Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/7ayBK0N0Z1wBRLqdvrk_d-lmKHk.roa
File: 7ayBK0N0Z1wBRLqdvrk_d-lmKHk.roa (raw, json)
Hash identifier: 0cvnp/Y7WRO1Y8sqBl2v1/cyLykbdwrhCOhi7wgcFug=
Subject key identifier: ED:AC:81:2B:43:74:67:5C:01:44:BA:9D:BE:B9:3F:77:E9:66:28:79
Certificate issuer: /CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Certificate serial: 01872531D84F57FE0145AD86EA9987713B46
Authority key identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/7ayBK0N0Z1wBRLqdvrk_d-lmKHk.roa
Signing time: Mon 27 Mar 2023 22:30:36 +0000
ROA not before: Mon 27 Mar 2023 22:30:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51582
IP address blocks: 185.89.124.0/22 maxlen: 24
46.55.216.0/21 maxlen: 24
46.55.224.0/20 maxlen: 24
46.55.128.0/18 maxlen: 24
46.55.242.0/23 maxlen: 24
46.55.241.0/24 maxlen: 24
46.55.244.0/22 maxlen: 24
46.55.248.0/22 maxlen: 24
185.240.144.0/22 maxlen: 24
46.55.192.0/20 maxlen: 24
2a03:8340::/32 maxlen: 48
2a03:8340:50::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:25:31:d8:4f:57:fe:01:45:ad:86:ea:99:87:71:3b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Validity
Not Before: Mar 27 22:30:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edac812b4374675c0144ba9dbeb93f77e9662879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:7e:98:2d:d9:15:db:7f:06:37:b5:25:dc:
1a:7f:5a:5b:3d:2e:65:5f:82:11:05:0f:b6:f7:c0:
8f:91:e8:3c:26:19:80:b6:20:af:f1:48:fb:af:dc:
3c:15:33:a2:f8:10:a9:62:f9:66:a2:14:6b:58:20:
68:bc:db:04:4f:c7:39:df:5a:48:3d:7f:ac:5a:55:
60:e0:c3:63:db:cb:8b:f1:4e:76:6b:a2:bb:5c:c5:
68:01:47:79:05:89:24:ce:7b:63:fa:b3:43:e9:5e:
63:41:54:c3:af:be:36:6e:19:3a:aa:26:72:f3:77:
2a:ed:d3:a9:7e:65:54:20:81:ae:cb:4c:bf:30:de:
0d:04:2e:3b:2e:57:ec:3b:3f:94:40:9d:b7:4b:80:
59:2d:f0:0c:89:66:ac:4b:25:be:1b:92:64:85:2f:
ab:cb:2c:39:67:a8:18:d7:f3:2a:a7:ec:e0:06:73:
f0:35:2f:94:84:04:46:df:c9:a9:75:ee:a7:d1:d1:
4b:d7:ac:50:7e:a5:c8:a2:94:fb:be:e9:04:89:c2:
b7:e3:64:f4:e9:6e:71:36:52:38:3e:56:38:6f:9e:
fb:13:57:14:86:3e:bc:e9:ca:eb:bf:26:9e:1c:65:
7b:23:d4:70:a6:ff:2f:80:a4:78:ad:01:ae:80:b7:
22:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AC:81:2B:43:74:67:5C:01:44:BA:9D:BE:B9:3F:77:E9:66:28:79
X509v3 Authority Key Identifier:
keyid:0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/7ayBK0N0Z1wBRLqdvrk_d-lmKHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.55.128.0-46.55.207.255
46.55.216.0-46.55.239.255
46.55.241.0-46.55.251.255
185.89.124.0/22
185.240.144.0/22
IPv6:
2a03:8340::/32
Signature Algorithm: sha256WithRSAEncryption
