Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/1-10k7l7SI-F6PlxkET1RRhzgHrU.roa
File: 1-10k7l7SI-F6PlxkET1RRhzgHrU.roa (raw, json)
Hash identifier: jhOTTmheHeXke0liD2i32hjT7F6vMtEzHZc0TS9EYWs=
Subject key identifier: FB:5D:24:EE:5E:D2:23:E1:7A:3E:5C:64:11:3D:51:46:1C:E0:1E:B5
Certificate issuer: /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Certificate serial: 0182173E1E85C9B03781BC67954FD6F8570D
Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/1-10k7l7SI-F6PlxkET1RRhzgHrU.roa
Signing time: Tue 19 Jul 2022 16:15:23 +0000
ROA not before: Tue 19 Jul 2022 16:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47168
IP address blocks: 46.31.67.0/24 maxlen: 24
92.255.75.0/24 maxlen: 24
92.255.74.0/24 maxlen: 24
92.255.74.0/23 maxlen: 23
92.255.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:17:3e:1e:85:c9:b0:37:81:bc:67:95:4f:d6:f8:57:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Validity
Not Before: Jul 19 16:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb5d24ee5ed223e17a3e5c64113d51461ce01eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f6:f9:aa:c1:53:e1:41:23:85:0f:8e:ba:14:
17:4a:9c:a7:0b:60:07:25:37:f0:7f:5e:91:5c:a4:
75:1b:b8:09:4f:cc:b8:b8:77:d7:fc:00:9b:db:8b:
2c:50:94:b1:1b:38:b1:e0:21:ab:ba:31:4b:d8:37:
d4:6c:ec:21:96:df:d3:35:57:83:09:e0:0b:6a:39:
97:74:7a:35:4d:a8:c1:35:84:36:ad:ba:fa:97:3e:
1b:ff:1f:35:87:77:67:11:3f:0c:33:68:ca:be:53:
58:c8:7d:57:43:1e:3f:fb:49:34:33:7e:88:31:b0:
f2:35:50:a7:3e:37:50:a1:97:23:b8:3b:7b:21:eb:
49:c5:69:da:fe:b6:16:4b:3e:96:1b:8e:97:06:0a:
e3:c5:20:d9:db:66:23:6f:b8:76:d1:8e:c4:9a:10:
3e:0e:ca:69:af:3d:90:d9:4b:3d:99:77:31:c1:d5:
f8:aa:31:6c:55:75:c0:45:3a:32:90:29:00:c9:c3:
66:80:89:8f:9a:b3:17:69:9f:38:6c:fa:d5:46:63:
cf:81:c5:f1:d5:69:55:84:d9:a9:a3:19:b9:3d:3e:
c0:cf:40:37:27:7a:bc:34:e7:c7:21:9d:6d:43:b8:
7a:89:4a:e7:e9:25:c2:c9:62:74:67:dc:ff:db:18:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5D:24:EE:5E:D2:23:E1:7A:3E:5C:64:11:3D:51:46:1C:E0:1E:B5
X509v3 Authority Key Identifier:
keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/1-10k7l7SI-F6PlxkET1RRhzgHrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.67.0/24
92.255.73.0-92.255.75.255
Signature Algorithm: sha256WithRSAEncryption
51:9d:6e:4e:e1:8f:ba:bd:92:20:79:3f:e8:f6:6a:ce:ce:42:
40:f7:a2:bb:de:92:f2:a2:62:da:3c:f5:91:fa:68:86:fa:bf:
c3:e0:45:51:00:fd:51:b5:8b:a5:08:e8:53:ed:9d:bb:a2:4e:
