Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/2fCcuzYk3ls1uoUolSj6dOjMy5E.roa
File: 2fCcuzYk3ls1uoUolSj6dOjMy5E.roa (raw, json)
Hash identifier: 7IILiaR/+56RYSWKtM4ATRlOYR2wJoQgXj3py1nd1r4=
Subject key identifier: D9:F0:9C:BB:36:24:DE:5B:35:BA:85:28:95:28:FA:74:E8:CC:CB:91
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 09466758
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/2fCcuzYk3ls1uoUolSj6dOjMy5E.roa
Signing time: Sun 27 Mar 2022 12:43:24 +0000
ROA not before: Sun 27 Mar 2022 12:43:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9331
IP address blocks: 46.232.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155608920 (0x9466758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 27 12:43:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9f09cbb3624de5b35ba85289528fa74e8cccb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:8e:ed:d7:5a:8e:8d:0a:4a:0d:1b:80:07:
17:3c:87:cc:d5:ca:f9:93:85:3e:ec:7c:3b:bb:32:
71:f2:80:45:21:1c:6b:07:67:15:ad:44:f7:8e:3a:
df:cb:10:9e:d9:12:25:ae:69:24:c3:50:d3:90:1a:
1e:0c:2f:f6:39:d0:16:7b:2a:50:cf:ce:47:52:bb:
a5:df:03:89:45:a4:82:c1:c9:ed:e9:a8:5a:f1:94:
4c:bb:31:b9:53:25:27:31:e6:75:a3:a6:1e:2a:80:
c6:5a:3e:76:de:4a:16:a1:e4:da:a9:18:8e:89:8a:
1d:d2:e1:ac:31:68:b6:9e:b2:b3:6b:0c:88:9c:b3:
d8:ce:01:f6:69:bc:e3:8f:cf:88:e7:b7:69:35:eb:
88:02:17:6d:c5:35:30:47:f8:84:e6:ca:54:54:01:
a6:c9:fc:ab:27:ea:11:dd:f2:71:d2:d6:32:a9:d8:
4f:a6:25:dc:53:4c:06:f4:12:5d:d4:6b:88:26:74:
c6:b9:d3:64:e9:52:08:7f:45:5c:f0:2f:35:31:05:
c1:9f:af:6c:29:bf:21:93:70:b3:7e:48:83:eb:6b:
71:e7:b7:8c:24:46:29:1c:e0:4e:5d:7c:b0:af:e9:
e0:f4:a9:31:4c:2b:01:1b:f2:2f:29:41:f1:0b:12:
0f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F0:9C:BB:36:24:DE:5B:35:BA:85:28:95:28:FA:74:E8:CC:CB:91
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/2fCcuzYk3ls1uoUolSj6dOjMy5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.123.0/24
Signature Algorithm: sha256WithRSAEncryption
90:50:d4:e2:12:7b:4b:27:2d:21:ff:97:ec:0f:17:97:f7:8c:
9a:f3:9e:a0:f9:8b:c6:e8:a6:6e:e1:08:7e:8e:37:cd:3e:b1:
27:61:92:bf:37:b1:4c:ed:90:70:05:a8:9d:36:64:e2:4e:9f:
53:35:b3:d7:4f:f5:ff:79:b7:0f:61:02:af:8c:c6:c3:c9:a4:
08:60:74:ee:3c:84:ea:fd:76:3d:9d:01:f2:b5:66:9c:09:9b:
ec:62:18:35:02:82:70:21:e6:86:09:29:69:9d:d9:16:b8:ad:
5e:20:da:51:fd:ce:02:59:9b:d1:90:7e:ec:95:79:11:5e:94:
c8:15:06:14:e9:35:70:eb:0a:92:b8:0d:bc:75:59:b1:ca:a9:
90:0c:d1:ad:ff:e3:0c:f4:d1:af:fe:35:da:c5:ad:bd:5b:89:
5f:2e:37:ea:c2:6d:fc:e9:00:1e:00:7a:40:76:16:c6:e7:5c:
f9:21:3a:c2:4d:8a:d7:81:80:81:14:2e:38:dd:8d:b9:23:80:
3b:96:04:ac:5a:f3:dd:06:97:1c:82:06:b5:06:36:df:72:d2:
93:13:11:1f:ef:6a:79:59:de:e2:91:7b:0f:46:0f:9d:0a:a4:
57:fe:86:42:f0:dd:3e:fb:de:b2:b9:e5:8d:ce:ee:57:59:8e:
b3:2a:4e:df
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECUZnWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NTg4ZjE5N2Y5N2U4OTAwNzU1NTQ0ZTgxMGNkZGVmOWQ5MGZiYzQxMB4XDTIyMDMy
NzEyNDMyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDlmMDljYmIzNjI0
ZGU1YjM1YmE4NTI4OTUyOGZhNzRlOGNjY2I5MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKVtju3XWo6NCkoNG4AHFzyHzNXK+ZOFPux8O7sycfKARSEc
awdnFa1E944638sQntkSJa5pJMNQ05AaHgwv9jnQFnsqUM/OR1K7pd8DiUWkgsHJ
7emoWvGUTLsxuVMlJzHmdaOmHiqAxlo+dt5KFqHk2qkYjomKHdLhrDFotp6ys2sM
iJyz2M4B9mm844/PiOe3aTXriAIXbcU1MEf4hObKVFQBpsn8qyfqEd3ycdLWMqnY
T6Yl3FNMBvQSXdRriCZ0xrnTZOlSCH9FXPAvNTEFwZ+vbCm/IZNws35Ig+trcee3
jCRGKRzgTl18sK/p4PSpMUwrARvyLylB8QsSD+0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTZ8Jy7NiTeWzW6hSiVKPp06MzLkTAfBgNVHSMEGDAWgBRViPGX+X6JAHVV
ROgQzd752Q+8QTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZZanhsX2wtaVFCMVZVVG9FTTNlLWRrUHZFRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvNjIyOTgxLTk2NTAtNDI3MS05MmNhLTdjZmVmNDI3NmEwZi8x
LzJmQ2N1ellrM2xzMXVvVW9sU2o2ZE9qTXk1RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
NjIyOTgxLTk2NTAtNDI3MS05MmNhLTdjZmVmNDI3NmEwZi8xL1ZZanhsX2wtaVFC
MVZVVG9FTTNlLWRrUHZFRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC7oezANBgkqhkiG9w0BAQsFAAOC
AQEAkFDU4hJ7SyctIf+X7A8Xl/eMmvOeoPmLxuimbuEIfo43zT6xJ2GSvzexTO2Q
cAWonTZk4k6fUzWz10/1/3m3D2ECr4zGw8mkCGB07jyE6v12PZ0B8rVmnAmb7GIY
NQKCcCHmhgkpaZ3ZFritXiDaUf3OAlmb0ZB+7JV5EV6UyBUGFOk1cOsKkrgNvHVZ
scqpkAzRrf/jDPTRr/412sWtvVuJXy436sJt/OkAHgB6QHYWxudc+SE6wk2K14GA
gRQuON2NuSOAO5YErFrz3QaXHIIGtQY233LSkxMRH+9qeVne4pF7D0YPnQqkV/6G
QvDdPvvesrnljc7uV1mOsypO3w==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:35 2023 by rpki-client on console-fra.rpki-client.org