Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/byehX_FA5dyumEQRgszOWlk4r4s.roa
File: byehX_FA5dyumEQRgszOWlk4r4s.roa (raw, json)
Hash identifier: HmgvZr2Cfc2grWtlqnuHMrfd+jSu4NzRh7fvOodTsXY=
Subject key identifier: 6F:27:A1:5F:F1:40:E5:DC:AE:98:44:11:82:CC:CE:5A:59:38:AF:8B
Certificate issuer: /CN=9fc218f67243b47da021fda3feb441474b3ceb94
Certificate serial: 374F3DC1
Authority key identifier: 9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/byehX_FA5dyumEQRgszOWlk4r4s.roa
Signing time: Sat 01 Jan 2022 14:03:34 +0000
ROA not before: Sat 01 Jan 2022 14:03:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51675
IP address blocks: 46.17.112.0/22 maxlen: 22
46.17.112.0/21 maxlen: 21
46.17.116.0/22 maxlen: 22
2a02:2680::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927940033 (0x374f3dc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc218f67243b47da021fda3feb441474b3ceb94
Validity
Not Before: Jan 1 14:03:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f27a15ff140e5dcae98441182ccce5a5938af8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:6c:9e:c3:46:ea:80:6d:8a:b2:25:47:13:
13:ca:b7:7b:b6:70:8d:44:f6:e3:9f:9b:a6:64:9c:
22:62:b9:a8:40:34:a4:c1:40:65:7b:c7:9e:6f:54:
3d:0f:3e:7d:35:92:31:c7:9c:8b:97:78:46:82:78:
7f:5c:21:42:04:ba:3d:16:59:ac:d3:cf:67:ae:27:
63:91:41:45:f8:53:f3:9e:c8:8c:6b:f9:b4:25:2d:
35:b8:f4:3f:01:6e:7a:3f:54:c1:2e:c7:0c:c6:62:
a6:cb:e4:5a:ca:8f:6e:32:ce:b5:d4:de:fb:7a:23:
99:10:df:dc:a5:30:a4:fc:ae:23:2e:e4:f8:25:fa:
19:bf:b2:ce:d0:8e:19:af:f5:cf:02:b7:10:7d:a4:
86:e8:0a:44:15:ed:7e:fc:57:7e:bb:86:5b:50:9c:
a5:6b:bc:0f:0f:44:41:79:df:fc:5c:22:6e:f2:75:
11:d1:92:d2:e2:97:fa:cf:4a:50:8c:e8:21:f8:8b:
ce:5a:50:45:ba:8f:bb:0d:19:4d:c3:f5:b3:e4:c8:
71:58:1e:4b:18:d0:0e:fc:ac:35:b4:e8:b2:35:b5:
63:6e:6b:da:50:26:8c:39:35:ea:4b:a1:d2:11:2a:
14:00:2f:28:24:96:ce:7f:11:f8:69:0a:db:2f:08:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:27:A1:5F:F1:40:E5:DC:AE:98:44:11:82:CC:CE:5A:59:38:AF:8B
X509v3 Authority Key Identifier:
keyid:9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/byehX_FA5dyumEQRgszOWlk4r4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.112.0/21
IPv6:
2a02:2680::/32
Signature Algorithm: sha256WithRSAEncryption
6e:75:09:d9:7f:c2:bb:a0:a8:5e:e7:7f:ff:14:d5:01:ae:3d:
dc:92:8a:02:75:43:45:b8:db:2b:b7:0e:a1:21:09:ab:38:0a:
87:e9:5d:fd:e8:2d:89:4f:e7:12:2d:2c:06:33:4d:1f:1e:3f:
