Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/3T3jfe_7PtTE-I6F9nWzs4OH1J0.roa
File: 3T3jfe_7PtTE-I6F9nWzs4OH1J0.roa (raw, json)
Hash identifier: 8DsCrBd38vhz25GbjCsB2LJ0CswQqBSb0jUx7gnJ6vo=
Subject key identifier: DD:3D:E3:7D:EF:FB:3E:D4:C4:F8:8E:85:F6:75:B3:B3:83:87:D4:9D
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0F4796E9
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/3T3jfe_7PtTE-I6F9nWzs4OH1J0.roa
Signing time: Sat 01 Jan 2022 12:58:25 +0000
ROA not before: Sat 01 Jan 2022 12:58:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42431
IP address blocks: 46.233.16.0/21 maxlen: 21
46.233.28.0/22 maxlen: 22
46.233.36.0/23 maxlen: 23
46.233.32.0/22 maxlen: 22
46.233.0.0/19 maxlen: 20
46.233.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256349929 (0xf4796e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jan 1 12:58:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd3de37deffb3ed4c4f88e85f675b3b38387d49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:0c:02:30:89:d5:47:0d:92:38:d4:4d:de:
be:5c:84:9a:08:ef:56:ba:ad:27:f6:f9:0b:33:3f:
3c:53:9a:0d:7f:35:74:8d:b0:08:27:9e:f4:a4:f4:
26:57:47:2a:62:ce:eb:1e:4d:23:b5:60:eb:3a:82:
96:ae:ac:e2:9c:83:78:d8:68:e4:a8:f5:ac:fb:94:
7a:c5:dd:06:2e:f4:d0:18:8a:f6:b8:78:f4:ca:29:
52:4a:57:c6:19:ed:5a:3c:a8:08:e0:c7:3d:52:9c:
f7:a8:25:7f:d1:2d:70:b0:28:9e:90:ad:78:79:e6:
1b:6a:7d:d3:61:d8:7c:aa:11:d3:79:a7:e5:2e:55:
8d:6d:f3:14:4b:d6:d9:21:8a:6a:90:07:58:3f:f4:
ea:c3:6a:d1:13:df:24:95:00:fe:88:73:9c:22:c7:
cf:63:d6:2b:2e:96:88:49:b6:cf:03:5c:17:38:8a:
6c:a6:e6:8f:3a:0f:9e:af:ea:a9:3c:e1:b2:a4:6a:
38:c7:16:85:09:5a:3d:7a:81:0f:7e:a0:f6:ee:c0:
66:15:40:ac:20:8f:54:cf:41:9f:4c:c2:f5:07:f6:
78:fe:03:00:95:5c:66:08:18:cb:fa:72:d9:9a:00:
f0:ec:61:ee:1e:50:0b:c4:4c:9e:51:7d:19:5f:2e:
5b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3D:E3:7D:EF:FB:3E:D4:C4:F8:8E:85:F6:75:B3:B3:83:87:D4:9D
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/3T3jfe_7PtTE-I6F9nWzs4OH1J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.0.0-46.233.37.255
Signature Algorithm: sha256WithRSAEncryption
48:0f:ab:1a:02:bc:1a:61:9a:2e:ca:7c:87:63:85:eb:19:92:
2c:aa:8a:59:a3:81:82:b3:0e:12:81:b8:05:65:16:21:29:01:
0f:3d:e1:60:25:c4:62:65:21:ce:59:1a:55:c6:4c:9c:aa:58:
1c:9b:22:bd:0e:a4:46:cd:eb:c1:37:d9:35:a9:60:c5:8e:41:
