Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/DuRwKNSFK_LGeYn9BiTREl0ZfzE.roa
File: DuRwKNSFK_LGeYn9BiTREl0ZfzE.roa (raw, json)
Hash identifier: ZkRjwns2L+aUF9Me0FvltdAFBs4ctrUiG1N+dRwKrmU=
Subject key identifier: 0E:E4:70:28:D4:85:2B:F2:C6:79:89:FD:06:24:D1:12:5D:19:7F:31
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 021028B6
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/DuRwKNSFK_LGeYn9BiTREl0ZfzE.roa
Signing time: Sun 20 Mar 2022 16:22:38 +0000
ROA not before: Sun 20 Mar 2022 16:22:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 46.175.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34613430 (0x21028b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Mar 20 16:22:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ee47028d4852bf2c67989fd0624d1125d197f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:ef:e6:d2:50:b3:fb:97:21:3c:d0:f7:00:
c6:4b:3e:85:66:d3:3f:73:c6:03:27:00:b7:ca:50:
98:06:2e:06:32:a6:96:0f:95:66:fe:8e:02:1c:6a:
79:33:41:6c:28:e1:ab:3e:7b:7c:44:73:ad:3f:45:
f8:7e:d9:1a:aa:9b:cf:9e:7b:29:13:2e:b4:da:21:
60:d5:85:c3:35:66:7d:5d:a1:66:e3:21:3a:ad:cb:
be:da:bb:d0:76:b0:e3:64:cd:af:5e:fe:c3:9c:d4:
9d:b3:75:cb:b3:85:3e:57:9e:b7:9d:44:bd:ee:10:
94:1e:ce:44:ab:32:ce:d5:b6:24:da:ed:4d:b7:d1:
cd:20:03:cc:01:3f:30:9a:3e:7d:92:96:0b:2a:4e:
51:c0:fe:be:6e:c0:46:8c:cb:25:f5:02:c8:67:64:
ea:80:11:3b:f9:57:ac:ea:38:6f:bc:a2:02:42:b7:
64:b6:3f:c2:3d:4a:85:72:bc:8d:bf:c6:e5:ff:f9:
68:2a:c6:f8:59:7a:53:7e:74:39:ae:bb:b2:83:78:
7b:54:12:4b:5d:c4:0f:a6:5e:1e:c1:83:fd:90:ad:
7e:c7:07:37:56:ea:8e:e8:2c:6e:f2:f7:78:2b:7f:
e5:17:f4:9b:5b:36:4e:94:96:e5:e3:e4:a0:42:c9:
fa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E4:70:28:D4:85:2B:F2:C6:79:89:FD:06:24:D1:12:5D:19:7F:31
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/DuRwKNSFK_LGeYn9BiTREl0ZfzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.130.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:db:fa:be:ae:5d:7b:f2:0c:a2:79:7a:6d:9c:2a:74:df:05:
cb:8a:8f:a0:26:b2:68:6f:cf:a6:8f:03:64:ad:eb:63:ad:d0:
9b:08:13:9f:34:e6:11:bc:5b:15:e6:18:52:d3:f0:64:b3:7c:
0c:ce:88:51:d9:dd:c1:37:4c:d0:94:fc:63:95:d6:64:ae:4c:
dc:c9:ec:2b:fb:d9:db:fb:6d:6a:22:89:2b:16:7a:6a:25:a3:
47:ec:74:ee:c5:8f:72:81:3e:2a:31:08:d0:b2:6e:b2:30:e0:
cc:b7:8d:be:f7:ed:c7:79:7c:2d:dd:30:41:25:82:97:72:7d:
f2:56:08:0b:c9:9b:ab:d8:79:0a:e4:be:24:3a:78:8a:8b:9d:
8e:15:9f:36:25:45:86:34:f2:84:07:ea:46:fa:e2:37:af:cf:
66:42:43:0d:77:9f:ae:da:81:ab:80:22:12:7d:64:41:be:38:
b3:fc:e1:c0:b6:ac:de:c7:1d:5c:9e:b8:62:47:3d:46:51:1f:
33:10:07:61:85:47:87:56:aa:6f:46:db:fb:7b:93:cb:3b:ed:
57:fc:99:e9:94:cf:85:ff:6e:9d:65:5d:e6:c5:fa:69:b9:d4:
87:a8:8b:fb:61:cd:88:e4:df:ec:0b:1b:88:7a:24:ec:24:b0:
47:f9:61:69
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAhAotjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MDRlYjIwNGYzNTgwMDQ3ODgyMjRlMmZiMThlNGQ1ZTc0YmViZjhkMB4XDTIyMDMy
MDE2MjIzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGVlNDcwMjhkNDg1
MmJmMmM2Nzk4OWZkMDYyNGQxMTI1ZDE5N2YzMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALXa7+bSULP7lyE80PcAxks+hWbTP3PGAycAt8pQmAYuBjKm
lg+VZv6OAhxqeTNBbCjhqz57fERzrT9F+H7ZGqqbz557KRMutNohYNWFwzVmfV2h
ZuMhOq3Lvtq70Haw42TNr17+w5zUnbN1y7OFPleet51Eve4QlB7ORKsyztW2JNrt
TbfRzSADzAE/MJo+fZKWCypOUcD+vm7ARozLJfUCyGdk6oARO/lXrOo4b7yiAkK3
ZLY/wj1KhXK8jb/G5f/5aCrG+Fl6U350Oa67soN4e1QSS13ED6ZeHsGD/ZCtfscH
N1bqjugsbvL3eCt/5Rf0m1s2TpSW5ePkoELJ+hUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQO5HAo1IUr8sZ5if0GJNESXRl/MTAfBgNVHSMEGDAWgBTwTrIE81gAR4gi
Ti+xjk1edL6/jTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhFNnlCUE5ZQUVlSUlrNHZzWTVOWG5TLXY0MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvOWFiNDJhLWRmOTItNGU0Mi05ZTMzLTVjNTg5MmFmYTQ4Ny8x
L0R1UndLTlNGS19MR2VZbjlCaVRSRWwwWmZ6RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
OWFiNDJhLWRmOTItNGU0Mi05ZTMzLTVjNTg5MmFmYTQ4Ny8xLzhFNnlCUE5ZQUVl
SUlrNHZzWTVOWG5TLXY0MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC6vgjANBgkqhkiG9w0BAQsFAAOC
AQEAa9v6vq5de/IMonl6bZwqdN8Fy4qPoCayaG/Ppo8DZK3rY63QmwgTnzTmEbxb
FeYYUtPwZLN8DM6IUdndwTdM0JT8Y5XWZK5M3MnsK/vZ2/ttaiKJKxZ6aiWjR+x0
7sWPcoE+KjEI0LJusjDgzLeNvvftx3l8Ld0wQSWCl3J98lYIC8mbq9h5CuS+JDp4
ioudjhWfNiVFhjTyhAfqRvriN6/PZkJDDXefrtqBq4AiEn1kQb44s/zhwLas3scd
XJ64Ykc9RlEfMxAHYYVHh1aqb0bb+3uTyzvtV/yZ6ZTPhf9unWVd5sX6abnUh6iL
+2HNiOTf7AsbiHok7CSwR/lhaQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:30 2025 by rpki-client