44:dd:e0:74:86:45:9c:54:37:61:2e:f2:dd:88:27:c6:29:bb:
fc:21:0b:f6:1b:bc:f1:89:60:dc:0c:b1:29:eb:18:4f:6d:8c:
5c:cd:04:57:17:0e:65:9e:23:cc:3d:99:3f:24:fd:0e:10:56:
aa:af:10:8e:00:f7:a7:37:b3:10:c7:d1:33:46:61:cf:35:c4:
78:38:c6:aa:35:a5:57:20:5e:7f:3a:44:8b:18:60:a2:63:7b:
3a:17:f0:0d:3c:42:0f:9f:0c:6f:42:22:99:80:f9:bb:da:f5:
09:ac:f0:f4:e2:f0:7e:d1:28:f5:de:a3:d5:18:bc:58:ab:93:
e9:f7:12:42:93:9b:d7:b1:11:2e:80:80:50:2b:d3:ab:91:88:
5c:e9:e2:25:66:37:9c:0e:80:99:2d:7f:64:87:e3:2d:54:89:
1b:be:61:f8:f4:df:70:d9:fd:07:46:50:c9:47:ab:31:cc:32:
31:34:97:70:fa:6d:ae:1e:77:49:1a:b8:30:e8:e9:b4:28:0d:
3f:da:af:2d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEN089wTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZmMyMThmNjcyNDNiNDdkYTAyMWZkYTNmZWI0NDE0NzRiM2NlYjk0MB4XDTIyMDEw
MTE0MDMzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmYyN2ExNWZmMTQw
ZTVkY2FlOTg0NDExODJjY2NlNWE1OTM4YWY4YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALxpbJ7DRuqAbYqyJUcTE8q3e7ZwjUT245+bpmScImK5qEA0
pMFAZXvHnm9UPQ8+fTWSMceci5d4RoJ4f1whQgS6PRZZrNPPZ64nY5FBRfhT857I
jGv5tCUtNbj0PwFuej9UwS7HDMZipsvkWsqPbjLOtdTe+3ojmRDf3KUwpPyuIy7k
+CX6Gb+yztCOGa/1zwK3EH2khugKRBXtfvxXfruGW1CcpWu8Dw9EQXnf/FwibvJ1
EdGS0uKX+s9KUIzoIfiLzlpQRbqPuw0ZTcP1s+TIcVgeSxjQDvysNbTosjW1Y25r
2lAmjDk16kuh0hEqFAAvKCSWzn8R+GkK2y8IiwECAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRvJ6Ff8UDl3K6YRBGCzM5aWTivizAfBgNVHSMEGDAWgBSfwhj2ckO0faAh
/aP+tEFHSzzrlDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L244SVk5bkpEdEgyZ0lmMmpfclJCUjBzODY1US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2MvNjdhYWUyLWM4ZmMtNGFkMC1iYzYwLWRlZjliMmUyZGZkMy8x
L2J5ZWhYX0ZBNWR5dW1FUVJnc3pPV2xrNHI0cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Mv
NjdhYWUyLWM4ZmMtNGFkMC1iYzYwLWRlZjliMmUyZGZkMy8xL244SVk5bkpEdEgy
Z0lmMmpfclJCUjBzODY1US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAy4RcDANBAIAAjAHAwUAKgImgDAN
BgkqhkiG9w0BAQsFAAOCAQEAbnUJ2X/Cu6CoXud//xTVAa493JKKAnVDRbjbK7cO
oSEJqzgKh+ld/egtiU/nEi0sBjNNHx4/RN3gdIZFnFQ3YS7y3Ygnxim7/CEL9hu8
8Ylg3AyxKesYT22MXM0EVxcOZZ4jzD2ZPyT9DhBWqq8QjgD3pzezEMfRM0ZhzzXE
eDjGqjWlVyBefzpEixhgomN7OhfwDTxCD58Mb0IimYD5u9r1Cazw9OLwftEo9d6j
1Ri8WKuT6fcSQpOb17ERLoCAUCvTq5GIXOniJWY3nA6AmS1/ZIfjLVSJG75h+PTf
cNn9B0ZQyUerMcwyMTSXcPptrh53SRq4MOjptCgNP9qvLQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:00 2023 by rpki-client on console-ams.rpki-client.org