:ca:2b:e7:28:c3:29:d9:2f:d8:e1:82:e7:b4:c8:16:
d9:0a:e4:06:7c:75:8a:b2:f3:fb:56:4c:99:fc:81:58:8d:9e:
6e:ea:ab:09:77:4a:49:36:9e:42:9a:5d:c1:b4:0b:9b:13:09:
2a:86:c1:4f:86:21:a6:92:c0:f2:dd:be:82:c0:51:27:24:d3:
b3:cc:da:5a:5b:71:92:42:ed:03:e1:7d:65:94:77:11:e0:eb:
b0:69:0c:63:9a:ef:25:98:1a:c0:e7:11:3f:55:d6:fe:0d:e4:
29:db:c7:f2:fa:d1:27:f7:af:21:fc:85:af:a0:90:b5:a4:5c:
e0:8b:0b:18:e7:2f:24:e8:27:b5:6a:3f:d6:77:d2:a0:75:4d:
0e:27:02:36:af:07:6e:2e:df:cb:4c:a2:3d:91:2c:45:59:9b:
66:9c:ff:d0:ab:2d:79:07:d1:68:1b:b3:e6:b1:b6:8b:8b:b1:
d6:32:fe:73:54:5a:32:e1:58:a8:9e:ef:4e:6c:0d:7c:32:12:
8a:6c:0d:ef:3b:c5:17:97:e2:1a:e9:a7:ba:f3:6f:a8:1a:f6:
8a:d6:19:e2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYTT0lgvb3270ZJQO+QY5GUEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZjkwZTc1ZGY5OGFmYjQzMDE5Y2U3NTAzNTBlNzY5Yjk5
ZmJjMTMwHhcNMjIxMjAyMTcxMTI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2U4ZjY0YWY2YzM4YzI3NDVmMzMyYmYwZmJhMmM4OTQxMjJmOTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AdtsX6yFOK2pQ9AXYJq0cD3pRHC
RamJt/SGwDvV1mc9TNQQuTUzTdybzqa5lLSpqNiI5MzHvssTvF/8U+IxymczIygS
US7T7QUeMmVRaPOazTEsA3gP9TukV007o00dYVAOiJC6yScmQnlqotrQKYuzKxmO
b/Oc8ZFJONkSZ74dwodwQ5EJovZqdYohAGfQreNSFBlif0uLHmXoQFP4rRZC9TtW
HT8irYaB89Y7k8pbabc8VWyh6XwYtRDiyXL3rS9Uic41Bf2hZDCb3ld5vQlMg3M9
khf20ViK2u9f1pHXfQhwIzKNphgzKwbGBWaHFXyv82MoEu0f0opq1xuE9wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNPo9kr2w4wnRfMyvw+6LIlBIvkeMB8GA1UdIwQY
MBaAFGb5DnXfmK+0MBnOdQNQ52m5n7wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81YTY5OGQtOTk4YS00OGJhLThkYzUt
MzMzZjBjOTkyNzllLzEvMC1qMlN2YkRqQ2RGOHpLX0Q3b3NpVUVpLVI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81YTY5OGQtOTk4YS00OGJhLThkYzUtMzMzZjBjOTkyNzll
LzEvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQELhfwMA0E
AgACMAcDBQAqAlAAMA0GCSqGSIb3DQEBCwUAA4IBAQA3ayKPvEBf40p/NI7RAx8R
1cUn1G5EF1ADz7NSwlH1LRdV0lgmr5HKK+cowynZL9jhgue0yBbZCuQGfHWKsvP7
VkyZ/IFYjZ5u6qsJd0pJNp5Cml3BtAubEwkqhsFPhiGmksDy3b6CwFEnJNOzzNpa
W3GSQu0D4X1llHcR4OuwaQxjmu8lmBrA5xE/Vdb+DeQp28fy+tEn968h/IWvoJC1
pFzgiwsY5y8k6Ce1aj/Wd9KgdU0OJwI2rwduLt/LTKI9kSxFWZtmnP/Qqy15B9Fo
G7PmsbaLi7HWMv5zVFoy4Vionu9ObA18MhKKbA3vO8UXl+Ia6ae682+oGvaK1hni
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:32 2025 by rpki-client