Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/lblJB-wYdwUA6tmm16V1CMdzUSI.roa
File: lblJB-wYdwUA6tmm16V1CMdzUSI.roa (raw, json)
Hash identifier: Ia986BeNTEaMIgh5+dOgwxs2tFBX0SBCLKG0zuuSFtc=
Subject key identifier: 95:B9:49:07:EC:18:77:05:00:EA:D9:A6:D7:A5:75:08:C7:73:51:22
Certificate issuer: /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Certificate serial: 014179
Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/lblJB-wYdwUA6tmm16V1CMdzUSI.roa
Signing time: Fri 04 Mar 2022 09:03:17 +0000
ROA not before: Fri 04 Mar 2022 09:03:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 46.28.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82297 (0x14179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Validity
Not Before: Mar 4 09:03:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95b94907ec18770500ead9a6d7a57508c7735122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:43:94:8c:e9:5c:53:ff:de:b3:f6:00:0e:50:
89:5b:e2:00:19:32:cc:d9:da:75:29:67:09:28:40:
10:ab:6b:92:af:77:58:1a:b1:98:71:36:f9:51:76:
6a:ce:3b:f1:cb:12:c5:ed:5f:27:8b:66:5d:37:2b:
79:66:10:70:a1:e3:0c:66:9d:1e:3b:b6:2b:3c:62:
00:ee:ad:3d:1c:27:19:64:78:96:34:26:eb:ad:b0:
6e:5e:f2:dd:76:f4:22:75:53:5d:05:91:4f:12:e9:
77:10:87:8e:52:75:79:f0:db:8c:5b:94:85:cd:6e:
86:b6:00:fd:70:6a:10:7f:44:0d:be:23:3f:e7:21:
94:f1:06:55:d0:73:fe:02:42:38:29:fb:83:5e:e8:
85:82:df:0f:0b:13:e4:92:1c:6e:65:d8:55:80:d0:
d2:50:01:f2:48:a7:48:62:20:8d:e7:51:9b:ea:b7:
b7:39:b2:76:6e:00:4d:ad:a3:78:a4:cc:3b:fe:68:
9b:de:63:8e:46:f9:33:1a:2e:b5:f7:d9:ea:e0:4f:
35:c2:aa:1f:85:56:e9:46:42:82:29:af:1c:fb:c8:
ec:e0:1e:81:f3:2c:3e:05:d4:92:ce:b0:44:8f:09:
1b:0d:b7:a3:e4:a2:c0:89:5c:5e:79:49:11:d7:1d:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B9:49:07:EC:18:77:05:00:EA:D9:A6:D7:A5:75:08:C7:73:51:22
X509v3 Authority Key Identifier:
keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/lblJB-wYdwUA6tmm16V1CMdzUSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.184.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:2b:cf:88:38:57:16:70:a8:7a:c3:66:2c:60:16:79:86:8e:
28:24:21:6a:2d:a8:9c:cc:d5:38:72:06:70:12:f6:7f:72:60:
21:fe:35:b7:54:dc:51:91:3e:4e:9c:83:b4:88:a1:99:aa:54:
f5:c4:7e:e9:04:a8:46:fc:58:f3:71:ee:be:a6:b4:2d:a1:3c:
5f:54:94:4a:90:71:09:ef:1f:d1:56:41:c4:40:a4:63:5e:3e:
11:b3:dd:c9:d1:4c:85:b5:fe:a1:f6:08:15:c0:c5:41:db:29:
df:b2:1c:b4:db:5a:7f:51:8e:a5:81:ad:6c:8f:63:c5:2f:c6:
59:9c:70:f0:5d:66:b6:a7:de:f5:48:88:78:73:0b:7b:cb:a2:
b4:7d:67:92:5a:b9:bd:aa:e6:aa:c7:41:7a:e2:4c:b8:18:ee:
60:eb:73:6f:46:9d:a6:ce:15:e2:dd:af:b0:f3:9b:7e:1c:58:
b3:a7:d9:83:d8:ab:20:8f:fa:2c:2e:ab:51:52:0e:b2:ab:cd:
cb:ab:22:9d:8a:50:02:d6:b1:0c:e7:e4:eb:3e:0b:c5:2e:12:
23:17:6a:17:b6:3d:e5:4e:98:19:3e:41:9e:af:a2:19:e3:0b:
9d:10:84:79:db:39:f2:59:e4:fc:62:f3:ff:d8:13:ba:49:e7:
43:e3:93:c8
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAUF5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYy
Yjk4ZjU4NGJjMTIzNDc4MGEyYzQ3ZmM4ODMyNGQ0OWVlMGU2ZjQwHhcNMjIwMzA0
MDkwMzE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5NWI5NDkwN2VjMTg3
NzA1MDBlYWQ5YTZkN2E1NzUwOGM3NzM1MTIyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj0OUjOlcU//es/YADlCJW+IAGTLM2dp1KWcJKEAQq2uSr3dY
GrGYcTb5UXZqzjvxyxLF7V8ni2ZdNyt5ZhBwoeMMZp0eO7YrPGIA7q09HCcZZHiW
NCbrrbBuXvLddvQidVNdBZFPEul3EIeOUnV58NuMW5SFzW6GtgD9cGoQf0QNviM/
5yGU8QZV0HP+AkI4KfuDXuiFgt8PCxPkkhxuZdhVgNDSUAHySKdIYiCN51Gb6re3
ObJ2bgBNraN4pMw7/mib3mOORvkzGi6199nq4E81wqofhVbpRkKCKa8c+8js4B6B
8yw+BdSSzrBEjwkbDbej5KLAiVxeeUkR1x0YoQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFJW5SQfsGHcFAOrZpteldQjHc1EiMB8GA1UdIwQYMBaAFPK5j1hLwSNHgKLE
f8iDJNSe4Ob0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
OHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYtNGVjMWFiZTA4NWVmLzEv
bGJsSkItd1lkd1VBNnRtbTE2VjFDTWR6VVNJLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9m
ZmNiMjUtMTQ1ZS00ZWY4LTkwNDYtNGVjMWFiZTA4NWVmLzEvOHJtUFdFdkJJMGVB
b3NSX3lJTWsxSjdnNXZRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhy4MA0GCSqGSIb3DQEBCwUAA4IB
AQDDK8+IOFcWcKh6w2YsYBZ5ho4oJCFqLaiczNU4cgZwEvZ/cmAh/jW3VNxRkT5O
nIO0iKGZqlT1xH7pBKhG/Fjzce6+prQtoTxfVJRKkHEJ7x/RVkHEQKRjXj4Rs93J
0UyFtf6h9ggVwMVB2ynfshy021p/UY6lga1sj2PFL8ZZnHDwXWa2p971SIh4cwt7
y6K0fWeSWrm9quaqx0F64ky4GO5g63NvRp2mzhXi3a+w85t+HFizp9mD2Ksgj/os
LqtRUg6yq83LqyKdilAC1rEM5+TrPgvFLhIjF2oXtj3lTpgZPkGer6IZ4wudEIR5
2znyWeT8YvP/2BO6SedD45PI
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:42 2025 by rpki-client