Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/mWO39aff5yGuSfVxWajf_7lWsu8.roa
File: mWO39aff5yGuSfVxWajf_7lWsu8.roa (raw, json)
Hash identifier: bjAAOPC15LqATVtBsn5gQiAY2Fm3n6NpIfbKYULL6Fg=
Subject key identifier: 99:63:B7:F5:A7:DF:E7:21:AE:49:F5:71:59:A8:DF:FF:B9:56:B2:EF
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 04F42C5A
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/mWO39aff5yGuSfVxWajf_7lWsu8.roa
Signing time: Wed 11 May 2022 17:41:03 +0000
ROA not before: Wed 11 May 2022 17:41:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16552
IP address blocks: 46.31.233.0/24 maxlen: 24
46.31.232.0/21 maxlen: 24
46.31.232.0/24 maxlen: 24
46.31.235.0/24 maxlen: 24
46.31.234.0/24 maxlen: 24
185.165.54.0/24 maxlen: 28
185.165.52.0/24 maxlen: 28
185.165.55.0/24 maxlen: 28
185.165.52.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83111002 (0x4f42c5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: May 11 17:41:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9963b7f5a7dfe721ae49f57159a8dfffb956b2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8e:ea:21:6e:85:b3:f5:8c:e0:bc:5e:62:2e:
52:b2:dc:67:3a:fc:4d:1a:2a:1a:87:91:75:ec:77:
a5:35:8d:6e:a3:1c:a0:dc:3c:b6:50:7b:fd:f9:e6:
06:cd:27:ae:61:7e:86:7f:4b:8c:90:2b:23:ab:b7:
78:fc:0c:e2:3f:d4:ec:57:d9:df:4f:de:11:cb:97:
09:6c:0e:94:33:a4:f6:a9:73:6e:4e:ba:3e:8a:8f:
72:77:72:d6:47:cf:42:48:97:b7:10:31:f5:65:2d:
c2:2c:ab:2f:77:75:21:f5:d1:fb:0a:90:50:2d:da:
e8:0a:85:2f:46:36:d8:85:ac:f8:ed:77:92:07:13:
ec:de:75:c4:d4:31:e7:a7:17:51:c4:22:34:5d:33:
46:7c:49:ce:13:bd:4f:73:be:69:80:34:50:f5:84:
c4:d6:e9:dd:9e:dc:52:2e:1b:fa:96:9c:5b:b3:3c:
4b:48:9f:37:39:61:10:0c:d0:bf:67:50:3c:4b:c6:
ac:4e:be:3f:fa:9c:7e:1e:3f:0c:c9:40:61:35:01:
15:9a:7d:32:3c:67:e3:53:a8:3a:e6:96:97:6b:95:
b6:1c:5e:ad:df:7f:47:b9:e3:66:eb:e6:96:9c:b8:
03:83:8d:56:a0:cf:6c:1d:8e:90:0c:37:e9:cd:28:
af:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:63:B7:F5:A7:DF:E7:21:AE:49:F5:71:59:A8:DF:FF:B9:56:B2:EF
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/mWO39aff5yGuSfVxWajf_7lWsu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.232.0/21
185.165.52.0/22
Signature Algorithm: sha256WithRSAEncryption
69:30:60:57:db:0f:42:0e:d4:2c:b6:01:1b:92:19:2d:1b:dc:
6b:cc:a8:c9:74:84:5d:ab:22:f0:21:b5:07:c5:84:0d:f1:cd:
ac:43:44:b4:50:6a:21:83:59:10:ed:e7:cc:c8:38:3f:50:40:
