Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/sx8Rnt4VaKrpRF2s-jqRCZkYMWY.roa
File: sx8Rnt4VaKrpRF2s-jqRCZkYMWY.roa (raw, json)
Hash identifier: LmptBv97FCVAO6lauIU8jBiJTeUzWBvy0afRIdGDIFk=
Subject key identifier: B3:1F:11:9E:DE:15:68:AA:E9:44:5D:AC:FA:3A:91:09:99:18:31:66
Certificate issuer: /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial: 1C2A0B57
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/sx8Rnt4VaKrpRF2s-jqRCZkYMWY.roa
Signing time: Sat 01 Jan 2022 03:02:27 +0000
ROA not before: Sat 01 Jan 2022 03:02:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203476
IP address blocks: 46.226.104.0/22 maxlen: 22
95.142.160.0/20 maxlen: 20
217.70.188.0/22 maxlen: 22
92.243.0.0/19 maxlen: 20
2001:4b98:dc6::/48 maxlen: 48
2001:4b98:dc4::/48 maxlen: 48
2001:4b98:dc5::/48 maxlen: 48
2001:4b99:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472517463 (0x1c2a0b57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
Validity
Not Before: Jan 1 03:02:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b31f119ede1568aae9445dacfa3a910999183166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:ef:ae:a3:f8:ed:62:91:60:a7:a1:b5:db:
e0:78:c1:1c:03:c9:48:87:b7:0d:18:18:a3:a5:53:
e1:31:01:19:50:21:3e:53:db:75:2c:f7:97:be:5f:
fd:9d:ce:ae:27:7e:91:c7:66:bd:ea:fc:ce:77:56:
2b:a2:5f:97:b4:b1:d9:0a:0b:4f:7a:84:b3:9b:a3:
d4:8c:f9:a5:d3:49:01:b3:b5:74:f5:99:e9:0e:bd:
c5:d2:45:c5:f6:eb:14:8e:60:83:73:8d:71:fc:80:
34:de:60:28:0f:0a:23:f2:77:04:3c:98:e0:7f:11:
14:04:f2:2a:83:6b:67:75:2d:27:2b:a2:28:f8:bb:
6b:9a:d8:f8:44:46:ac:b3:bd:77:b0:e9:39:f7:77:
68:39:9c:87:67:f8:08:dc:86:df:60:fd:31:d8:97:
7d:fa:3b:77:81:bc:f1:f5:40:ba:90:96:4e:11:fe:
5a:78:45:33:f1:15:ad:79:37:f4:d6:13:6e:3d:b8:
e2:43:33:92:12:a3:c9:36:a2:97:78:fb:f7:a7:9a:
fa:61:c4:4b:b8:2f:7c:41:ef:ed:e9:e3:24:f8:e5:
08:17:54:5a:1d:c5:0f:50:10:bc:9f:91:be:eb:9e:
41:35:cc:2e:ad:eb:84:e4:2b:20:84:f6:86:4d:d6:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1F:11:9E:DE:15:68:AA:E9:44:5D:AC:FA:3A:91:09:99:18:31:66
X509v3 Authority Key Identifier:
keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/sx8Rnt4VaKrpRF2s-jqRCZkYMWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.104.0/22
92.243.0.0/19
95.142.160.0/20
217.70.188.0/22
IPv6:
2001:4b98:dc4::-2001:4b98:dc6:ffff:ffff:ffff:ffff:ffff
2001:4b99:1::/48
Signature Algorithm: sha256WithRSAEncryption
ca:cd:ce:af:d8:71:07:96:19:3d:71:7e:1c:00:08:59:fd:34:
d6:de:a9:ca:b5:93:8e:f3:56:3c:f7:10:6c:fc:ae:da:2a:3f:
