Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/mmB4wjXkZIuf6HzaB2eINRgeg9Q.roa
File: mmB4wjXkZIuf6HzaB2eINRgeg9Q.roa (raw, json)
Hash identifier: FFncxMmBKxU2J3ccR9NQ7ClVu7GlCIy1R1MRg7i6a6w=
Subject key identifier: 9A:60:78:C2:35:E4:64:8B:9F:E8:7C:DA:07:67:88:35:18:1E:83:D4
Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial: 142DE581
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/mmB4wjXkZIuf6HzaB2eINRgeg9Q.roa
Signing time: Sat 01 Jan 2022 10:56:45 +0000
ROA not before: Sat 01 Jan 2022 10:56:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29396
IP address blocks: 46.22.176.0/23 maxlen: 24
195.189.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338552193 (0x142de581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
Validity
Not Before: Jan 1 10:56:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a6078c235e4648b9fe87cda07678835181e83d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:00:12:9f:28:dd:8d:f0:6e:92:62:68:13:7d:
2c:fe:56:eb:1b:c8:f4:30:79:be:bf:83:63:06:c4:
cb:22:f3:4e:b2:8b:0c:a6:db:a9:11:3c:a9:8e:92:
6a:b1:21:f7:8f:7e:fd:e0:82:40:43:98:26:93:97:
26:e5:07:24:9c:c4:74:d5:34:63:bf:60:8b:d3:5d:
b5:14:8b:83:aa:44:32:14:5e:cc:95:92:61:44:1e:
48:ee:19:7d:21:d9:e4:8a:be:d0:79:f1:e5:d2:43:
52:af:08:fd:31:ea:a3:37:60:f6:f2:b1:fb:73:ac:
ea:d1:f9:09:3f:ba:72:48:dc:13:ab:bd:ae:75:03:
fa:6a:96:d3:0b:89:f8:af:84:fc:ce:ff:65:d7:85:
d5:65:95:1b:e6:20:3b:fd:63:86:f1:bf:6e:e5:8c:
93:06:e1:dc:57:68:ac:c9:ee:63:ae:8a:d9:48:dd:
7a:49:31:8c:47:36:ac:a7:d3:31:68:7d:ec:05:4a:
d4:51:0d:38:8a:cd:8a:2b:ca:67:d9:6c:34:67:73:
f6:25:9d:2f:a1:92:d0:13:72:00:2b:99:a6:ab:dc:
d5:2f:55:15:02:b0:e5:51:20:a7:0e:c0:29:22:8a:
43:ad:f7:b3:e5:8b:42:bf:34:10:65:57:cc:67:f5:
a5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:60:78:C2:35:E4:64:8B:9F:E8:7C:DA:07:67:88:35:18:1E:83:D4
X509v3 Authority Key Identifier:
keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/mmB4wjXkZIuf6HzaB2eINRgeg9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.176.0/23
195.189.20.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:fb:ff:81:83:72:b7:d9:94:bc:8c:0c:54:31:75:98:96:64:
13:da:0a:72:ee:15:0a:c2:32:e3:b8:06:2d:41:44:86:0c:f2:
ad:d5:5c:b3:3d:5c:1a:88:70:c5:57:91:75:72:82:47:3b:8c:
23:da:f2:54:d7:62:38:d4:a2:22:17:99:b1:08:4f:1f:a3:e2:
48:79:e5:91:97:e0:2f:b6:a3:46:04:a4:10:13:1d:3c:71:01:
28:41:3d:23:16:41:1f:cd:73:6f:86:b0:9e:e4:00:70:24:42:
82:4b:4b:1d:78:b1:62:33:ec:74:0a:7d:2f:0c:54:cd:e4:08:
66:0b:3c:0d:ab:4a:ce:b1:fc:e0:f0:b2:f2:ac:e8:e9:0e:94:
46:ea:f0:4d:49:05:ab:d2:84:48:9d:82:76:4b:e7:45:8c:48:
d1:5e:24:8a:55:33:1b:95:f9:17:b6:65:08:46:14:14:72:64:
6e:d1:02:7f:e6:94:04:68:37:0d:3d:02:64:c0:66:a5:a6:75:
a1:3c:c5:64:10:78:b1:b8:5b:31:9c:ff:2a:c9:57:10:66:4d:
42:08:42:94:06:aa:85:01:b7:d8:a3:ae:1b:19:93:94:1f:67:
07:82:00:97:c7:44:30:b6:3c:6c:4b:d9:ad:55:09:01:e1:a9:
74:01:43:81
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEFC3lgTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MjJiZWQzZjM3Y2Q3MjgyNjUxMWM1NzQ1NjBkZWI1NTU0MjU1MGU0MB4XDTIyMDEw
MTEwNTY0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWE2MDc4YzIzNWU0
NjQ4YjlmZTg3Y2RhMDc2Nzg4MzUxODFlODNkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANEAEp8o3Y3wbpJiaBN9LP5W6xvI9DB5vr+DYwbEyyLzTrKL
DKbbqRE8qY6SarEh949+/eCCQEOYJpOXJuUHJJzEdNU0Y79gi9NdtRSLg6pEMhRe
zJWSYUQeSO4ZfSHZ5Iq+0Hnx5dJDUq8I/THqozdg9vKx+3Os6tH5CT+6ckjcE6u9
rnUD+mqW0wuJ+K+E/M7/ZdeF1WWVG+YgO/1jhvG/buWMkwbh3FdorMnuY66K2Ujd
ekkxjEc2rKfTMWh97AVK1FENOIrNiivKZ9lsNGdz9iWdL6GS0BNyACuZpqvc1S9V
FQKw5VEgpw7AKSKKQ633s+WLQr80EGVXzGf1pT8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSaYHjCNeRki5/ofNoHZ4g1GB6D1DAfBgNVHSMEGDAWgBTyK+0/N81ygmUR
xXRWDetVVCVQ5DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhpdnRQemZOY29KbEVjVjBWZzNyVlZRbFVPUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2UvMjk0ZmExLWU5MzgtNGNkMi05YTg5LTI5MDYyZTg3MGI2NC8x
L21tQjR3alhrWkl1ZjZIemFCMmVJTlJnZWc5US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Uv
Mjk0ZmExLWU5MzgtNGNkMi05YTg5LTI5MDYyZTg3MGI2NC8xLzhpdnRQemZOY29K
bEVjVjBWZzNyVlZRbFVPUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAS4WsAMEAsO9FDANBgkqhkiG9w0B
AQsFAAOCAQEALfv/gYNyt9mUvIwMVDF1mJZkE9oKcu4VCsIy47gGLUFEhgzyrdVc
sz1cGohwxVeRdXKCRzuMI9ryVNdiONSiIheZsQhPH6PiSHnlkZfgL7ajRgSkEBMd
PHEBKEE9IxZBH81zb4awnuQAcCRCgktLHXixYjPsdAp9LwxUzeQIZgs8DatKzrH8
4PCy8qzo6Q6URurwTUkFq9KESJ2CdkvnRYxI0V4kilUzG5X5F7ZlCEYUFHJkbtEC
f+aUBGg3DT0CZMBmpaZ1oTzFZBB4sbhbMZz/KslXEGZNQghClAaqhQG32KOuGxmT
lB9nB4IAl8dEMLY8bEvZrVUJAeGpdAFDgQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:06 2023 by rpki-client on console-ams.rpki-client.org