Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/XJSy0GVnBEwKq21ChYNciT-eG8E.roa
File: XJSy0GVnBEwKq21ChYNciT-eG8E.roa (raw, json)
Hash identifier: VEYgsBFE9Z8LplLvCdcpNn4R6BZW6mMw1ZXxR9aJIaU=
Subject key identifier: 5C:94:B2:D0:65:67:04:4C:0A:AB:6D:42:85:83:5C:89:3F:9E:1B:C1
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0186DC900FB9FA7F32ECE113EDDD7C3EBBC4
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/XJSy0GVnBEwKq21ChYNciT-eG8E.roa
Signing time: Mon 13 Mar 2023 20:01:14 +0000
ROA not before: Mon 13 Mar 2023 20:01:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 46.162.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:dc:90:0f:b9:fa:7f:32:ec:e1:13:ed:dd:7c:3e:bb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Mar 13 20:01:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c94b2d06567044c0aab6d4285835c893f9e1bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:38:81:fa:2d:92:92:bb:7e:87:91:9e:ee:a9:
a0:75:3c:85:d9:ea:f7:89:2d:18:bd:7a:6c:b1:eb:
36:0c:19:38:d0:f7:46:d4:fa:4f:17:2b:2c:94:c7:
df:2f:b8:42:79:0e:5e:9b:91:b7:5d:dd:04:77:32:
13:25:6c:b9:76:d8:ba:cf:37:02:18:35:d8:6a:a7:
55:ff:e7:a5:c8:e7:46:72:93:84:cf:b8:c5:ad:50:
f9:8b:56:03:9e:20:fc:a9:f7:00:06:2d:41:1a:dd:
de:9c:92:22:cf:16:49:2f:dd:2b:f1:0d:65:2b:5e:
90:a7:f6:bf:b4:0b:10:87:47:22:5f:1e:1e:3c:7b:
cd:51:aa:fa:06:71:9e:77:1d:ec:3d:bf:8f:73:05:
ce:63:0c:26:db:00:d1:cc:b2:6c:43:85:20:10:da:
b4:b1:b1:50:70:9b:2e:92:c4:29:a2:60:35:c0:84:
ef:c0:c1:72:c8:fe:a2:7f:70:00:d0:33:61:ea:54:
05:5f:3a:b8:26:40:e9:86:41:d8:d9:30:0c:4f:84:
ea:5b:1e:77:11:d5:fb:33:8e:d7:b4:fc:5b:8e:40:
d3:36:ed:65:06:0d:19:37:14:74:58:6b:0c:5a:b9:
62:4e:79:0a:8d:03:6e:2c:1a:3f:ec:3c:35:32:37:
e4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:94:B2:D0:65:67:04:4C:0A:AB:6D:42:85:83:5C:89:3F:9E:1B:C1
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/XJSy0GVnBEwKq21ChYNciT-eG8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.57.0/24
Signature Algorithm: sha256WithRSAEncryption
84:46:d7:49:52:fb:5f:b8:05:b5:e5:9d:65:8b:db:f6:d4:4d:
19:e0:6c:2e:0b:cc:a7:db:73:91:8e:11:39:f3:fd:6a:d5:e0:
27:31:ed:e8:af:64:78:a8:31:18:45:5b:39:32:0b:78:b1:6d:
4a:48:bc:6f:89:80:a9:97:7e:be:40:bf:2c:ed:56:f8:a3:12:
0d:aa:46:31:af:3a:aa:30:83:c4:4e:fd:6b:84:fd:c5:dd:a4:
c0:b1:b1:e1:9d:eb:c3:02:ff:ae:da:1b:52:8c:40:3e:2a:88:
23:f1:fd:00:3e:fe:1c:96:d2:9c:38:cd:0f:eb:4e:2d:63:ac:
c8:c6:27:83:81:eb:84:ed:45:06:9d:76:55:4a:a0:12:d2:cf:
9b:af:01:96:37:c2:2a:0b:b9:0f:61:27:b6:64:ad:e0:d4:60:
c7:2d:4f:2c:70:af:38:15:54:9d:53:f2:38:0a:7e:4f:05:46:
f1:65:e0:ee:a5:9d:25:ee:35:a7:a9:e0:eb:fb:7e:4c:fa:df:
b5:c5:07:7a:4d:fd:7b:4e:1e:a9:d2:bb:28:09:82:9a:4f:f3:
16:8e:d6:5a:e2:3c:09:7c:2e:12:5d:19:bc:f4:f5:5e:38:16:
da:44:33:7f:67:9f:84:41:e6:f6:8b:60:80:b9:6f:29:f0:6c:
22:bc:a6:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbckA+5+n8y7OET7d18PrvEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwMzEzMjAwMTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Yzk0YjJkMDY1NjcwNDRjMGFhYjZkNDI4NTgzNWM4OTNmOWUxYmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgziB+i2Skrt+h5Ge7qmgdTyF2er3
iS0YvXpsses2DBk40PdG1PpPFysslMffL7hCeQ5em5G3Xd0EdzITJWy5dti6zzcC
GDXYaqdV/+elyOdGcpOEz7jFrVD5i1YDniD8qfcABi1BGt3enJIizxZJL90r8Q1l
K16Qp/a/tAsQh0ciXx4ePHvNUar6BnGedx3sPb+PcwXOYwwm2wDRzLJsQ4UgENq0
sbFQcJsuksQpomA1wITvwMFyyP6if3AA0DNh6lQFXzq4JkDphkHY2TAMT4TqWx53
EdX7M47XtPxbjkDTNu1lBg0ZNxR0WGsMWrliTnkKjQNuLBo/7Dw1Mjfk7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFyUstBlZwRMCqttQoWDXIk/nhvBMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvWEpTeTBHVm5CRXdLcTIxQ2hZTmNpVC1lRzhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALqI5MA0G
CSqGSIb3DQEBCwUAA4IBAQCERtdJUvtfuAW15Z1li9v21E0Z4GwuC8yn23ORjhE5
8/1q1eAnMe3or2R4qDEYRVs5Mgt4sW1KSLxviYCpl36+QL8s7Vb4oxINqkYxrzqq
MIPETv1rhP3F3aTAsbHhnevDAv+u2htSjEA+Kogj8f0APv4cltKcOM0P604tY6zI
xieDgeuE7UUGnXZVSqAS0s+brwGWN8IqC7kPYSe2ZK3g1GDHLU8scK84FVSdU/I4
Cn5PBUbxZeDupZ0l7jWnqeDr+35M+t+1xQd6Tf17Th6p0rsoCYKaT/MWjtZa4jwJ
fC4SXRm89PVeOBbaRDN/Z5+EQeb2i2CAuW8p8GwivKaE
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:52 2025 by rpki-client