Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/loXcDZtn3dWcA_ks0bL3GMBrN6o.roa
File: loXcDZtn3dWcA_ks0bL3GMBrN6o.roa (raw, json)
Hash identifier: FOmWJGkcPNUbQUW3UJ9ooTJxorMjXQHAWSYOLWB35mE=
Subject key identifier: 96:85:DC:0D:9B:67:DD:D5:9C:03:F9:2C:D1:B2:F7:18:C0:6B:37:AA
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0189E5990588957E09BB028216ED0D3C63B9
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/loXcDZtn3dWcA_ks0bL3GMBrN6o.roa
Signing time: Fri 11 Aug 2023 17:15:58 +0000
ROA not before: Fri 11 Aug 2023 17:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9318
IP address blocks: 46.8.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e5:99:05:88:95:7e:09:bb:02:82:16:ed:0d:3c:63:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Aug 11 17:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9685dc0d9b67ddd59c03f92cd1b2f718c06b37aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e8:8f:1f:9d:94:b6:f1:c7:15:73:8f:97:eb:
a8:b4:d4:f8:1e:f3:34:43:84:5c:ae:c8:fd:1f:32:
70:c0:52:22:6a:23:e2:4f:b1:36:26:34:02:d2:b1:
3a:ba:43:19:3b:e3:ad:dd:df:5a:0e:7d:d6:50:4e:
3b:0c:7a:a3:4d:c7:93:af:61:40:13:3e:3d:2f:24:
ed:89:f6:65:2d:2b:10:c7:ae:d8:b3:47:d4:dc:43:
07:4d:ca:17:7d:65:cb:a9:24:1f:e5:8c:3b:73:a2:
0d:66:0f:d5:65:ff:a2:de:63:c6:34:6b:21:59:09:
6b:91:41:59:1e:39:4b:39:6d:f5:d5:bb:d1:0c:91:
3a:05:f8:e5:5d:9a:4e:2b:fb:d8:ae:a7:30:4b:0d:
c9:55:07:36:e3:af:7b:67:35:91:1b:ae:ca:87:80:
03:66:91:58:d8:ad:94:1b:8d:a5:1a:3d:43:55:62:
49:22:03:2a:5a:76:99:52:96:25:39:84:28:f8:dd:
3e:68:9a:fe:e2:d5:15:e8:cf:aa:43:84:6e:1a:4a:
c5:fa:be:64:e5:a6:47:24:33:38:7a:d8:46:f2:cb:
24:f8:eb:90:66:04:70:fd:67:9e:e6:7b:69:90:e1:
6f:65:67:89:9b:b1:d7:35:be:17:45:4e:bd:ec:f8:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:85:DC:0D:9B:67:DD:D5:9C:03:F9:2C:D1:B2:F7:18:C0:6B:37:AA
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/loXcDZtn3dWcA_ks0bL3GMBrN6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.99.0/24
Signature Algorithm: sha256WithRSAEncryption
88:3e:fb:81:1a:76:89:2f:06:70:e6:e0:07:19:eb:b2:c7:17:
7f:20:bc:21:78:ef:41:ea:1d:94:4b:41:3d:89:bd:b9:f7:77:
e9:23:a8:e1:ad:31:08:17:91:33:7c:17:26:1f:15:25:27:2e:
d8:b3:36:6c:50:4e:5b:ad:9c:96:cc:7d:3b:40:8c:c8:d0:07:
a9:67:31:ad:18:78:bf:ff:2c:2a:9a:49:d5:ac:9f:3b:e5:d5:
1d:86:b9:0d:26:dd:92:08:8e:8f:fb:15:f8:0a:50:8d:21:25:
19:5d:95:9a:29:50:12:d3:1c:a0:65:8c:4c:ee:00:53:a6:d3:
0a:c8:b1:66:4c:5e:fb:55:a6:3c:1c:17:e1:88:77:26:33:3c:
ca:41:11:ac:f4:04:96:a7:5e:64:06:b2:08:db:d7:ab:24:1a:
fc:76:19:f8:eb:6f:bd:52:b9:e6:46:b2:fd:0a:56:4e:e5:38:
a9:e5:0e:7d:55:d4:43:dd:62:58:47:28:1e:9f:7d:23:22:d6:
5e:68:e1:c3:bd:dd:b9:dd:9d:78:28:b2:cd:d1:49:7a:51:92:
5b:56:fc:2c:8a:22:2d:bd:e7:4a:d4:b3:6e:c8:55:a6:bf:f7:
a9:26:d2:16:f2:bc:37:73:2d:7f:8f:a7:4f:06:c0:84:3b:72:
98:3f:59:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnlmQWIlX4JuwKCFu0NPGO5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Mzc1ODE0MzQ0ZGYwYmY2ZDAxNzczM2FjZGM0ODhmMDAy
NjMxYjIwHhcNMjMwODExMTcxNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Njg1ZGMwZDliNjdkZGQ1OWMwM2Y5MmNkMWIyZjcxOGMwNmIzN2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieiPH52UtvHHFXOPl+uotNT4HvM0
Q4Rcrsj9HzJwwFIiaiPiT7E2JjQC0rE6ukMZO+Ot3d9aDn3WUE47DHqjTceTr2FA
Ez49LyTtifZlLSsQx67Ys0fU3EMHTcoXfWXLqSQf5Yw7c6INZg/VZf+i3mPGNGsh
WQlrkUFZHjlLOW311bvRDJE6BfjlXZpOK/vYrqcwSw3JVQc24697ZzWRG67Kh4AD
ZpFY2K2UG42lGj1DVWJJIgMqWnaZUpYlOYQo+N0+aJr+4tUV6M+qQ4RuGkrF+r5k
5aZHJDM4ethG8ssk+OuQZgRw/Wee5ntpkOFvZWeJm7HXNb4XRU697PiIewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJaF3A2bZ93VnAP5LNGy9xjAazeqMB8GA1UdIwQY
MBaAFNQ3WBQ0TfC/bQF3M6zcSI8AJjGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2Yt
MzY3MWQ2N2ViOWY4LzEvbG9YY0RadG4zZFdjQV9rczBiTDNHTUJyTjZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2YtMzY3MWQ2N2ViOWY4
LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALghjMA0G
CSqGSIb3DQEBCwUAA4IBAQCIPvuBGnaJLwZw5uAHGeuyxxd/ILwheO9B6h2US0E9
ib2593fpI6jhrTEIF5EzfBcmHxUlJy7YszZsUE5brZyWzH07QIzI0AepZzGtGHi/
/ywqmknVrJ875dUdhrkNJt2SCI6P+xX4ClCNISUZXZWaKVAS0xygZYxM7gBTptMK
yLFmTF77VaY8HBfhiHcmMzzKQRGs9ASWp15kBrII29erJBr8dhn462+9UrnmRrL9
ClZO5Tip5Q59VdRD3WJYRygen30jItZeaOHDvd253Z14KLLN0Ul6UZJbVvwsiiIt
vedK1LNuyFWmv/epJtIW8rw3cy1/j6dPBsCEO3KYP1nV
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:21 2025 by rpki-client