Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/woHo79_8piuw8oVy3L_IjOFf5xs.roa
File: woHo79_8piuw8oVy3L_IjOFf5xs.roa (raw, json)
Hash identifier: dVspSI5lXk9oBDI2VghSe70ctt7Ju6sKUZBpX9jEPbs=
Subject key identifier: C2:81:E8:EF:DF:FC:A6:2B:B0:F2:85:72:DC:BF:C8:8C:E1:5F:E7:1B
Certificate issuer: /CN=73e373fee780eeab2a90422d0ad514e084a8d611
Certificate serial: 01BBB8C6
Authority key identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/woHo79_8piuw8oVy3L_IjOFf5xs.roa
Signing time: Sat 01 Jan 2022 11:00:14 +0000
ROA not before: Sat 01 Jan 2022 11:00:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34442
IP address blocks: 46.232.192.0/21 maxlen: 24
80.77.240.0/20 maxlen: 24
77.246.16.0/20 maxlen: 24
2a00:1990::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29079750 (0x1bbb8c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e373fee780eeab2a90422d0ad514e084a8d611
Validity
Not Before: Jan 1 11:00:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c281e8efdffca62bb0f28572dcbfc88ce15fe71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:3e:6b:44:96:7f:80:a1:40:43:9a:ce:22:
ad:7f:16:dd:84:9a:2f:16:86:5f:07:22:3e:43:3e:
d4:be:d0:3d:3e:4f:05:b4:25:42:dd:d0:b0:69:cc:
7b:ea:20:83:92:71:6f:a4:f3:12:02:6c:fe:09:a2:
09:63:ff:2b:39:4e:5b:f8:e2:57:0d:88:3f:46:35:
2d:62:99:28:a0:20:1d:2c:19:40:57:cf:a4:7d:89:
47:e7:0a:ae:7d:f0:20:0c:45:5d:73:46:12:07:85:
5a:b1:24:87:5f:48:02:de:11:05:37:20:38:f7:fe:
82:4b:28:34:74:dc:cc:53:09:f9:4c:e5:ca:37:a7:
cb:aa:bf:44:20:31:e9:fe:d3:04:cc:cd:b7:9d:5f:
3d:93:c2:0e:f5:88:c5:21:a4:e2:03:ce:b9:c4:cb:
44:e3:93:a4:4d:82:85:a1:f3:a2:c6:62:34:cd:d9:
0c:bb:19:b6:34:2c:3a:2d:f2:85:20:27:38:27:bb:
de:d0:e9:b4:cd:c6:b3:6d:41:9a:4f:a1:69:c3:6d:
82:a6:36:d4:de:c1:de:c6:c7:09:18:6e:46:f5:41:
3c:0e:7a:d5:2f:60:4b:84:e2:a8:32:7f:79:9f:48:
22:89:92:14:43:b1:fc:41:5a:54:e2:d8:7f:d8:30:
c9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:81:E8:EF:DF:FC:A6:2B:B0:F2:85:72:DC:BF:C8:8C:E1:5F:E7:1B
X509v3 Authority Key Identifier:
keyid:73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/woHo79_8piuw8oVy3L_IjOFf5xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.192.0/21
77.246.16.0/20
80.77.240.0/20
IPv6:
2a00:1990::/32
Signature Algorithm: sha256WithRSAEncryption
d1:a5:7c:50:7c:61:6f:f3:a5:9d:6e:f6:7f:c6:a8:22:c6:bd:
56:2e:65:42:ac:5e:98:61:1f:ea:ef:dd:4e:9e:77:6e:e9:d5:
d1:bb:6d:7f:a7:87:07:86:79:29:8d:94:09:07:43:5d:71:cc:
