Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/hS7lcGwXpagmHkNOCYIDCdDR4Og.roa
File: hS7lcGwXpagmHkNOCYIDCdDR4Og.roa (raw, json)
Hash identifier: LHs+nPzZyWV+p1By5fc4c3mEyo2JOwbNDn2wuPOQ5qk=
Subject key identifier: 85:2E:E5:70:6C:17:A5:A8:26:1E:43:4E:09:82:03:09:D0:D1:E0:E8
Certificate issuer: /CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Certificate serial: 0183E3CA1AC78F843142E9E7F2645097D1E3
Authority key identifier: 3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/hS7lcGwXpagmHkNOCYIDCdDR4Og.roa
Signing time: Mon 17 Oct 2022 02:33:36 +0000
ROA not before: Mon 17 Oct 2022 02:33:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44347
IP address blocks: 185.14.32.0/23 maxlen: 23
185.14.32.0/22 maxlen: 22
188.65.48.0/22 maxlen: 22
188.65.48.0/21 maxlen: 21
188.65.52.0/22 maxlen: 22
46.43.192.0/19 maxlen: 19
46.43.192.0/18 maxlen: 18
46.43.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e3:ca:1a:c7:8f:84:31:42:e9:e7:f2:64:50:97:d1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Validity
Not Before: Oct 17 02:33:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=852ee5706c17a5a8261e434e09820309d0d1e0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:19:33:68:ad:11:9a:45:17:21:7c:8a:9b:6b:
b7:99:e7:4b:a5:a2:e1:3a:27:78:07:6e:02:d8:f4:
a7:5e:95:ea:97:32:84:5a:a1:2a:be:d8:c0:0d:0f:
22:54:61:74:d7:2c:ba:9f:7d:ce:f2:71:ed:9f:86:
a4:7c:08:97:a4:3f:fd:7c:ad:81:af:45:22:fd:ba:
40:69:5f:19:3d:00:38:13:f7:0f:44:1d:cb:60:21:
69:96:55:09:96:56:e1:3f:46:59:c4:2c:6a:c5:95:
c8:e8:87:0c:61:bb:60:4b:52:d0:ba:d0:f1:d1:e5:
98:6e:e9:68:88:da:b2:b6:c5:2c:37:69:f1:69:c8:
d9:f7:e7:ef:17:0e:7b:f9:e0:32:de:28:1b:08:81:
73:51:8d:ec:6a:4b:c2:c4:4a:1e:b5:c2:b1:37:c6:
d4:50:0d:0c:ea:82:ad:91:43:91:87:ce:86:a6:07:
85:73:37:fe:08:7a:37:e1:6e:f7:39:0f:d3:40:3e:
85:d3:66:96:da:69:79:4e:77:b9:cc:26:6d:63:8b:
cc:67:c8:49:1d:74:d3:e3:ad:b5:c9:fb:eb:a0:73:
a0:ce:98:bd:d9:d1:6e:af:5d:85:c2:0d:91:a5:5f:
54:8c:8b:50:6d:da:a2:00:b0:9e:7c:1f:6b:73:4b:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2E:E5:70:6C:17:A5:A8:26:1E:43:4E:09:82:03:09:D0:D1:E0:E8
X509v3 Authority Key Identifier:
keyid:3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/hS7lcGwXpagmHkNOCYIDCdDR4Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.43.192.0/18
185.14.32.0/22
188.65.48.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:ea:d2:e6:3b:9e:5a:4f:5a:db:6f:62:04:ac:32:81:4f:42:
ea:f0:04:7d:d7:0b:44:2b:06:db:3b:aa:63:28:17:1c:55:bb:
0d:31:ef:c7:02:d1:b0:f2:71:a1:26:50:ec:28:1e:b0:bf:c2:
58:72:a0:e8:f6:55:84:90:11:fb:9d:bb:be:c7:80:ab:65:df:
c9:19:15:37:df:e7:d5:45:f7:8d:98:20:ab:ad:02:aa:83:47:
eb:a0:af:60:04:8c:d0:82:c0:43:e5:56:93:98:b9:01:66:20:
57:50:4b:63:87:a7:e5:37:d8:5e:a2:11:b8:08:0d:47:b9:95:
f1:b2:b9:9f:5f:8b:ac:6a:a9:8f:54:29:f9:ab:06:ef:5d:42:
22:b1:e3:5e:cb:4b:27:b4:83:fd:48:b9:6a:5e:8a:5e:74:db:
0f:98:0c:a7:f1:1e:e1:28:ed:d9:01:1d:18:15:d7:e1:75:df:
b8:3a:96:28:1f:9b:39:ea:94:ab:38:aa:2b:83:bb:de:f6:21:
35:f2:65:8a:d2:b9:12:7c:b3:4d:03:6b:5c:f8:58:67:07:3f:
4f:48:f1:a2:39:bc:f1:8f:c3:37:c2:96:61:80:d5:ff:9b:d5:
17:af:91:ad:7a:ba:e5:4d:f6:93:2a:f4:1c:aa:bb:9d:09:ed:
c3:65:c3:ac
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYPjyhrHj4QxQunn8mRQl9HjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNTM5ZTUwMWRmZjM3Y2RjOTJjYmVlMGNkZGI5MmVkMmU4
MWMxM2MwHhcNMjIxMDE3MDIzMzM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTJlZTU3MDZjMTdhNWE4MjYxZTQzNGUwOTgyMDMwOWQwZDFlMGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBkzaK0RmkUXIXyKm2u3medLpaLh
Oid4B24C2PSnXpXqlzKEWqEqvtjADQ8iVGF01yy6n33O8nHtn4akfAiXpD/9fK2B
r0Ui/bpAaV8ZPQA4E/cPRB3LYCFpllUJllbhP0ZZxCxqxZXI6IcMYbtgS1LQutDx
0eWYbuloiNqytsUsN2nxacjZ9+fvFw57+eAy3igbCIFzUY3sakvCxEoetcKxN8bU
UA0M6oKtkUORh86GpgeFczf+CHo34W73OQ/TQD6F02aW2ml5Tne5zCZtY4vMZ8hJ
HXTT4621yfvroHOgzpi92dFur12Fwg2RpV9UjItQbdqiALCefB9rc0uSKQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIUu5XBsF6WoJh5DTgmCAwnQ0eDoMB8GA1UdIwQY
MBaAFDpTnlAd/zfNySy+4M3bku0ugcE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2xPZVVCM19OODNKTEw3Z3pkdVM3UzZCd1R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kODFhNDMtNDgyYS00NDMzLWE3YTIt
MDI3YzBkNjQyNGUzLzEvaFM3bGNHd1hwYWdtSGtOT0NZSURDZERSNE9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kODFhNDMtNDgyYS00NDMzLWE3YTItMDI3YzBkNjQyNGUz
LzEvT2xPZVVCM19OODNKTEw3Z3pkdVM3UzZCd1R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQGLivAAwQC
uQ4gAwQDvEEwMA0GCSqGSIb3DQEBCwUAA4IBAQCy6tLmO55aT1rbb2IErDKBT0Lq
8AR91wtEKwbbO6pjKBccVbsNMe/HAtGw8nGhJlDsKB6wv8JYcqDo9lWEkBH7nbu+
x4CrZd/JGRU33+fVRfeNmCCrrQKqg0froK9gBIzQgsBD5VaTmLkBZiBXUEtjh6fl
N9heohG4CA1HuZXxsrmfX4usaqmPVCn5qwbvXUIiseNey0sntIP9SLlqXopedNsP
mAyn8R7hKO3ZAR0YFdfhdd+4OpYoH5s56pSrOKorg7ve9iE18mWK0rkSfLNNA2tc
+FhnBz9PSPGiObzxj8M3wpZhgNX/m9UXr5GterrlTfaTKvQcqrudCe3DZcOs
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:10 2025 by rpki-client