Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/Kbt8HW_wC8Nrnd2w3VpGwgwzlzA.roa
File: Kbt8HW_wC8Nrnd2w3VpGwgwzlzA.roa (raw, json)
Hash identifier: hhggAb2gfCeYkzgmvFGShfSOVOQbb65MtkO3yHK4dhg=
Subject key identifier: 29:BB:7C:1D:6F:F0:0B:C3:6B:9D:DD:B0:DD:5A:46:C2:0C:33:97:30
Certificate issuer: /CN=db6eff73efff81277c2d5d38f0e46d6d12a708d7
Certificate serial: 01856EF8E41B79697994E519D0866EA78B6B
Authority key identifier: DB:6E:FF:73:EF:FF:81:27:7C:2D:5D:38:F0:E4:6D:6D:12:A7:08:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/227_c-__gSd8LV048ORtbRKnCNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/Kbt8HW_wC8Nrnd2w3VpGwgwzlzA.roa
Signing time: Sun 01 Jan 2023 20:14:43 +0000
ROA not before: Sun 01 Jan 2023 20:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33984
IP address blocks: 81.20.128.0/20 maxlen: 20
85.88.0.0/19 maxlen: 19
78.111.64.0/20 maxlen: 20
46.235.24.0/24 maxlen: 24
46.235.25.0/24 maxlen: 24
46.235.28.0/24 maxlen: 24
46.235.31.0/24 maxlen: 24
46.235.27.0/24 maxlen: 24
46.235.30.0/24 maxlen: 24
46.235.26.0/24 maxlen: 24
46.235.29.0/24 maxlen: 24
2a02:f98::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f8:e4:1b:79:69:79:94:e5:19:d0:86:6e:a7:8b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db6eff73efff81277c2d5d38f0e46d6d12a708d7
Validity
Not Before: Jan 1 20:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29bb7c1d6ff00bc36b9dddb0dd5a46c20c339730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:d8:ea:19:f1:0a:2c:a5:68:c5:91:b5:ea:
4c:dc:9e:dc:64:7b:76:c3:3d:62:ee:00:2a:19:73:
6d:32:1d:35:2d:01:21:b8:fa:da:3e:42:9f:21:1f:
ce:a9:03:76:bf:2a:c3:af:f6:9f:8c:38:02:6d:51:
cb:7f:25:a9:8f:db:f8:c3:78:51:73:b4:fa:51:d1:
69:9d:54:74:86:2c:85:9b:4a:b3:d0:85:a4:7a:f6:
00:e4:f4:12:9d:df:c0:fc:3d:f3:95:89:8b:80:ab:
60:74:a0:65:73:3c:f1:12:f4:e4:cc:7e:8e:dd:fc:
1f:d3:64:2a:62:b0:59:43:1e:58:28:46:ee:f1:bd:
da:a2:5e:09:f7:43:dd:8b:a9:b2:8e:40:28:67:90:
cd:e8:6c:cd:cd:ff:d1:65:b4:ef:de:e4:f6:d3:41:
1b:71:d4:42:b5:77:27:03:38:6f:71:68:8d:a0:c3:
90:59:90:bc:71:9a:6e:d9:8c:4e:86:05:d4:d0:89:
db:7c:02:88:47:78:cd:87:30:09:c7:b8:c2:f4:1d:
10:b8:2a:45:de:d3:a2:87:1c:f4:5d:09:f4:9d:88:
ec:e6:a5:3d:db:59:2f:27:c9:60:51:19:2c:11:20:
f1:41:09:92:e0:7c:cb:b5:68:95:e8:16:52:5f:20:
19:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BB:7C:1D:6F:F0:0B:C3:6B:9D:DD:B0:DD:5A:46:C2:0C:33:97:30
X509v3 Authority Key Identifier:
keyid:DB:6E:FF:73:EF:FF:81:27:7C:2D:5D:38:F0:E4:6D:6D:12:A7:08:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/227_c-__gSd8LV048ORtbRKnCNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/Kbt8HW_wC8Nrnd2w3VpGwgwzlzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.24.0/21
