Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/pnZoOtJqi6NjWR6TNpQs_6zEiho.roa
File: pnZoOtJqi6NjWR6TNpQs_6zEiho.roa (raw, json)
Hash identifier: lz1o+oZX3qzrd65Tk+TmVLh7LB/Mg+aUEGNNtjkzU4M=
Subject key identifier: A6:76:68:3A:D2:6A:8B:A3:63:59:1E:93:36:94:2C:FF:AC:C4:8A:1A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187DC20B3A4B3A7CA881AFF517F742ABD98
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/pnZoOtJqi6NjWR6TNpQs_6zEiho.roa
Signing time: Tue 02 May 2023 11:02:23 +0000
ROA not before: Tue 02 May 2023 11:02:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 46.162.3.0/24 maxlen: 24
46.162.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:20:b3:a4:b3:a7:ca:88:1a:ff:51:7f:74:2a:bd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 2 11:02:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a676683ad26a8ba363591e9336942cffacc48a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:98:2b:16:e5:5c:ae:7d:40:08:17:2f:e9:
77:24:66:3f:82:5c:1a:d8:d1:7a:b2:cf:f8:9e:7a:
7d:40:0b:2d:2c:9a:3c:f4:4c:74:03:97:12:d1:32:
d2:c6:f0:21:d2:3b:ec:a4:8c:e8:a9:ba:35:c9:71:
d1:db:8f:17:dc:19:7b:83:a2:93:88:a4:72:cc:78:
58:c5:e0:e2:4b:73:fa:c2:9c:bb:bd:e5:07:5a:68:
c4:6f:79:81:82:5d:c3:34:d8:84:ac:c6:36:69:31:
0e:b6:33:20:ce:85:46:89:51:84:38:9b:86:a1:c3:
87:c9:a4:c7:fe:3e:0c:9e:ad:91:ee:c9:f2:90:73:
ff:48:84:99:98:3f:da:cd:d9:7e:bb:f8:00:17:de:
26:0a:51:57:6d:4d:29:e8:fd:40:2c:49:a3:96:5d:
8b:0f:0f:12:46:d5:35:4d:5c:5a:7b:ef:c6:41:ec:
1e:54:75:99:a4:33:5e:f5:f1:35:80:81:d0:5e:1e:
8c:65:1a:5f:6d:ec:54:bb:64:c6:5b:36:52:64:fa:
ee:6a:d4:0a:4f:b8:70:67:00:aa:89:d8:be:f1:5d:
57:d1:8a:e4:f9:ea:e7:75:63:4f:18:f7:6e:f2:08:
dd:31:1c:57:8c:1a:81:52:40:4f:2a:0a:2d:5f:df:
dc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:76:68:3A:D2:6A:8B:A3:63:59:1E:93:36:94:2C:FF:AC:C4:8A:1A
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/pnZoOtJqi6NjWR6TNpQs_6zEiho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.3.0/24
46.162.37.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:2c:be:e9:42:18:b7:9f:9a:30:ed:0e:9d:3b:c9:a5:c1:8d:
c5:08:ea:d2:c1:af:4d:17:ea:e2:76:cc:cb:1b:56:90:71:2b:
c4:50:37:0c:1d:4d:e3:b2:84:72:f6:c8:a4:a4:6c:d4:6f:bc:
6f:86:5a:52:25:59:59:59:15:52:5d:d3:4f:b8:75:46:59:26:
07:89:dc:ff:94:cc:d6:68:fe:07:4d:a1:7f:a0:92:df:ed:3d:
b0:a0:71:01:e3:23:51:30:bc:17:9c:72:09:40:2e:7c:b7:2b:
e8:72:50:84:85:1a:59:49:9d:f6:ad:ec:8b:0b:55:d4:f5:65:
59:be:d2:38:84:2a:92:ad:a0:44:f6:27:62:ad:a0:c9:94:ff:
0c:17:a6:5b:b6:8b:94:b7:87:43:8d:0d:a5:44:f5:8d:c3:26:
4b:93:03:65:77:e6:64:bf:de:44:8e:17:1b:53:e9:65:7d:6a:
c4:de:55:61:be:ee:96:5a:79:cc:bc:ff:cc:70:76:a7:fd:f9:
b3:a7:91:ad:80:c9:ad:91:ba:a0:47:5b:5b:ff:11:64:5d:bf:
df:a1:0c:13:5a:26:83:c9:59:48:9c:f6:3d:25:b5:f6:0b:27:
dd:d7:53:83:3a:1e:a0:bc:52:17:83:12:bf:7a:3f:97:47:20:
69:f4:b8:28
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYfcILOks6fKiBr/UX90Kr2YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNTAyMTEwMjIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjc2NjgzYWQyNmE4YmEzNjM1OTFlOTMzNjk0MmNmZmFjYzQ4YTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq52YKxblXK59QAgXL+l3JGY/glwa
2NF6ss/4nnp9QAstLJo89Ex0A5cS0TLSxvAh0jvspIzoqbo1yXHR248X3Bl7g6KT
iKRyzHhYxeDiS3P6wpy7veUHWmjEb3mBgl3DNNiErMY2aTEOtjMgzoVGiVGEOJuG
ocOHyaTH/j4Mnq2R7snykHP/SISZmD/azdl+u/gAF94mClFXbU0p6P1ALEmjll2L
Dw8SRtU1TVxae+/GQeweVHWZpDNe9fE1gIHQXh6MZRpfbexUu2TGWzZSZPruatQK
T7hwZwCqidi+8V1X0Yrk+erndWNPGPdu8gjdMRxXjBqBUkBPKgotX9/c/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKZ2aDrSaoujY1kekzaULP+sxIoaMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvcG5ab090SnFpNk5qV1I2VE5wUXNfNnpFaWhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALqIDAwQA
LqIlMA0GCSqGSIb3DQEBCwUAA4IBAQBbLL7pQhi3n5ow7Q6dO8mlwY3FCOrSwa9N
F+ridszLG1aQcSvEUDcMHU3jsoRy9sikpGzUb7xvhlpSJVlZWRVSXdNPuHVGWSYH
idz/lMzWaP4HTaF/oJLf7T2woHEB4yNRMLwXnHIJQC58tyvoclCEhRpZSZ32reyL
C1XU9WVZvtI4hCqSraBE9idiraDJlP8MF6ZbtouUt4dDjQ2lRPWNwyZLkwNld+Zk
v95EjhcbU+llfWrE3lVhvu6WWnnMvP/McHan/fmzp5GtgMmtkbqgR1tb/xFkXb/f
oQwTWiaDyVlInPY9JbX2Cyfd11ODOh6gvFIXgxK/ej+XRyBp9Lgo
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:02 2025 by rpki-client