Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/Ft7otKGK2oTPe_KTukIXhhKmMeo.roa
File: Ft7otKGK2oTPe_KTukIXhhKmMeo.roa (raw, json)
Hash identifier: iyI3NKiW7vyK85rwQh5TYLn4IBtK/KlEv70mZZnuPQ0=
Subject key identifier: 16:DE:E8:B4:A1:8A:DA:84:CF:7B:F2:93:BA:42:17:86:12:A6:31:EA
Certificate issuer: /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial: 01839D0315745E0340813195B39D410B5CE2
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/Ft7otKGK2oTPe_KTukIXhhKmMeo.roa
Signing time: Mon 03 Oct 2022 08:42:48 +0000
ROA not before: Mon 03 Oct 2022 08:42:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5398
IP address blocks: 46.21.20.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:03:15:74:5e:03:40:81:31:95:b3:9d:41:0b:5c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
Validity
Not Before: Oct 3 08:42:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16dee8b4a18ada84cf7bf293ba42178612a631ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:34:5d:07:82:c9:85:0a:cb:ae:43:48:61:
5f:99:38:73:fa:18:9a:95:24:66:20:f0:0e:30:fe:
fe:32:95:2e:f9:08:9a:14:b4:d7:27:81:c8:2f:f3:
84:58:80:14:0b:a0:66:d0:1b:ad:f3:fe:94:89:25:
ff:84:26:fb:3c:e7:81:91:9b:a0:c7:bc:e9:02:9d:
99:b9:b2:40:4a:6d:be:4d:16:09:54:af:e4:cc:6e:
3f:a2:81:4e:c5:c5:0d:44:47:87:e8:db:3c:26:47:
fb:ec:46:c0:04:87:c8:24:6a:8c:3a:68:80:a8:75:
4b:fc:2d:d9:cf:c8:81:b2:f3:34:1f:fc:5c:e7:43:
51:46:eb:09:7c:c4:a0:66:66:ea:15:06:eb:a5:76:
a2:95:d9:91:d4:1d:d0:92:2d:fe:6b:d9:23:31:3b:
6d:5c:39:ee:07:0e:3c:26:d8:f1:3f:46:7b:de:dd:
49:a2:13:a8:3b:99:99:2c:09:4d:8e:ce:c2:7d:35:
06:60:a4:18:01:0e:ca:86:00:67:00:9a:53:79:8c:
fd:83:82:88:6c:6b:bb:fe:52:87:10:5d:52:9b:94:
84:17:9a:10:e6:75:ed:46:f1:1d:36:60:6d:61:3a:
1f:65:f5:0e:48:e3:fe:60:b6:09:3c:85:3a:6e:41:
da:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DE:E8:B4:A1:8A:DA:84:CF:7B:F2:93:BA:42:17:86:12:A6:31:EA
X509v3 Authority Key Identifier:
keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/Ft7otKGK2oTPe_KTukIXhhKmMeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.20.0/23
Signature Algorithm: sha256WithRSAEncryption
22:a3:bb:a4:b4:6d:2a:5c:0d:b6:f1:9d:1c:e3:06:4c:55:f6:
24:f9:3c:0e:fd:64:4f:97:82:94:54:2b:e5:85:ca:19:d1:c7:
1e:60:50:c8:1b:94:66:6a:95:bc:18:e6:bb:81:f5:46:d9:a5:
f5:ec:be:67:f5:bd:bb:85:a7:90:d6:a1:de:b6:43:33:bb:e9:
7c:3e:c2:0e:0a:4b:29:45:d3:dc:e5:51:03:23:ab:02:8f:40:
95:60:72:c7:a2:e5:ca:7d:0e:92:fa:3b:be:5f:ad:67:d7:1e:
66:ea:e2:6c:f5:39:de:1f:94:44:5f:72:c3:ac:77:da:8f:06:
ad:cd:ff:37:16:e8:35:8c:d7:9e:9e:fb:82:6d:2d:e2:8b:75:
69:bf:de:78:4d:8e:da:48:ef:e0:c5:9c:7d:1c:e1:4e:1f:62:
cf:30:e1:3d:d3:11:e0:9c:a1:7d:a4:df:06:f4:41:b8:7e:bc:
d3:ed:66:ab:fb:67:71:df:ec:e0:e3:a8:c2:25:3f:da:71:0e:
3f:4b:97:75:a2:69:80:ef:6b:ed:08:bc:7d:01:22:6c:b5:17:
89:d3:af:62:7e:b1:58:16:f7:20:b0:d1:70:20:4e:7b:6c:da:
1d:10:5a:45:0b:7a:59:25:ad:06:3c:23:fc:cc:45:a9:c8:b9:
e7:f5:d8:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOdAxV0XgNAgTGVs51BC1ziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjc3MTBkZjhhZGQ2NGJiOTY4OGUwZjQ1ODFiZWE2N2U0
MDJjNjYwHhcNMjIxMDAzMDg0MjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmRlZThiNGExOGFkYTg0Y2Y3YmYyOTNiYTQyMTc4NjEyYTYzMWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Hw0XQeCyYUKy65DSGFfmThz+hia
lSRmIPAOMP7+MpUu+QiaFLTXJ4HIL/OEWIAUC6Bm0But8/6UiSX/hCb7POeBkZug
x7zpAp2ZubJASm2+TRYJVK/kzG4/ooFOxcUNREeH6Ns8Jkf77EbABIfIJGqMOmiA
qHVL/C3Zz8iBsvM0H/xc50NRRusJfMSgZmbqFQbrpXaildmR1B3Qki3+a9kjMTtt
XDnuBw48JtjxP0Z73t1JohOoO5mZLAlNjs7CfTUGYKQYAQ7KhgBnAJpTeYz9g4KI
bGu7/lKHEF1Sm5SEF5oQ5nXtRvEdNmBtYTofZfUOSOP+YLYJPIU6bkHajQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBbe6LShitqEz3vyk7pCF4YSpjHqMB8GA1UdIwQY
MBaAFDr3cQ34rdZLuWiOD0WBvqZ+QCxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZkeERmaXQxa3U1YUk0UFJZRy1wbjVBTEdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mNTlmZTMtOTU2ZS00OTM3LTg1OGQt
ZWVjNDE2YTg4NmY3LzEvRnQ3b3RLR0syb1RQZV9LVHVrSVhoaEttTWVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mNTlmZTMtOTU2ZS00OTM3LTg1OGQtZWVjNDE2YTg4NmY3
LzEvT3ZkeERmaXQxa3U1YUk0UFJZRy1wbjVBTEdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLhUUMA0G
CSqGSIb3DQEBCwUAA4IBAQAio7uktG0qXA228Z0c4wZMVfYk+TwO/WRPl4KUVCvl
hcoZ0cceYFDIG5RmapW8GOa7gfVG2aX17L5n9b27haeQ1qHetkMzu+l8PsIOCksp
RdPc5VEDI6sCj0CVYHLHouXKfQ6S+ju+X61n1x5m6uJs9TneH5REX3LDrHfajwat
zf83Fug1jNeenvuCbS3ii3Vpv954TY7aSO/gxZx9HOFOH2LPMOE90xHgnKF9pN8G
9EG4frzT7War+2dx3+zg46jCJT/acQ4/S5d1ommA72vtCLx9ASJstReJ069ifrFY
FvcgsNFwIE57bNodEFpFC3pZJa0GPCP8zEWpyLnn9dh9
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:47 2025 by rpki-client