26:fe:8b:1c:23:90:8b:d7:00:26:64:11:31:44:ae:17:42:4f:
61:c1:e3:8b:76:72:77:cd:60:43:f5:ad:47:98:e8:0f:d9:2b:
a7:c7:a8:c2:2f:37:2b:88:4f:4d:7a:18:d3:32:2c:20:1f:3d:
b3:9d:09:cc:da:fb:72:cb:66:10:d6:da:e2:85:54:8f:8c:b5:
e1:e2:2b:e2:20:25:16:4f:de:62:ad:e4:2a:44:eb:98:51:6c:
e7:e5:7e:98:7b:25:b8:56:38:f3:be:d9:59:d8:db:06:7b:b3:
b1:1c:83:6e:4f:1f:12:a0:d7:93:d4:55:1c:84:ad:70:ca:5d:
82:e8:00:b3:3a:b6:f7:a3:dd:ab:40:77:49:5a:14:50:25:1b:
e0:c6:67:55:e1:fc:bd:37:2c:31:10:f3:6b:09:95:fe:a4:7c:
47:68:35:61:62:36:44:66:4b:b2:18:dd:82:31:72:6f:a2:21:
51:01:05:58:c4:f5:76:0f:de:51:09:9c:6b:6c:0b:79:d8:06:
45:45:1c:30
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBPQsWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTFhOTZhMjhjNjVkNTg0YzhkZDIzNGQzZGI0NDRjZjRiMzM3YmEyMB4XDTIyMDUx
MTE3NDEwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTk2M2I3ZjVhN2Rm
ZTcyMWFlNDlmNTcxNTlhOGRmZmZiOTU2YjJlZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN6O6iFuhbP1jOC8XmIuUrLcZzr8TRoqGoeRdex3pTWNbqMc
oNw8tlB7/fnmBs0nrmF+hn9LjJArI6u3ePwM4j/U7FfZ30/eEcuXCWwOlDOk9qlz
bk66PoqPcndy1kfPQkiXtxAx9WUtwiyrL3d1IfXR+wqQUC3a6AqFL0Y22IWs+O13
kgcT7N51xNQx56cXUcQiNF0zRnxJzhO9T3O+aYA0UPWExNbp3Z7cUi4b+pacW7M8
S0ifNzlhEAzQv2dQPEvGrE6+P/qcfh4/DMlAYTUBFZp9Mjxn41OoOuaWl2uVthxe
rd9/R7njZuvmlpy4A4ONVqDPbB2OkAw36c0or9kCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSZY7f1p9/nIa5J9XFZqN//uVay7zAfBgNVHSMEGDAWgBQZGpaijGXVhMjd
I009tETPSzN7ojAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dScVdvb3hsMVlUSTNTTk5QYlJFejBzemU2SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2IvNWUwMjk4LTBkNmItNDFiNC04OGY2LTkxODUxOTlhMThjMC8x
L21XTzM5YWZmNXlHdVNmVnhXYWpmXzdsV3N1OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Iv
NWUwMjk4LTBkNmItNDFiNC04OGY2LTkxODUxOTlhMThjMC8xL0dScVdvb3hsMVlU
STNTTk5QYlJFejBzemU2SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAy4f6AMEArmlNDANBgkqhkiG9w0B
AQsFAAOCAQEAaTBgV9sPQg7ULLYBG5IZLRvca8yoyXSEXasi8CG1B8WEDfHNrENE
tFBqIYNZEO3nzMg4P1BAJv6LHCOQi9cAJmQRMUSuF0JPYcHji3Zyd81gQ/WtR5jo
D9krp8eowi83K4hPTXoY0zIsIB89s50JzNr7cstmENba4oVUj4y14eIr4iAlFk/e
Yq3kKkTrmFFs5+V+mHsluFY4877ZWdjbBnuzsRyDbk8fEqDXk9RVHIStcMpdgugA
szq296Pdq0B3SVoUUCUb4MZnVeH8vTcsMRDzawmV/qR8R2g1YWI2RGZLshjdgjFy
b6IhUQEFWMT1dg/eUQmca2wLedgGRUUcMA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:07 2024 by rpki-client on console-fra.rpki-client.org