Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/7GOELtjNbDiwAQwOQIJVOdU-M98.roa
File: 7GOELtjNbDiwAQwOQIJVOdU-M98.roa (raw, json)
Hash identifier: +f1HbXTRBmjFZgdAq0nxi32bdFFEAIOoSpRhZK5fn48=
Subject key identifier: EC:63:84:2E:D8:CD:6C:38:B0:01:0C:0E:40:82:55:39:D5:3E:33:DF
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 018896C6A93C3FBDE73769C161D335D4E711
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/7GOELtjNbDiwAQwOQIJVOdU-M98.roa
Signing time: Wed 07 Jun 2023 16:53:01 +0000
ROA not before: Wed 07 Jun 2023 16:53:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.28.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:c6:a9:3c:3f:bd:e7:37:69:c1:61:d3:35:d4:e7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Jun 7 16:53:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec63842ed8cd6c38b0010c0e40825539d53e33df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:88:f8:7f:04:bd:3f:81:b9:ae:0f:53:96:6c:
c2:49:4a:fc:31:34:a3:0e:f0:64:ff:0b:cc:60:5b:
d5:2d:75:6f:df:56:89:58:8b:51:a1:02:ba:7f:c1:
a2:76:d9:2c:b2:ea:32:b8:7d:09:e2:9a:2f:de:b2:
89:ac:db:cd:1e:e6:ad:3a:94:0a:99:ca:86:02:6f:
49:ff:7c:49:2a:58:61:76:f0:c1:88:e5:88:69:00:
b0:c4:f0:0a:61:cc:7d:85:98:da:09:82:0e:f2:1b:
80:13:02:4a:7e:14:8d:02:f3:5a:34:27:53:55:eb:
90:e6:2e:25:47:51:6f:87:ea:2d:56:b0:f5:49:d3:
e2:d2:45:0c:a2:cb:09:f3:c6:2c:0c:a4:af:2a:91:
8c:bd:be:59:42:52:69:9b:c5:e9:d2:ca:ab:bb:75:
da:b2:35:0c:8c:48:f1:9b:e6:93:50:2c:f8:3e:a6:
31:f9:03:74:aa:f5:bb:5e:f9:37:0a:5f:c1:45:09:
da:c9:4d:d3:aa:b0:97:0f:1f:84:43:c1:7e:64:b6:
38:55:61:be:c6:e9:cb:ab:3b:cb:0b:dc:6f:ab:c8:
a3:c0:b1:70:42:3e:14:6f:da:a3:a8:0a:fc:3f:2b:
5a:d2:d2:89:59:52:41:36:b1:30:49:b3:c0:de:41:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:63:84:2E:D8:CD:6C:38:B0:01:0C:0E:40:82:55:39:D5:3E:33:DF
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/7GOELtjNbDiwAQwOQIJVOdU-M98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.40.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:e1:33:5c:db:83:8a:ae:66:0a:87:af:e6:08:aa:5f:4d:34:
1c:4a:5d:bc:ac:fe:49:3c:02:72:09:8c:64:69:d4:10:7a:0b:
78:ab:5d:15:df:96:03:f9:29:3f:c3:3a:87:64:4f:79:9f:c7:
2e:5e:5d:5e:86:c1:72:6f:2b:e9:3d:d0:4d:71:ad:aa:e1:ae:
0e:4d:c9:63:81:65:9a:c0:4d:ab:5f:cf:90:ff:2f:ce:f4:0f:
a1:8d:39:db:86:51:9c:4d:55:de:8d:3f:d3:7e:51:d1:dc:71:
60:ee:20:06:6d:89:7d:18:71:db:1f:c1:bb:7f:3b:7d:0e:68:
7c:7d:13:2f:a2:10:8e:9e:73:f5:1d:f3:c8:c7:9a:db:5a:2d:
97:96:5c:7b:48:f4:63:ab:91:07:55:47:27:38:3a:8d:5e:7d:
ff:b9:ef:e8:f9:c2:11:4e:32:df:46:aa:3b:01:a9:8b:81:b1:
3a:7f:13:fa:a0:e1:e4:f0:f5:53:f6:58:0f:09:69:a0:eb:56:
00:0c:30:4a:74:0b:ba:5a:92:6b:3d:d3:03:90:94:2e:ac:ee:
7c:3d:df:b6:84:3e:ed:58:57:20:2b:1b:0c:17:d5:e0:63:ad:
10:5f:78:85:e9:d9:5d:95:d9:86:c2:8d:0b:bd:7e:09:c5:8d:
d2:d9:c6:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiWxqk8P73nN2nBYdM11OcRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh
M2Q0YjUwHhcNMjMwNjA3MTY1MzAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzYzODQyZWQ4Y2Q2YzM4YjAwMTBjMGU0MDgyNTUzOWQ1M2UzM2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYj4fwS9P4G5rg9TlmzCSUr8MTSj
DvBk/wvMYFvVLXVv31aJWItRoQK6f8GidtkssuoyuH0J4pov3rKJrNvNHuatOpQK
mcqGAm9J/3xJKlhhdvDBiOWIaQCwxPAKYcx9hZjaCYIO8huAEwJKfhSNAvNaNCdT
VeuQ5i4lR1Fvh+otVrD1SdPi0kUMossJ88YsDKSvKpGMvb5ZQlJpm8Xp0sqru3Xa
sjUMjEjxm+aTUCz4PqYx+QN0qvW7Xvk3Cl/BRQnayU3TqrCXDx+EQ8F+ZLY4VWG+
xunLqzvLC9xvq8ijwLFwQj4Ub9qjqAr8Pyta0tKJWVJBNrEwSbPA3kHoFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOxjhC7YzWw4sAEMDkCCVTnVPjPfMB8GA1UdIwQY
MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt
MmUxYzBhZjRmYWE0LzEvN0dPRUx0ak5iRGl3QVF3T1FJSlZPZFUtTTk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0
LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLhwoMA0G
CSqGSIb3DQEBCwUAA4IBAQDB4TNc24OKrmYKh6/mCKpfTTQcSl28rP5JPAJyCYxk
adQQegt4q10V35YD+Sk/wzqHZE95n8cuXl1ehsFybyvpPdBNca2q4a4OTcljgWWa
wE2rX8+Q/y/O9A+hjTnbhlGcTVXejT/TflHR3HFg7iAGbYl9GHHbH8G7fzt9Dmh8
fRMvohCOnnP1HfPIx5rbWi2Xllx7SPRjq5EHVUcnODqNXn3/ue/o+cIRTjLfRqo7
AamLgbE6fxP6oOHk8PVT9lgPCWmg61YADDBKdAu6WpJrPdMDkJQurO58Pd+2hD7t
WFcgKxsMF9XgY60QX3iF6dldldmGwo0LvX4JxY3S2caY
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:36 2025 by rpki-client