Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/VSiUryNu5fZn5wdeJ8XyBuOLSO0.roa
File: VSiUryNu5fZn5wdeJ8XyBuOLSO0.roa (raw, json)
Hash identifier: Rh+eB0WCLWoBujTfiUWv5qsJ/EPb/N+p/f/U39yHyYs=
Subject key identifier: 55:28:94:AF:23:6E:E5:F6:67:E7:07:5E:27:C5:F2:06:E3:8B:48:ED
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 01857079ACBB151D21F5C731EF432084BE6C
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/VSiUryNu5fZn5wdeJ8XyBuOLSO0.roa
Signing time: Mon 02 Jan 2023 03:14:59 +0000
ROA not before: Mon 02 Jan 2023 03:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201056
IP address blocks: 46.228.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:ac:bb:15:1d:21:f5:c7:31:ef:43:20:84:be:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jan 2 03:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=552894af236ee5f667e7075e27c5f206e38b48ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:76:31:31:76:ab:b0:23:06:8b:67:24:e8:
67:21:58:93:a3:6e:4a:44:ad:8a:20:f7:f3:81:5d:
3b:69:c3:35:3e:67:dc:a0:b6:e8:bc:86:21:e5:12:
0b:f9:8f:37:12:41:57:58:1a:80:1a:a2:c3:f5:6f:
9d:16:d3:bd:4f:d6:ad:6d:cc:55:84:dc:e7:dc:e2:
01:83:35:3d:ec:96:12:f3:09:f5:a6:fd:f8:0a:07:
b1:cb:26:52:89:d4:3a:45:6a:76:17:72:33:40:a4:
23:6e:1c:9a:f6:40:53:72:16:57:db:cf:7b:42:d9:
b9:ca:b3:97:f6:44:d2:71:41:dd:ec:fa:85:85:57:
e9:5e:82:40:eb:44:42:4f:df:5f:4c:1d:4a:44:07:
5b:f2:a3:1b:be:c9:74:13:e5:80:79:3b:db:34:b8:
5b:1c:22:98:f0:59:f2:24:31:68:e8:54:ee:fc:90:
b0:40:02:40:8c:95:c0:11:5b:51:d1:f2:a9:2a:ae:
1e:06:68:83:1e:ba:7d:b6:9d:5b:5e:91:da:dd:e1:
4d:30:1d:53:12:32:e2:fe:b5:7a:ad:38:ce:55:5a:
ff:37:cb:ca:b1:0d:db:6c:7c:dc:71:ee:a9:be:92:
d8:67:f0:bb:89:bd:ac:f2:31:e0:9b:79:61:2b:bb:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:28:94:AF:23:6E:E5:F6:67:E7:07:5E:27:C5:F2:06:E3:8B:48:ED
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/VSiUryNu5fZn5wdeJ8XyBuOLSO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.140.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b8:b4:22:44:95:45:2c:f5:29:3e:93:ac:2f:ac:bb:82:03:
5b:ca:ad:0c:71:7c:ff:3c:18:51:bc:bb:77:2a:30:2f:9e:c9:
8d:3c:d0:e2:2e:75:03:96:39:e1:bf:9c:02:69:01:17:04:e0:
3f:e1:87:03:1f:bf:c3:b8:15:f7:d8:eb:dc:fa:18:da:01:a7:
ba:9b:17:22:c3:55:d1:f5:bb:b6:57:2c:e8:70:de:50:6f:8f:
4c:45:78:37:23:d9:ec:c1:11:1a:a5:a7:da:c7:d1:13:17:07:
a3:f3:2a:b2:93:e3:7b:ed:7d:20:52:f9:9e:63:5c:5f:f5:3f:
8b:f8:6c:73:15:41:c1:72:df:fd:dc:0f:39:aa:d8:c9:ac:82:
a7:12:25:dd:4b:f7:32:df:44:04:8b:15:a1:e5:0f:71:24:e1:
70:ed:04:0b:da:f3:13:2a:c1:f1:ee:e7:1c:20:20:65:24:99:
ca:15:fd:a6:64:f2:42:7e:1a:c3:26:1e:a0:1d:13:71:31:e2:
26:21:72:07:09:dc:7d:88:d0:11:f3:92:7c:16:15:a7:0c:75:
bd:43:4e:8d:e1:57:a8:7f:8f:4e:8d:c2:38:66:79:b7:31:ff:
3a:2d:77:6e:9b:16:eb:49:9f:7c:49:e0:90:30:ef:8f:14:01:
db:16:fb:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVweay7FR0h9ccx70MghL5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjMzODYxMjA3YTIzMDU2NGVmMzZmMTFlMDE1NzM0NDcz
MWUzZjkwHhcNMjMwMTAyMDMxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTI4OTRhZjIzNmVlNWY2NjdlNzA3NWUyN2M1ZjIwNmUzOGI0OGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/52MTF2q7AjBotnJOhnIViTo25K
RK2KIPfzgV07acM1PmfcoLbovIYh5RIL+Y83EkFXWBqAGqLD9W+dFtO9T9atbcxV
hNzn3OIBgzU97JYS8wn1pv34CgexyyZSidQ6RWp2F3IzQKQjbhya9kBTchZX2897
Qtm5yrOX9kTScUHd7PqFhVfpXoJA60RCT99fTB1KRAdb8qMbvsl0E+WAeTvbNLhb
HCKY8FnyJDFo6FTu/JCwQAJAjJXAEVtR0fKpKq4eBmiDHrp9tp1bXpHa3eFNMB1T
EjLi/rV6rTjOVVr/N8vKsQ3bbHzcce6pvpLYZ/C7ib2s8jHgm3lhK7tU9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFUolK8jbuX2Z+cHXifF8gbji0jtMB8GA1UdIwQY
MBaAFMEjOGEgeiMFZO828R4BVzRHMeP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTIt
MWM3YjJiOTFkMzA4LzEvVlNpVXJ5TnU1ZlpuNXdkZUo4WHlCdU9MU08wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTItMWM3YjJiOTFkMzA4
LzEvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuSMMA0G
CSqGSIb3DQEBCwUAA4IBAQBuuLQiRJVFLPUpPpOsL6y7ggNbyq0McXz/PBhRvLt3
KjAvnsmNPNDiLnUDljnhv5wCaQEXBOA/4YcDH7/DuBX32Ovc+hjaAae6mxciw1XR
9bu2VyzocN5Qb49MRXg3I9nswREapafax9ETFwej8yqyk+N77X0gUvmeY1xf9T+L
+GxzFUHBct/93A85qtjJrIKnEiXdS/cy30QEixWh5Q9xJOFw7QQL2vMTKsHx7ucc
ICBlJJnKFf2mZPJCfhrDJh6gHRNxMeImIXIHCdx9iNAR85J8FhWnDHW9Q06N4Veo
f49OjcI4Znm3Mf86LXdumxbrSZ98SeCQMO+PFAHbFvtu
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:19 2025 by rpki-client