Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/FsHWwcYEfCYx_Fe9bx_K7vQhjF0.roa
File: FsHWwcYEfCYx_Fe9bx_K7vQhjF0.roa (raw, json)
Hash identifier: R//0gaOCd3F/1KnOjp4rFc2KMS+ARool9cBVwVEyWyM=
Subject key identifier: 16:C1:D6:C1:C6:04:7C:26:31:FC:57:BD:6F:1F:CA:EE:F4:21:8C:5D
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187E0FFA5662F3D24A9CD25B37327DAA9CA
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/FsHWwcYEfCYx_Fe9bx_K7vQhjF0.roa
Signing time: Wed 03 May 2023 09:44:23 +0000
ROA not before: Wed 03 May 2023 09:44:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208949
IP address blocks: 46.162.8.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:ff:a5:66:2f:3d:24:a9:cd:25:b3:73:27:da:a9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 3 09:44:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16c1d6c1c6047c2631fc57bd6f1fcaeef4218c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:06:1f:b3:29:67:7f:94:9d:57:7a:49:e5:8c:
07:7f:91:91:cf:f9:59:72:db:59:a7:e5:41:c1:60:
c2:ff:65:11:0f:8a:ae:a4:c2:b6:02:0e:6c:2a:9f:
e9:ae:a4:99:e6:e5:71:13:69:78:a9:03:50:25:5f:
b5:66:f0:d4:dd:3e:7f:f7:ac:1b:6f:0a:e7:ea:3c:
df:b6:e2:7f:ee:a3:fd:35:c7:7c:a8:a0:cf:c1:3f:
c5:01:84:ee:c7:36:d5:1c:d7:d2:34:9f:1b:68:99:
d7:b2:b2:cc:64:76:d3:26:4e:5f:a2:e3:c1:7d:b1:
a3:14:dd:96:0e:ae:76:b3:6a:5a:07:db:86:4f:b0:
4a:86:c5:b9:3e:dc:f3:cf:a8:1a:55:c8:be:d2:c6:
61:d7:2b:70:d1:ec:8c:e8:6d:41:2b:61:fb:8d:5c:
de:1a:43:8a:83:22:d7:1f:64:49:af:dc:ef:c4:85:
20:64:a6:6e:6f:39:cc:e2:a2:73:1f:0e:77:9b:27:
fd:27:f3:44:0a:ff:ea:79:f4:f8:fb:af:6d:75:84:
87:f6:92:0c:fe:66:c6:a2:14:23:f2:71:1a:5c:a2:
4a:f1:e8:a6:21:a5:b9:2a:18:7d:8b:f2:38:ae:bd:
cb:09:7c:f8:b8:24:47:93:49:74:60:b7:0b:f3:01:
bc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C1:D6:C1:C6:04:7C:26:31:FC:57:BD:6F:1F:CA:EE:F4:21:8C:5D
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/FsHWwcYEfCYx_Fe9bx_K7vQhjF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.8.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:56:6e:db:88:00:ab:92:65:91:00:e5:68:c4:d9:8b:29:6e:
1c:ed:f7:e3:60:33:4e:a0:ab:80:a5:ee:bd:8a:db:f5:10:18:
06:d4:ef:fe:da:15:35:76:15:ae:27:7d:1b:85:da:7e:85:e2:
4b:c5:2f:43:e2:e7:8c:0f:ae:90:05:4c:52:9a:f7:01:c1:38:
c2:17:b3:f8:14:c2:ae:35:89:80:2f:51:0b:7c:83:7b:53:b5:
58:18:96:a4:7c:eb:0c:44:c6:a5:18:83:f3:5c:0f:bb:ce:e0:
aa:31:09:26:1a:36:7c:e5:f2:b8:13:6a:28:4b:7b:41:70:d9:
c8:59:5a:f8:40:03:43:b7:67:34:3d:55:3b:5a:97:d8:f9:2c:
e6:3c:77:42:ab:d6:c8:3d:79:ab:0f:fb:52:e8:20:7c:72:74:
03:e6:01:80:b1:49:56:3d:99:6c:3c:93:9f:ca:ae:74:95:bf:
30:36:47:c6:17:86:4b:a6:00:61:af:a4:12:e1:11:56:d4:1c:
cd:5c:2b:3d:6e:25:26:15:e9:a2:35:bf:d9:d3:04:fe:d1:0a:
f5:c8:a3:9d:76:01:1c:6c:d5:13:86:0f:40:19:dc:2d:3a:79:
15:02:7e:f4:a5:6e:ee:e9:10:ea:46:fe:44:c7:24:08:e2:4a:
c2:09:8c:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfg/6VmLz0kqc0ls3Mn2qnKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNTAzMDk0NDIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmMxZDZjMWM2MDQ3YzI2MzFmYzU3YmQ2ZjFmY2FlZWY0MjE4YzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQYfsylnf5SdV3pJ5YwHf5GRz/lZ
cttZp+VBwWDC/2URD4qupMK2Ag5sKp/prqSZ5uVxE2l4qQNQJV+1ZvDU3T5/96wb
bwrn6jzftuJ/7qP9Ncd8qKDPwT/FAYTuxzbVHNfSNJ8baJnXsrLMZHbTJk5fouPB
fbGjFN2WDq52s2paB9uGT7BKhsW5Ptzzz6gaVci+0sZh1ytw0eyM6G1BK2H7jVze
GkOKgyLXH2RJr9zvxIUgZKZubznM4qJzHw53myf9J/NECv/qefT4+69tdYSH9pIM
/mbGohQj8nEaXKJK8eimIaW5Khh9i/I4rr3LCXz4uCRHk0l0YLcL8wG8tQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBbB1sHGBHwmMfxXvW8fyu70IYxdMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvRnNIV3djWUVmQ1l4X0ZlOWJ4X0s3dlFoakYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLqIIMA0G
CSqGSIb3DQEBCwUAA4IBAQBdVm7biACrkmWRAOVoxNmLKW4c7ffjYDNOoKuApe69
itv1EBgG1O/+2hU1dhWuJ30bhdp+heJLxS9D4ueMD66QBUxSmvcBwTjCF7P4FMKu
NYmAL1ELfIN7U7VYGJakfOsMRMalGIPzXA+7zuCqMQkmGjZ85fK4E2ooS3tBcNnI
WVr4QANDt2c0PVU7WpfY+SzmPHdCq9bIPXmrD/tS6CB8cnQD5gGAsUlWPZlsPJOf
yq50lb8wNkfGF4ZLpgBhr6QS4RFW1BzNXCs9biUmFemiNb/Z0wT+0Qr1yKOddgEc
bNUThg9AGdwtOnkVAn70pW7u6RDqRv5ExyQI4krCCYzO
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:52 2025 by rpki-client