8a:6d:02:56:8e:f5:2d:46:7e:bf:a5:6b:e3:c9:cf:98:a9:45:
82:d6:5e:d2:71:f1:ed:a5:f9:de:78:d6:1c:b3:ac:47:9e:79:
0a:fc:e0:2d:63:d5:23:90:c8:6c:2b:bc:6e:1a:4a:3f:c5:52:
87:04:36:c5:9c:d6:21:ae:f1:6d:ea:b3:0f:14:31:75:60:82:
53:8e:fb:bc:bc:2c:67:cf:48:3e:15:b7:da:c7:0c:c2:e3:1d:
a5:80:1c:ca:62:45:f5:e6:a2:45:c3:3f:75:46:52:58:8c:1e:
56:60:35:0a:01:bf:a9:4b:f9:35:40:ad:ca:50:87:c7:3e:4f:
e0:8f:3b:ce:93:51:54:98:60:b7:b1:7a:c1:fd:2b:0c:47:3c:
b2:42:57:68:2f:8e:b7:9a:e5:c0:26:da:40:ab:de:14:44:35:
3a:e5:7f:c5:e0:6d:70:67:53:18:bd:48:be:ef:6a:b7:7e:ba:
0c:32:7d:7a:89:7b:18:ea:ce:ae:fc:41:e3:ef:ae:92:5f:54:
f4:13:6a:1a:54:7e:fd:93:81:06:54:06:99:c1:e3:c7:6a:f8:
b4:85:26:51:af:f3:00:5b:aa:66:75:e8:42:ce:05:7a:1f:19:
b1:a1:2f:cb:85:9d:8f:20:71:40:35:e0:2a:0d:89:ec:72:ea:
f0:74:8a:19
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAYclMdhPV/4BRa2G6pmHcTtGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjA4N2IwZjY3MTZkMjNjOGQyM2ViM2QwMzkyYjZiZjY0
MmFkNGIwHhcNMjMwMzI3MjIzMDM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGFjODEyYjQzNzQ2NzVjMDE0NGJhOWRiZWI5M2Y3N2U5NjYyODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBR+mC3ZFdt/Bje1Jdwaf1pbPS5l
X4IRBQ+298CPkeg8JhmAtiCv8Uj7r9w8FTOi+BCpYvlmohRrWCBovNsET8c531pI
PX+sWlVg4MNj28uL8U52a6K7XMVoAUd5BYkkzntj+rND6V5jQVTDr742bhk6qiZy
83cq7dOpfmVUIIGuy0y/MN4NBC47LlfsOz+UQJ23S4BZLfAMiWasSyW+G5JkhS+r
yyw5Z6gY1/Mqp+zgBnPwNS+UhARG38mpde6n0dFL16xQfqXIopT7vukEicK342T0
6W5xNlI4PlY4b577E1cUhj686crrvyaeHGV7I9Rwpv8vgKR4rQGugLciHQIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFO2sgStDdGdcAUS6nb65P3fpZih5MB8GA1UdIwQY
MBaAFA0gh7D2cW0jyNI+s9A5K2v2Qq1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNDSHNQWnhiU1BJMGo2ejBEa3JhX1pDclVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mY2I3MjktYzI4OC00ZTE1LTkzODQt
YTIwZDJkNzUxZWI1LzEvN2F5QkswTjBaMXdCUkxxZHZya19kLWxtS0hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mY2I3MjktYzI4OC00ZTE1LTkzODQtYTIwZDJkNzUxZWI1
LzEvRFNDSHNQWnhiU1BJMGo2ejBEa3JhX1pDclVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2MAwDBAcuN4AD
BAQuN8AwDAMEAy432AMEBC434DAMAwQALjfxAwQCLjf4AwQCuVl8AwQCufCQMA0E
AgACMAcDBQAqA4NAMA0GCSqGSIb3DQEBCwUAA4IBAQCKbQJWjvUtRn6/pWvjyc+Y
qUWC1l7ScfHtpfneeNYcs6xHnnkK/OAtY9UjkMhsK7xuGko/xVKHBDbFnNYhrvFt
6rMPFDF1YIJTjvu8vCxnz0g+FbfaxwzC4x2lgBzKYkX15qJFwz91RlJYjB5WYDUK
Ab+pS/k1QK3KUIfHPk/gjzvOk1FUmGC3sXrB/SsMRzyyQldoL463muXAJtpAq94U
RDU65X/F4G1wZ1MYvUi+72q3froMMn16iXsY6s6u/EHj766SX1T0E2oaVH79k4EG
VAaZwePHavi0hSZRr/MAW6pmdehCzgV6HxmxoS/LhZ2PIHFANeAqDYnscurwdIoZ
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:00:05 2025 by rpki-client