ab:55:16:f1:29:61:e2:d8:4e:94:26:bd:92:74:55:ba:f0:9f:
48:82:56:0d:84:8c:61:e8:db:e4:63:e4:97:ff:d2:97:ba:b0:
a1:07:8a:ca:a7:7f:68:a3:b2:b4:42:1b:0d:7b:d1:60:14:dd:
53:65:d1:12:fd:de:ef:44:99:9f:00:69:d5:72:88:43:d7:34:
0b:76:1b:f7:87:7e:58:5d:bb:96:03:0a:52:2f:e9:74:63:47:
d5:7e:41:56:0f:25:cd:70:86:b0:16:e5:ca:48:2c:d2:61:c8:
fd:7c:d0:d9:5e:74:e9:35:6c:7e:f8:1e:46:f8:75:7c:0d:ed:
ed:30:b8:92:5c:1f:c9:29:ec:1a:a7:00:ca:8a:03:c6:36:61:
4a:9e:d1:de:bc:3c:4e:35:92:3a:68:7c:fd:bd:75:9c:5a:f4:
fa:b4:01:2c:a9:2b:e8:ac:a1:a1:15:9d:42:25:1d:72:02:2f:
b3:bb:a4:38
-----BEGIN CERTIFICATE-----
MIIE9jCCA96gAwIBAgIED0eW6TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZmM1MGQwZDQyMDY3Yjc2YWIxYTJlOGU1MzNmZjg0OWI2NWQ1NmY1MB4XDTIyMDEw
MTEyNTgyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGQzZGUzN2RlZmZi
M2VkNGM0Zjg4ZTg1ZjY3NWIzYjM4Mzg3ZDQ5ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ0SDAIwidVHDZI41E3evlyEmgjvVrqtJ/b5CzM/PFOaDX81
dI2wCCee9KT0JldHKmLO6x5NI7Vg6zqClq6s4pyDeNho5Kj1rPuUesXdBi700BiK
9rh49MopUkpXxhntWjyoCODHPVKc96glf9EtcLAonpCteHnmG2p902HYfKoR03mn
5S5VjW3zFEvW2SGKapAHWD/06sNq0RPfJJUA/ohznCLHz2PWKy6WiEm2zwNcFziK
bKbmjzoPnq/qqTzhsqRqOMcWhQlaPXqBD36g9u7AZhVArCCPVM9Bn0zC9Qf2eP4D
AJVcZggYy/py2ZoA8Oxh7h5QC8RMnlF9GV8uW80CAwEAAaOCAhAwggIMMB0GA1Ud
DgQWBBTdPeN97/s+1MT4joX2dbOzg4fUnTAfBgNVHSMEGDAWgBRvxQ0NQgZ7dqsa
Lo5TP/hJtl1W9TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2I4VU5EVUlHZTNhckdpNk9Vel80U2JaZFZ2VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGUvZjJiZDZjLTQ4NDMtNGVhZC1hYTA5LTNjMTZmZjg0MWFiMi8x
LzNUM2pmZV83UHRURS1JNkY5bld6czRPSDFKMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUv
ZjJiZDZjLTQ4NDMtNGVhZC1hYTA5LTNjMTZmZjg0MWFiMi8xL2I4VU5EVUlHZTNh
ckdpNk9Vel80U2JaZFZ2VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAEwDTALAwMALukDBAEu6SQwDQYJKoZIhvcN
AQELBQADggEBAEgPqxoCvBphmi7KfIdjhesZkiyqilmjgYKzDhKBuAVlFiEpAQ89
4WAlxGJlIc5ZGlXGTJyqWBybIr0OpEbN68E32TWpYMWOQatVFvEpYeLYTpQmvZJ0
Vbrwn0iCVg2EjGHo2+Rj5Jf/0pe6sKEHisqnf2ijsrRCGw170WAU3VNl0RL93u9E
mZ8AadVyiEPXNAt2G/eHflhdu5YDClIv6XRjR9V+QVYPJc1whrAW5cpILNJhyP18
0NledOk1bH74Hkb4dXwN7e0wuJJcH8kp7BqnAMqKA8Y2YUqe0d68PE41kjpofP29
dZxa9Pq0ASypK+isoaEVnUIlHXICL7O7pDg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:09 2024 by rpki-client on console-ams.rpki-client.org