Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/GzNBTBAAPnOcjhHOSHZiLV5PfB8.roa
File: GzNBTBAAPnOcjhHOSHZiLV5PfB8.roa (raw, json)
Hash identifier: FXLbBGss5Ed01RZcp/C8vU/A6Tekrs7qevLwIbeI2i0=
Subject key identifier: 1B:33:41:4C:10:00:3E:73:9C:8E:11:CE:48:76:62:2D:5E:4F:7C:1F
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 09BB3369
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/GzNBTBAAPnOcjhHOSHZiLV5PfB8.roa
Signing time: Mon 09 May 2022 12:51:43 +0000
ROA not before: Mon 09 May 2022 12:51:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399989
IP address blocks: 46.3.48.0/20 maxlen: 20
46.232.80.0/20 maxlen: 20
46.3.80.0/21 maxlen: 21
46.3.96.0/20 maxlen: 20
46.3.216.0/21 maxlen: 21
46.3.224.0/21 maxlen: 21
46.232.24.0/21 maxlen: 21
46.3.120.0/21 maxlen: 21
46.232.32.0/20 maxlen: 20
46.3.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163263337 (0x9bb3369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: May 9 12:51:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b33414c10003e739c8e11ce4876622d5e4f7c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a8:0e:93:f2:9e:98:c3:d2:b8:02:26:20:8c:
6e:29:db:4b:32:5d:2e:c3:dc:63:25:54:c1:2f:3c:
78:c3:8f:17:c1:15:a9:e9:7a:32:47:9a:2b:8e:6d:
65:52:ad:3e:59:8e:fc:d5:dc:f1:ce:9b:42:d6:0c:
7e:73:72:47:72:92:50:76:f5:8b:29:8f:0e:3e:aa:
ef:ef:ca:f7:8a:84:3c:b1:6c:dc:03:01:be:e5:33:
5e:54:de:18:97:88:a3:4e:7f:18:ee:b8:9f:a8:8d:
df:20:0f:93:f3:2c:6e:66:aa:76:b8:18:2f:31:b9:
f6:40:53:2a:cc:e2:bc:e3:d6:8a:7d:ba:49:40:ff:
b1:62:a2:85:98:c8:ab:52:79:15:bc:5b:c3:9d:62:
1e:ba:d1:5b:bd:16:ea:2c:9d:d1:86:e2:25:17:dd:
a9:1f:7c:80:93:2d:dc:3a:e6:f8:d0:96:2e:89:c8:
ba:8e:95:40:40:9e:e9:1e:e8:b2:44:dc:5e:30:a3:
51:cf:b2:0d:65:54:03:30:95:81:8f:c3:12:59:b8:
5b:da:40:e0:4d:bb:66:77:50:9e:32:be:54:a8:c5:
37:7f:70:6f:ca:2d:e3:b9:20:d1:fe:61:d3:ca:33:
7a:44:d0:86:d0:47:52:87:d4:8d:3a:65:b6:16:bc:
c0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:33:41:4C:10:00:3E:73:9C:8E:11:CE:48:76:62:2D:5E:4F:7C:1F
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/GzNBTBAAPnOcjhHOSHZiLV5PfB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.32.0/19
46.3.80.0/21
46.3.96.0/20
46.3.120.0/21
46.3.216.0-46.3.231.255
46.232.24.0-46.232.47.255
46.232.80.0/20
Signature Algorithm: sha256WithRSAEncryption
33:1b:fc:cb:c5:39:76:12:3f:34:3f:1b:92:99:15:1e:d9:eb:
f7:c2:ea:ab:4e:bf:41:9f:0d:b1:75:da:cb:78:d0:66:33:71:
