Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/p7X6mMRRz_TmkVqdBy1SbQangfU.roa
File: p7X6mMRRz_TmkVqdBy1SbQangfU.roa (raw, json)
Hash identifier: cdV4JU8nBXF9W7fDCHuX6lRyGg/DWGE6GYYAUpQe4Es=
Subject key identifier: A7:B5:FA:98:C4:51:CF:F4:E6:91:5A:9D:07:2D:52:6D:06:A7:81:F5
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 06B072A8
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/p7X6mMRRz_TmkVqdBy1SbQangfU.roa
Signing time: Sat 01 Jan 2022 14:05:57 +0000
ROA not before: Sat 01 Jan 2022 14:05:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60460
IP address blocks: 176.227.170.0/23 maxlen: 23
176.227.172.0/22 maxlen: 22
46.231.24.0/24 maxlen: 24
46.231.28.0/24 maxlen: 24
46.231.29.0/24 maxlen: 24
46.231.27.0/24 maxlen: 24
46.231.25.0/24 maxlen: 24
46.231.26.0/24 maxlen: 24
46.231.30.0/24 maxlen: 24
46.231.31.0/24 maxlen: 24
185.88.240.0/23 maxlen: 23
2a04:2640::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112226984 (0x6b072a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: Jan 1 14:05:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7b5fa98c451cff4e6915a9d072d526d06a781f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:61:0d:64:2b:b3:9a:2e:f7:fb:45:76:ab:
b6:ee:03:de:71:6b:a9:07:82:77:b5:7b:02:86:21:
d7:5e:6a:b9:fc:59:58:32:46:84:1d:34:19:da:49:
28:f2:e2:a9:6c:1a:1e:a2:44:90:fb:65:b1:96:b4:
54:32:28:a8:bd:07:61:46:c6:f9:a0:8c:95:ab:4d:
b6:d7:bb:8b:6e:ce:94:ed:03:36:9e:84:65:6e:bc:
6e:56:03:25:bc:ce:f1:9c:fb:81:e1:84:86:b5:15:
a5:3a:df:d3:5b:3a:95:0c:fa:9d:33:0e:03:95:08:
ac:3c:9c:0a:48:b3:89:22:b2:8e:6b:1d:8e:d3:1c:
fa:c5:be:14:e1:1d:44:75:51:1b:33:99:80:2a:02:
84:4f:7f:92:2b:91:b4:20:8c:6f:bd:4d:3e:26:51:
28:91:90:cf:04:f0:f5:7d:38:fa:3d:5a:5f:cd:77:
83:86:ea:d9:ca:64:6e:ed:43:e4:d8:53:77:84:7e:
f7:ad:1d:6b:49:c1:a0:28:bf:a1:b8:71:bf:02:5a:
91:f3:c2:f6:8a:1e:bf:3f:8e:2d:a9:56:35:3b:a2:
9b:8a:f4:a8:5d:46:1f:91:47:c7:cc:e7:96:8f:1e:
c6:c5:49:13:8d:37:1c:02:58:69:1f:a1:62:b1:dc:
e3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B5:FA:98:C4:51:CF:F4:E6:91:5A:9D:07:2D:52:6D:06:A7:81:F5
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/p7X6mMRRz_TmkVqdBy1SbQangfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.24.0/21
176.227.170.0-176.227.175.255
185.88.240.0/23
IPv6:
2a04:2640::/29
Signature Algorithm: sha256WithRSAEncryption
24:1d:6f:39:bd:e7:50:e3:43:29:2a:23:d5:88:53:f9:15:ea:
88:57:15:3a:3f:83:77:f5:04:59:84:19:b9:1a:8f:e3:d4:ec:
a9:16:00:f4:fc:2f:9a:05:42:77:1c:df:bb:a6:c9:d4:f2:f6:
7b:9c:52:7a:24:c9:54:2a:7a:12:11:2e:7b:7e:5d:c1:17:70:
14:d3:22:6a:be:e2:75:ab:75:10:83:b6:df:80:d2:ad:5d:db:
05:57:49:26:71:78:c0:0d:1a:25:6f:64:57:2d:e7:2c:34:62:
1a:15:1c:d1:a9:88:5e:0e:8f:b4:d3:a7:dd:69:cf:3a:f7:da:
7e:36:fa:76:6a:f2:91:12:18:44:eb:69:8b:6f:7d:6b:8d:7e:
2c:4b:6b:b0:0f:5a:48:0f:b1:a9:d4:80:3c:b5:b2:d1:2f:2a:
a4:96:a2:84:e0:35:21:da:82:e9:a9:0f:a5:9d:d3:30:d0:90:
ca:2c:e5:cf:5b:6d:4e:fb:ca:a9:2f:ab:c2:8c:b8:57:31:22:
1b:be:af:8f:4a:b2:f8:76:e1:6b:45:40:65:ed:d2:a6:37:1d:
3c:98:f4:89:18:00:fd:89:de:d7:61:d2:da:a0:8f:c2:22:af:
49:29:2e:15:3e:62:fb:24:ee:3d:87:9f:f4:f0:23:18:b7:72:
15:1c:e9:bf
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIEBrByqDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YzVkODY5NzRhN2I2MjQxOTJlYzhkODM0Y2YyOTA2ZTEzMDJlNDMxMB4XDTIyMDEw
MTE0MDU1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTdiNWZhOThjNDUx
Y2ZmNGU2OTE1YTlkMDcyZDUyNmQwNmE3ODFmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMHyYQ1kK7OaLvf7RXartu4D3nFrqQeCd7V7AoYh115qufxZ
WDJGhB00GdpJKPLiqWwaHqJEkPtlsZa0VDIoqL0HYUbG+aCMlatNtte7i27OlO0D
Np6EZW68blYDJbzO8Zz7geGEhrUVpTrf01s6lQz6nTMOA5UIrDycCkiziSKyjmsd
jtMc+sW+FOEdRHVRGzOZgCoChE9/kiuRtCCMb71NPiZRKJGQzwTw9X04+j1aX813
g4bq2cpkbu1D5NhTd4R+960da0nBoCi/obhxvwJakfPC9ooevz+OLalWNTuim4r0
qF1GH5FHx8znlo8exsVJE403HAJYaR+hYrHc4/MCAwEAAaOCAiwwggIoMB0GA1Ud
DgQWBBSntfqYxFHP9OaRWp0HLVJtBqeB9TAfBgNVHSMEGDAWgBRcXYaXSntiQZLs
jYNM8pBuEwLkMTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hGMkdsMHA3WWtHUzdJMkRUUEtRYmhNQzVERS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWIvZjU1YjU3LWVjYmEtNGQzZC05YTgxLWJkODAyZmM0YWE5NC8x
L3A3WDZtTVJSel9UbWtWcWRCeTFTYlFhbmdmVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIv
ZjU1YjU3LWVjYmEtNGQzZC05YTgxLWJkODAyZmM0YWE5NC8xL1hGMkdsMHA3WWtH
UzdJMkRUUEtRYmhNQzVERS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBC
BggrBgEFBQcBBwEB/wQzMDEwIAQCAAEwGgMEAy7nGDAMAwQBsOOqAwQEsOOgAwQB
uVjwMA0EAgACMAcDBQMqBCZAMA0GCSqGSIb3DQEBCwUAA4IBAQAkHW85vedQ40Mp
KiPViFP5FeqIVxU6P4N39QRZhBm5Go/j1OypFgD0/C+aBUJ3HN+7psnU8vZ7nFJ6
JMlUKnoSES57fl3BF3AU0yJqvuJ1q3UQg7bfgNKtXdsFV0kmcXjADRolb2RXLecs
NGIaFRzRqYheDo+006fdac8699p+Nvp2avKREhhE62mLb31rjX4sS2uwD1pID7Gp
1IA8tbLRLyqklqKE4DUh2oLpqQ+lndMw0JDKLOXPW21O+8qpL6vCjLhXMSIbvq+P
SrL4duFrRUBl7dKmNx08mPSJGAD9id7XYdLaoI/CIq9JKS4VPmL7JO49h5/08CMY
t3IVHOm/
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:22 2025 by rpki-client