aa:0c:57:8a:92:9e:c5:99:45:1c:ce:08:28:95:03:30:79:33:
72:a2:e5:fa:d2:f6:22:5d:a6:bc:0e:3c:31:19:f8:4c:dc:b0:
f8:af:50:b5:26:ea:0c:f9:b1:cc:94:62:0c:de:da:a6:a7:3f:
3e:be:cd:9c:20:fa:9f:4b:da:0c:3f:75:bd:82:11:a6:b0:64:
43:20:dd:7b:35:62:c5:57:27:31:4c:cc:2a:13:a9:07:00:44:
76:c7:40:bd:10:0a:b0:3a:36:24:b6:a6:f2:64:1d:5d:41:3a:
19:80:8d:d2:18:79:25:72:88:55:e3:66:0e:be:e9:77:e2:03:
38:8a:92:49:83:b3:69:ca:8b:3e:1c:5b:e1:ba:92:17:e9:6a:
6d:01:09:7e:da:2f:c4:5c:b6:7d:cc:53:55:33:01:ed:04:1d:
74:22:27:96:0a:91:40:8d:2f:2b:56:75:73:ec:d3:b6:75:1c:
a8:25:6e:1c:19:b8:2a:36:c3:90:82:2f:cd:c4:dc:7c:70:75:
61:1c:01:97:e9:32:67:aa:9e:2b:c4:9c:21:99:ed:1f:55:61:
ba:33:dc:03
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIEHCoLVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
Y2EwZWM1OTU2NDMyNDIzNzQyMGQ1MDZiOWI0OThkNzUyZWUyMTY4MB4XDTIyMDEw
MTAzMDIyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjMxZjExOWVkZTE1
NjhhYWU5NDQ1ZGFjZmEzYTkxMDk5OTE4MzE2NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWm766j+O1ikWCnobXb4HjBHAPJSIe3DRgYo6VT4TEBGVAh
PlPbdSz3l75f/Z3Orid+kcdmver8zndWK6Jfl7Sx2QoLT3qEs5uj1Iz5pdNJAbO1
dPWZ6Q69xdJFxfbrFI5gg3ONcfyANN5gKA8KI/J3BDyY4H8RFATyKoNrZ3UtJyui
KPi7a5rY+ERGrLO9d7DpOfd3aDmch2f4CNyG32D9MdiXffo7d4G88fVAupCWThH+
WnhFM/EVrXk39NYTbj244kMzkhKjyTail3j796ea+mHES7gvfEHv7enjJPjlCBdU
Wh3FD1AQvJ+RvuueQTXMLq3rhOQrIIT2hk3W9s0CAwEAAaOCAkAwggI8MB0GA1Ud
DgQWBBSzHxGe3hVoqulEXaz6OpEJmRgxZjAfBgNVHSMEGDAWgBS8oOxZVkMkI3Qg
1Qa5tJjXUu4haDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZLRHNXVlpESkNOMElOVUd1YlNZMTFMdUlXZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTIvMjQzYjUzLTRiOTQtNDI0NC1hOGVjLTdjNTQ5ZjFlZDE2Yy8x
L3N4OFJudDRWYUtycFJGMnMtanFSQ1prWU1XWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIv
MjQzYjUzLTRiOTQtNDI0NC1hOGVjLTdjNTQ5ZjFlZDE2Yy8xL3ZLRHNXVlpESkNO
MElOVUd1YlNZMTFMdUlXZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBW
BggrBgEFBQcBBwEB/wRHMEUwHgQCAAEwGAMEAi7iaAMEBVzzAAMEBF+OoAMEAtlG
vDAjBAIAAjAdMBIDBwIgAUuYDcQDBwAgAUuYDcYDBwAgAUuZAAEwDQYJKoZIhvcN
AQELBQADggEBAMrNzq/YcQeWGT1xfhwACFn9NNbeqcq1k47zVjz3EGz8rtoqP6oM
V4qSnsWZRRzOCCiVAzB5M3Ki5frS9iJdprwOPDEZ+EzcsPivULUm6gz5scyUYgze
2qanPz6+zZwg+p9L2gw/db2CEaawZEMg3Xs1YsVXJzFMzCoTqQcARHbHQL0QCrA6
NiS2pvJkHV1BOhmAjdIYeSVyiFXjZg6+6XfiAziKkkmDs2nKiz4cW+G6khfpam0B
CX7aL8Rctn3MU1UzAe0EHXQiJ5YKkUCNLytWdXPs07Z1HKglbhwZuCo2w5CCL83E
3HxwdWEcAZfpMmeqnivEnCGZ7R9VYboz3AM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:05 2024 by rpki-client on console-ams.rpki-client.org