b6:94:df:7d:0c:98:52:53:ea:93:ff:58:40:6f:42:5a:ae:1c:
12:fe:ef:fc:14:b3:ac:39:18:03:ec:3b:d9:27:72:03:ac:fc:
26:23:1c:f6:16:c7:b7:0b:f6:0c:6d:71:ed:85:f5:fb:b1:fd:
03:d6:82:8a:cb:45:42:b3:ac:c1:5c:38:27:82:84:b0:c8:c2:
1b:54:78:2a:e7:86:6c:c0:da:d5:3a:82:68:69:39:bf:6c:60:
a6:a4:17:a5:12:43:07:b4:bf:8e:e5:9d:9f:d0:2d:c1:f8:d6:
fb:17:a3:14:2e:c2:52:cb:ed:56:84:56:72:ef:da:5d:e9:4e:
82:bb:4f:d8:5f:1b:99:c8:97:8f:c7:db:04:a5:95:bb:82:2c:
d3:1f:39:07:a1:9e:4e:db:4d:58:38:1b:ee:08:ca:0b:94:26:
98:96:b9:fc:73:fc:a3:76:25:73:f2:8c:c8:d4:c6:33:32:5f:
db:09:62:75:83:d2:b9:90:f1:71:c0:bf:97:ae:ac:f9:82:6e:
df:09:1c:33:2f:f6:0d:38:21:db:b4:fb:6d:ff:ee:6a:b6:69:
58:3a:c7:ea
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIECbszaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NTg4ZjE5N2Y5N2U4OTAwNzU1NTQ0ZTgxMGNkZGVmOWQ5MGZiYzQxMB4XDTIyMDUw
OTEyNTE0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWIzMzQxNGMxMDAw
M2U3MzljOGUxMWNlNDg3NjYyMmQ1ZTRmN2MxZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIuoDpPynpjD0rgCJiCMbinbSzJdLsPcYyVUwS88eMOPF8EV
qel6MkeaK45tZVKtPlmO/NXc8c6bQtYMfnNyR3KSUHb1iymPDj6q7+/K94qEPLFs
3AMBvuUzXlTeGJeIo05/GO64n6iN3yAPk/MsbmaqdrgYLzG59kBTKszivOPWin26
SUD/sWKihZjIq1J5Fbxbw51iHrrRW70W6iyd0YbiJRfdqR98gJMt3Drm+NCWLonI
uo6VQECe6R7oskTcXjCjUc+yDWVUAzCVgY/DElm4W9pA4E27ZndQnjK+VKjFN39w
b8ot47kg0f5h08ozekTQhtBHUofUjTpltha8wBcCAwEAAaOCAj0wggI5MB0GA1Ud
DgQWBBQbM0FMEAA+c5yOEc5IdmItXk98HzAfBgNVHSMEGDAWgBRViPGX+X6JAHVV
ROgQzd752Q+8QTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZZanhsX2wtaVFCMVZVVG9FTTNlLWRrUHZFRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvNjIyOTgxLTk2NTAtNDI3MS05MmNhLTdjZmVmNDI3NmEwZi8x
L0d6TkJUQkFBUG5PY2poSE9TSFppTFY1UGZCOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
NjIyOTgxLTk2NTAtNDI3MS05MmNhLTdjZmVmNDI3NmEwZi8xL1ZZanhsX2wtaVFC
MVZVVG9FTTNlLWRrUHZFRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBT
BggrBgEFBQcBBwEB/wREMEIwQAQCAAEwOgMEBS4DIAMEAy4DUAMEBC4DYAMEAy4D
eDAMAwQDLgPYAwQDLgPgMAwDBAMu6BgDBAQu6CADBAQu6FAwDQYJKoZIhvcNAQEL
BQADggEBADMb/MvFOXYSPzQ/G5KZFR7Z6/fC6qtOv0GfDbF12st40GYzcbaU330M
mFJT6pP/WEBvQlquHBL+7/wUs6w5GAPsO9kncgOs/CYjHPYWx7cL9gxtce2F9fux
/QPWgorLRUKzrMFcOCeChLDIwhtUeCrnhmzA2tU6gmhpOb9sYKakF6USQwe0v47l
nZ/QLcH41vsXoxQuwlLL7VaEVnLv2l3pToK7T9hfG5nIl4/H2wSllbuCLNMfOQeh
nk7bTVg4G+4IyguUJpiWufxz/KN2JXPyjMjUxjMyX9sJYnWD0rmQ8XHAv5eurPmC
bt8JHDMv9g04Idu0+23/7mq2aVg6x+o=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org