78.111.64.0/20
81.20.128.0/20
85.88.0.0/19
IPv6:
2a02:f98::/32
Signature Algorithm: sha256WithRSAEncryption
42:70:52:e5:c6:6f:f9:d2:f1:c9:bd:b8:e4:f0:35:2b:d4:b2:
07:90:e5:e0:db:36:77:c8:bc:05:cc:89:33:0c:1e:e8:0b:d9:
33:e8:45:87:05:c6:e5:b8:c2:09:88:71:21:ba:46:bf:89:e7:
2f:ab:19:35:e7:6c:85:52:92:69:dc:c0:13:a8:04:7a:e5:f2:
e4:e8:c5:52:2c:cf:7d:44:7d:f9:c1:7f:9a:bc:5c:28:b1:51:
7c:96:7a:ca:46:b4:01:7d:61:e0:1d:42:3d:f8:16:4b:04:c2:
b6:92:ca:db:a2:8f:c8:4a:78:71:b4:58:99:91:ef:71:32:4b:
10:23:ae:35:ca:50:f4:50:e6:07:e9:b4:0e:16:9f:fa:a4:31:
9b:9f:52:b6:c4:b2:66:fc:e9:8e:7e:f4:c6:75:9a:b0:c7:a6:
31:89:40:7f:80:a0:d9:5e:a0:66:4d:4f:9a:bb:73:c6:6d:36:
a5:4e:b7:dc:b1:c2:68:46:9c:e1:18:ce:ea:37:7d:bf:a8:44:
89:2c:b8:9e:a6:11:3d:d7:ad:06:27:1d:51:e3:8e:96:24:78:
31:23:65:7d:c3:42:f5:5f:ce:9b:2e:c9:8b:2a:25:6b:76:b6:
29:13:77:bd:6c:4d:cf:41:85:ce:cd:96:14:5a:92:0b:61:3f:
56:bf:00:4c
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVu+OQbeWl5lOUZ0IZup4trMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNmVmZjczZWZmZjgxMjc3YzJkNWQzOGYwZTQ2ZDZkMTJh
NzA4ZDcwHhcNMjMwMTAxMjAxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWJiN2MxZDZmZjAwYmMzNmI5ZGRkYjBkZDVhNDZjMjBjMzM5NzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeTY6hnxCiylaMWRtepM3J7cZHt2
wz1i7gAqGXNtMh01LQEhuPraPkKfIR/OqQN2vyrDr/afjDgCbVHLfyWpj9v4w3hR
c7T6UdFpnVR0hiyFm0qz0IWkevYA5PQSnd/A/D3zlYmLgKtgdKBlczzxEvTkzH6O
3fwf02QqYrBZQx5YKEbu8b3aol4J90Pdi6myjkAoZ5DN6GzNzf/RZbTv3uT200Eb
cdRCtXcnAzhvcWiNoMOQWZC8cZpu2YxOhgXU0InbfAKIR3jNhzAJx7jC9B0QuCpF
3tOihxz0XQn0nYjs5qU921kvJ8lgURksESDxQQmS4HzLtWiV6BZSXyAZIwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFCm7fB1v8AvDa53dsN1aRsIMM5cwMB8GA1UdIwQY
MBaAFNtu/3Pv/4EnfC1dOPDkbW0SpwjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjI3X2MtX19nU2Q4TFYwNDhPUnRiUktuQ05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80NGY1ZDItYjcwZS00ZGFlLTgyZTMt
MWU0NzgyYmU2NDQ1LzEvS2J0OEhXX3dDOE5ybmQydzNWcEd3Z3d6bHpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi80NGY1ZDItYjcwZS00ZGFlLTgyZTMtMWU0NzgyYmU2NDQ1
LzEvMjI3X2MtX19nU2Q4TFYwNDhPUnRiUktuQ05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLusYAwQE
Tm9AAwQEURSAAwQFVVgAMA0EAgACMAcDBQAqAg+YMA0GCSqGSIb3DQEBCwUAA4IB
AQBCcFLlxm/50vHJvbjk8DUr1LIHkOXg2zZ3yLwFzIkzDB7oC9kz6EWHBcbluMIJ
iHEhuka/iecvqxk152yFUpJp3MATqAR65fLk6MVSLM99RH35wX+avFwosVF8lnrK
RrQBfWHgHUI9+BZLBMK2ksrboo/ISnhxtFiZke9xMksQI641ylD0UOYH6bQOFp/6
pDGbn1K2xLJm/OmOfvTGdZqwx6YxiUB/gKDZXqBmTU+au3PGbTalTrfcscJoRpzh
GM7qN32/qESJLLiephE9160GJx1R446WJHgxI2V9w0L1X86bLsmLKiVrdrYpE3e9
bE3PQYXOzZYUWpILYT9WvwBM
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:48 2025 by rpki-client