Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/375ZiY0a_vER18A2yXI7p4rWILM.roa
File: 375ZiY0a_vER18A2yXI7p4rWILM.roa (raw, json)
Hash identifier: 4doRF4UsJxl05H6Gm+XqqhXw/4J/FoPjT2yF4ZxbJT8=
Subject key identifier: DF:BE:59:89:8D:1A:FE:F1:11:D7:C0:36:C9:72:3B:A7:8A:D6:20:B3
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01893F4BFD1F041EA508E529BD5B1FA180ED
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/375ZiY0a_vER18A2yXI7p4rWILM.roa
Signing time: Mon 10 Jul 2023 10:14:51 +0000
ROA not before: Mon 10 Jul 2023 10:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.10.0/23 maxlen: 24
46.162.10.0/24 maxlen: 24
46.162.11.0/24 maxlen: 24
46.162.26.0/24 maxlen: 24
46.162.52.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3f:4b:fd:1f:04:1e:a5:08:e5:29:bd:5b:1f:a1:80:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jul 10 10:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfbe59898d1afef111d7c036c9723ba78ad620b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:e5:cb:e1:2e:3a:1c:69:dd:18:31:2d:2e:
9c:fc:cd:4b:56:b1:89:f1:72:be:24:5f:74:00:ff:
ee:b2:49:ee:a1:6d:3e:18:82:d7:80:99:ca:bf:bc:
7f:59:f6:52:07:17:d6:6c:da:52:c1:7d:7c:e0:03:
82:96:d1:98:3f:51:1e:bb:35:09:9b:57:33:56:c0:
bf:b2:a0:b1:80:93:12:a5:42:3d:b4:b4:8c:31:07:
6c:5c:7b:2b:c1:57:31:2c:cc:a1:f2:bf:81:b1:09:
f1:92:df:79:1b:78:5d:64:3d:13:18:3b:0e:34:07:
95:e0:b3:3c:bc:64:5a:8c:3c:32:98:47:86:0b:47:
08:c0:1b:35:ee:9f:f3:19:39:a6:75:da:24:8c:59:
87:e3:6a:2d:41:13:24:5e:24:65:d6:ea:77:c9:6f:
ff:77:8a:82:c3:a6:df:4d:7a:9a:92:44:a4:07:ec:
83:88:a4:13:3e:23:63:7f:0a:03:63:f7:cf:02:a9:
8a:86:1b:62:a9:3a:71:8b:f5:d9:8a:b1:08:88:fb:
3e:a8:5a:e2:5e:c8:6a:d4:81:40:14:da:26:b9:62:
b1:35:34:2c:bf:f0:f6:d1:88:93:d1:2d:c5:3c:88:
33:4e:ac:3c:b2:48:7a:fa:ba:20:37:13:8e:dc:37:
ab:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BE:59:89:8D:1A:FE:F1:11:D7:C0:36:C9:72:3B:A7:8A:D6:20:B3
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/375ZiY0a_vER18A2yXI7p4rWILM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.10.0/23
46.162.26.0/24
46.162.52.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:37:ea:f1:34:11:3b:a5:28:76:ed:c1:12:39:34:1c:9d:b9:
78:ef:b6:99:61:35:a8:f8:e9:ad:0d:f7:43:05:ea:82:5f:3f:
ea:bb:7f:72:09:c2:4c:81:83:93:7c:a9:7f:15:0f:5b:ba:45:
e1:54:39:4e:b5:50:47:39:a9:7c:00:fb:8f:e8:2c:83:1c:ca:
4a:24:71:1d:0f:e8:bf:36:3c:78:23:f8:73:47:c9:ff:06:e3:
ad:80:a0:19:d3:29:d0:9e:ee:54:bc:9a:b0:a8:26:16:b4:fa:
65:2f:63:99:07:91:d8:3f:d7:2e:3c:a7:a0:aa:33:ac:83:5d:
d6:f5:59:a6:b1:88:bb:41:bb:2c:15:01:c8:c0:ff:25:1d:1c:
11:27:d3:c4:4e:34:36:2c:4d:ee:c7:82:78:30:34:35:3d:12:
0f:06:e4:3f:b8:b6:99:db:5f:88:fd:ba:63:9e:ee:ab:16:ce:
f1:e7:47:a9:99:8c:bb:7f:39:bf:8f:b4:54:c8:2b:82:f9:8b:
3f:c2:e3:c0:0f:f9:07:1f:fe:10:76:63:0b:6a:4d:77:07:30:
28:72:90:39:7a:71:80:bb:f8:f8:73:55:a2:1c:88:14:1c:1e:
af:b9:59:66:07:5e:7a:99:23:7a:2c:cd:21:f2:e7:fa:45:5c:
ed:89:d1:03
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYk/S/0fBB6lCOUpvVsfoYDtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNzEwMTAxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmJlNTk4OThkMWFmZWYxMTFkN2MwMzZjOTcyM2JhNzhhZDYyMGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncLly+EuOhxp3RgxLS6c/M1LVrGJ
8XK+JF90AP/usknuoW0+GILXgJnKv7x/WfZSBxfWbNpSwX184AOCltGYP1EeuzUJ
m1czVsC/sqCxgJMSpUI9tLSMMQdsXHsrwVcxLMyh8r+BsQnxkt95G3hdZD0TGDsO
NAeV4LM8vGRajDwymEeGC0cIwBs17p/zGTmmddokjFmH42otQRMkXiRl1up3yW//
d4qCw6bfTXqakkSkB+yDiKQTPiNjfwoDY/fPAqmKhhtiqTpxi/XZirEIiPs+qFri
Xshq1IFAFNomuWKxNTQsv/D20YiT0S3FPIgzTqw8skh6+rogNxOO3DerxQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFN++WYmNGv7xEdfANslyO6eK1iCzMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvMzc1WmlZMGFfdkVSMThBMnlYSTdwNHJXSUxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLqIKAwQA
LqIaAwQBLqI0MA0GCSqGSIb3DQEBCwUAA4IBAQBON+rxNBE7pSh27cESOTQcnbl4
77aZYTWo+OmtDfdDBeqCXz/qu39yCcJMgYOTfKl/FQ9bukXhVDlOtVBHOal8APuP
6CyDHMpKJHEdD+i/Njx4I/hzR8n/BuOtgKAZ0ynQnu5UvJqwqCYWtPplL2OZB5HY
P9cuPKegqjOsg13W9VmmsYi7QbssFQHIwP8lHRwRJ9PETjQ2LE3ux4J4MDQ1PRIP
BuQ/uLaZ21+I/bpjnu6rFs7x50epmYy7fzm/j7RUyCuC+Ys/wuPAD/kHH/4QdmML
ak13BzAocpA5enGAu/j4c1WiHIgUHB6vuVlmB156mSN6LM0h8uf6RVztidED
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:59 2025 by rpki-client