40:b0:dd:3f:1a:5c:37:6a:d0:a0:9c:41:64:51:47:6e:d9:64:
4b:ed:a0:f3:73:64:64:ad:aa:b1:13:a3:bb:2c:8b:5d:5c:9c:
e8:6c:56:eb:e8:63:bd:05:f6:9d:9f:4a:19:ea:89:81:22:90:
1a:80:aa:c9:46:a5:e1:34:70:80:63:4f:55:87:77:87:e2:20:
56:47:29:85:95:ba:64:2e:9c:f8:24:2d:01:cf:b8:11:af:38:
a8:7a:30:ff:ca:49:6b:65:e9:11:2d:78:10:dd:df:92:d5:6b:
68:fd:f1:af:1b:d5:0d:20:f9:35:4a:99:03:07:e6:d3:39:0c:
29:71:38:a6:3c:31:d3:f6:23:07:69:b7:7a:0a:1b:5f:f1:06:
3b:37:0a:ea:36:37:38:c3:32:a5:16:c8:2b:3f:27:27:3b:a9:
84:8b:4b:f5:90:a4:1d:00:d6:b9:7f:10:91:75:6e:c1:c7:fe:
a8:98:a0:97:19:60:b1:d3:b9:f6:13:a7:1a:cc:c0:cf:46:3d:
ce:5a:a0:80
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEAbu4xjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
M2UzNzNmZWU3ODBlZWFiMmE5MDQyMmQwYWQ1MTRlMDg0YThkNjExMB4XDTIyMDEw
MTExMDAxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzI4MWU4ZWZkZmZj
YTYyYmIwZjI4NTcyZGNiZmM4OGNlMTVmZTcxYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALnJPmtEln+AoUBDms4irX8W3YSaLxaGXwciPkM+1L7QPT5P
BbQlQt3QsGnMe+ogg5Jxb6TzEgJs/gmiCWP/KzlOW/jiVw2IP0Y1LWKZKKAgHSwZ
QFfPpH2JR+cKrn3wIAxFXXNGEgeFWrEkh19IAt4RBTcgOPf+gksoNHTczFMJ+Uzl
yjeny6q/RCAx6f7TBMzNt51fPZPCDvWIxSGk4gPOucTLROOTpE2ChaHzosZiNM3Z
DLsZtjQsOi3yhSAnOCe73tDptM3Gs21Bmk+hacNtgqY21N7B3sbHCRhuRvVBPA56
1S9gS4TiqDJ/eZ9IIomSFEOx/EFaVOLYf9gwyR0CAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBTCgejv3/ymK7DyhXLcv8iM4V/nGzAfBgNVHSMEGDAWgBRz43P+54DuqyqQ
Qi0K1RTghKjWETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2MtTnpfdWVBN3FzcWtFSXRDdFVVNElTbzFoRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTYvZTBlNDMzLTliMzYtNDdhNi05M2EyLTA0MWZkNGM2ZmZkNC8x
L3dvSG83OV84cGl1dzhvVnkzTF9Jak9GZjV4cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYv
ZTBlNDMzLTliMzYtNDdhNi05M2EyLTA0MWZkNGM2ZmZkNC8xL2MtTnpfdWVBN3Fz
cWtFSXRDdFVVNElTbzFoRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAy7owAMEBE32EAMEBFBN8DANBAIA
AjAHAwUAKgAZkDANBgkqhkiG9w0BAQsFAAOCAQEA0aV8UHxhb/OlnW72f8aoIsa9
Vi5lQqxemGEf6u/dTp53bunV0bttf6eHB4Z5KY2UCQdDXXHMQLDdPxpcN2rQoJxB
ZFFHbtlkS+2g83NkZK2qsROjuyyLXVyc6GxW6+hjvQX2nZ9KGeqJgSKQGoCqyUal
4TRwgGNPVYd3h+IgVkcphZW6ZC6c+CQtAc+4Ea84qHow/8pJa2XpES14EN3fktVr
aP3xrxvVDSD5NUqZAwfm0zkMKXE4pjwx0/YjB2m3egobX/EGOzcK6jY3OMMypRbI
Kz8nJzuphItL9ZCkHQDWuX8QkXVuwcf+qJiglxlgsdO59hOnGszAz0Y9zlqggA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:42 2023 by rpki-client on console-ams.rpki-client.org