Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/npLTat-T3iAm4Px30cyKznLPtKk.roa
File: npLTat-T3iAm4Px30cyKznLPtKk.roa (raw, json)
Hash identifier: gV8CSvzBjqO14SH7N9U4yHZFMcrmNYLuBQn/VDOC4VY=
Subject key identifier: 9E:92:D3:6A:DF:93:DE:20:26:E0:FC:77:D1:CC:8A:CE:72:CF:B4:A9
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01890263209A65CC4F6E7ABBDA638058FE16
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/npLTat-T3iAm4Px30cyKznLPtKk.roa
Signing time: Wed 28 Jun 2023 14:23:18 +0000
ROA not before: Wed 28 Jun 2023 14:23:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.10.0/23 maxlen: 24
46.162.10.0/24 maxlen: 24
46.162.17.0/24 maxlen: 24
46.162.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:02:63:20:9a:65:cc:4f:6e:7a:bb:da:63:80:58:fe:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 28 14:23:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e92d36adf93de2026e0fc77d1cc8ace72cfb4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dd:b5:a7:37:f0:43:dd:6a:17:a4:b7:7d:ba:
3b:fa:64:a4:bb:3d:f8:2f:05:c0:e3:d4:4d:b1:3e:
b4:be:ff:31:a3:4c:ae:9a:af:64:a5:ac:53:87:fa:
99:91:39:1a:fa:d1:d1:82:02:ae:7e:7d:f8:57:f6:
7c:ee:52:f4:90:4b:33:80:e9:ad:e8:59:7b:f3:2e:
bc:b7:fa:a2:da:d9:4d:30:ca:87:6e:f8:e2:05:75:
1e:1e:7b:54:fb:0d:3a:74:27:eb:bc:ca:68:08:7e:
a9:e1:31:46:f5:1a:23:8f:2c:34:0d:2e:77:d1:05:
62:ec:88:43:15:37:53:cb:b0:66:ae:2a:0c:e0:51:
87:74:03:18:08:33:13:67:c3:89:92:2d:b8:a5:6b:
9e:df:66:96:e0:b0:9a:79:08:df:28:55:53:dc:73:
c4:c4:8f:87:db:72:b2:94:3f:8b:66:68:7b:3c:93:
05:31:08:17:71:d6:3c:aa:0f:a2:78:b1:87:bb:a5:
c7:d1:a5:7c:ab:36:83:ea:57:b0:a3:b7:23:81:79:
58:23:63:88:d1:a4:b6:73:55:4b:79:9a:e2:68:83:
de:4b:f0:ff:65:cc:d3:31:82:3b:58:fa:8d:17:45:
c6:4b:5b:2b:77:b9:ec:94:cb:1e:0d:df:6a:01:b0:
86:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:92:D3:6A:DF:93:DE:20:26:E0:FC:77:D1:CC:8A:CE:72:CF:B4:A9
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/npLTat-T3iAm4Px30cyKznLPtKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.10.0/23
46.162.17.0/24
46.162.19.0/24
Signature Algorithm: sha256WithRSAEncryption
95:bb:a9:0d:f3:3a:d2:9a:74:e7:f3:86:55:57:70:58:be:1d:
ed:63:52:65:3b:49:21:67:b6:47:53:9d:cd:f9:c4:5f:fd:fb:
ce:66:a0:ea:a3:c3:fd:34:14:7a:67:9c:f6:1d:74:5a:13:a5:
1e:66:c3:13:43:7e:a7:57:f7:02:f3:32:32:ab:ed:10:e9:6c:
ee:dc:52:6b:54:58:ee:3b:3a:91:df:c0:e6:e4:d8:64:df:9f:
ec:7e:94:dc:13:3f:0f:0e:a0:1a:4c:78:6f:c5:df:c7:76:d2:
f3:f5:e5:cd:8a:ce:f0:66:13:b3:9d:0c:9b:b0:ce:a5:c9:a6:
ae:77:ac:ab:db:d1:25:a6:a8:b2:b0:e3:30:71:4d:28:51:b3:
d8:fc:88:c3:fc:eb:0b:51:75:8a:10:56:fa:df:8b:91:f4:7f:
e8:aa:43:68:39:e2:f6:22:74:05:4b:22:17:85:29:9a:d2:54:
79:45:c8:00:20:e7:ef:bb:72:15:b0:0a:99:93:77:a7:a7:65:
f0:53:fd:da:77:00:0d:97:25:06:cc:a3:c0:6c:31:42:07:f2:
75:7d:6c:df:8b:0d:ce:77:8d:ae:ec:53:a1:3a:eb:b5:08:81:
2b:13:c1:5f:00:69:93:1d:5a:c0:11:c1:61:29:6f:28:ee:7a:
0f:38:21:3d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYkCYyCaZcxPbnq72mOAWP4WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNjI4MTQyMzE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTkyZDM2YWRmOTNkZTIwMjZlMGZjNzdkMWNjOGFjZTcyY2ZiNGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi921pzfwQ91qF6S3fbo7+mSkuz34
LwXA49RNsT60vv8xo0yumq9kpaxTh/qZkTka+tHRggKufn34V/Z87lL0kEszgOmt
6Fl78y68t/qi2tlNMMqHbvjiBXUeHntU+w06dCfrvMpoCH6p4TFG9Rojjyw0DS53
0QVi7IhDFTdTy7BmrioM4FGHdAMYCDMTZ8OJki24pWue32aW4LCaeQjfKFVT3HPE
xI+H23KylD+LZmh7PJMFMQgXcdY8qg+ieLGHu6XH0aV8qzaD6lewo7cjgXlYI2OI
0aS2c1VLeZriaIPeS/D/ZczTMYI7WPqNF0XGS1srd7nslMseDd9qAbCGFwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJ6S02rfk94gJuD8d9HMis5yz7SpMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvbnBMVGF0LVQzaUFtNFB4MzBjeUt6bkxQdEtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLqIKAwQA
LqIRAwQALqITMA0GCSqGSIb3DQEBCwUAA4IBAQCVu6kN8zrSmnTn84ZVV3BYvh3t
Y1JlO0khZ7ZHU53N+cRf/fvOZqDqo8P9NBR6Z5z2HXRaE6UeZsMTQ36nV/cC8zIy
q+0Q6Wzu3FJrVFjuOzqR38Dm5Nhk35/sfpTcEz8PDqAaTHhvxd/HdtLz9eXNis7w
ZhOznQybsM6lyaaud6yr29ElpqiysOMwcU0oUbPY/IjD/OsLUXWKEFb634uR9H/o
qkNoOeL2InQFSyIXhSma0lR5RcgAIOfvu3IVsAqZk3enp2XwU/3adwANlyUGzKPA
bDFCB/J1fWzfiw3Od42u7FOhOuu1CIErE8FfAGmTHVrAEcFhKW8o7noPOCE9
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:04 2025 by rpki-client