7e:48:d8:0a:b7:d9:8f:c3:7f:c3:7f:06:a9:22:c9:61:04:50:
c7:3a:ae:a2:7f:79:87:6b:9b:50:46:e4:c8:23:bf:af:d3:11:
c7:84:e6:25:4a:49:7b:4d:38:de:fe:22:d2:a8:75:a8:fe:a9:
3f:09:06:48:51:e7:91:b6:ea:0f:0c:2c:5c:d8:bc:26:de:47:
06:94:93:28:21:39:a7:cc:b6:53:42:f5:7e:6e:9f:a9:d9:42:
6e:51:08:98:4c:26:7d:7e:1b:7b:ee:9b:4b:78:65:b7:bf:a2:
25:9b:2f:40:c7:0c:d5:19:6c:1d:de:a2:7d:27:44:5f:37:11:
81:fd:20:93:89:30:38:b1:17:27:06:d5:69:81:31:f6:ac:82:
f3:5c:a4:1e:f0:1e:ee:c9:66:bb:45:26:6a:08:00:bf:7b:67:
cb:90:30:75:e2:a3:f0:de:d4:4b:fd:65:c6:cc:ba:a7:77:9a:
9a:88:08:30:ec:04:58:1c:e6:9e:ce:a3:8c:3d:2b:81:25:a3:
4b:99:ea:b2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYIXPh6FybA3gbxnlU/W+FcNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNTMzZGRiYTFmOGE3NmRlMmVmNDk3MWZjZDUyZjk0NDFj
ZTA5ODkwHhcNMjIwNzE5MTYxNTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjVkMjRlZTVlZDIyM2UxN2EzZTVjNjQxMTNkNTE0NjFjZTAxZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vb5qsFT4UEjhQ+OuhQXSpynC2AH
JTfwf16RXKR1G7gJT8y4uHfX/ACb24ssUJSxGzix4CGrujFL2DfUbOwhlt/TNVeD
CeALajmXdHo1TajBNYQ2rbr6lz4b/x81h3dnET8MM2jKvlNYyH1XQx4/+0k0M36I
MbDyNVCnPjdQoZcjuDt7IetJxWna/rYWSz6WG46XBgrjxSDZ22Yjb7h20Y7EmhA+
Dspprz2Q2Us9mXcxwdX4qjFsVXXARToykCkAycNmgImPmrMXaZ84bPrVRmPPgcXx
1WlVhNmpoxm5PT7Az0A3J3q8NOfHIZ1tQ7h6iUrn6SXCyWJ0Z9z/2xi1EwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPtdJO5e0iPhej5cZBE9UUYc4B61MB8GA1UdIwQY
MBaAFL9TPduh+Kdt4u9JcfzVL5RBzgmJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjFNOTI2SDRwMjNpNzBseF9OVXZsRUhPQ1lrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83M2Q5YTUtMWM0Zi00NGUwLWE5NTgt
MTY3MTkxYTExN2VlLzEvMS0xMGs3bDdTSS1GNlBseGtFVDFSUmh6Z0hyVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzMvNzNkOWE1LTFjNGYtNDRlMC1hOTU4LTE2NzE5MWExMTdl
ZS8xL3YxTTkyNkg0cDIzaTcwbHhfTlV2bEVIT0NZay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAC4fQzAM
AwQAXP9JAwQCXP9IMA0GCSqGSIb3DQEBCwUAA4IBAQBRnW5O4Y+6vZIgeT/o9mrO
zkJA96K73pLyomLaPPWR+miG+r/D4EVRAP1RtYulCOhT7Z27ok5+SNgKt9mPw3/D
fwapIslhBFDHOq6if3mHa5tQRuTII7+v0xHHhOYlSkl7TTje/iLSqHWo/qk/CQZI
UeeRtuoPDCxc2Lwm3kcGlJMoITmnzLZTQvV+bp+p2UJuUQiYTCZ9fht77ptLeGW3
v6Ilmy9AxwzVGWwd3qJ9J0RfNxGB/SCTiTA4sRcnBtVpgTH2rILzXKQe8B7uyWa7
RSZqCAC/e2fLkDB14qPw3tRL/WXGzLqnd5qaiAgw7ARYHOaezqOMPSuBJaNLmeqy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:50 2024 by rpki-client on console-fra.rpki-client.org