Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/R9j_rZV6MF4Dpr2sW1Sn4Nt93l0.roa
File: R9j_rZV6MF4Dpr2sW1Sn4Nt93l0.roa (raw, json)
Hash identifier: WAYiMY38cTEy0QfNxSsR136nM3jQt2TR3GoLxXFLaV0=
Subject key identifier: 47:D8:FF:AD:95:7A:30:5E:03:A6:BD:AC:5B:54:A7:E0:DB:7D:DE:5D
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0A06AB3F
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/R9j_rZV6MF4Dpr2sW1Sn4Nt93l0.roa
Signing time: Mon 06 Jun 2022 17:28:22 +0000
ROA not before: Mon 06 Jun 2022 17:28:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399587
IP address blocks: 46.3.164.0/22 maxlen: 24
46.3.96.0/20 maxlen: 24
46.3.120.0/21 maxlen: 22
46.232.64.0/22 maxlen: 24
46.3.48.0/20 maxlen: 20
46.3.72.0/21 maxlen: 21
46.3.80.0/21 maxlen: 22
46.3.86.0/23 maxlen: 24
46.3.208.0/21 maxlen: 21
46.3.216.0/22 maxlen: 24
46.3.216.0/21 maxlen: 22
46.3.222.0/24 maxlen: 24
46.232.20.0/22 maxlen: 24
46.3.224.0/21 maxlen: 22
46.3.32.0/19 maxlen: 22
46.3.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168209215 (0xa06ab3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 6 17:28:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47d8ffad957a305e03a6bdac5b54a7e0db7dde5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:61:fa:80:f7:db:d5:7a:aa:4b:b2:2a:bb:
32:78:99:fb:4e:5b:4b:18:8e:62:ea:c0:1c:5c:91:
7a:cd:ea:80:00:30:d9:e4:c2:68:99:d0:ad:a1:fd:
fd:65:64:b2:0b:b5:ff:19:da:a7:03:ef:01:53:b9:
c7:c4:97:3b:0d:5a:fd:9a:53:7c:5b:b2:aa:27:f0:
09:5c:c2:7c:d6:a6:2b:53:75:4f:47:65:51:49:8d:
eb:b2:10:e4:70:f7:d6:45:d7:60:cc:c8:c0:6c:b3:
51:71:c9:6a:8a:41:d5:4c:20:bf:c0:7c:43:1f:63:
cc:c5:9c:61:2c:e4:a8:88:1b:3b:ee:a0:6a:3a:1d:
ab:5b:5f:70:af:7e:18:46:d9:5f:3e:50:0b:cc:c9:
07:52:15:77:a3:a3:d0:67:45:46:52:6d:d9:51:ea:
1d:7c:c3:81:de:0a:7a:28:0c:f7:49:37:2c:d8:fe:
f3:87:b1:13:02:05:c4:18:b0:71:05:8f:cf:75:d9:
29:94:6f:7f:1e:2a:be:55:77:4f:3b:84:ca:fc:3c:
19:f9:11:51:e1:7b:01:92:3f:3c:05:dd:0c:2c:ee:
eb:24:09:4e:e4:43:fe:4f:c6:d6:81:b4:e9:60:54:
5c:ec:1f:3c:8a:2b:b2:3b:e2:10:ff:57:af:24:00:
ec:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D8:FF:AD:95:7A:30:5E:03:A6:BD:AC:5B:54:A7:E0:DB:7D:DE:5D
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/R9j_rZV6MF4Dpr2sW1Sn4Nt93l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.32.0/19
46.3.72.0-46.3.87.255
46.3.96.0/20
46.3.120.0/21
46.3.164.0/22
46.3.208.0-46.3.231.255
46.232.20.0/22
46.232.64.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:93:60:32:52:0e:03:60:7e:df:3c:de:2f:1b:1a:4f:bd:70:
c7:b5:a9:5a:18:48:8f:06:91:b3:94:09:c9:e8:a4:4d:92:86:
77:33:80:9a:e7:36:e1:e5:3e:72:4f:38:5b:9d:6d:56:86:69:
dc:3b:52:3c:36:0e:52:ab:cc:63:0c:c7:72:38:de:28:f6:7e:
c5:31:de:3e:f7:10:54:34:1f:d8:b6:ff:e9:03:4c:10:8a:06:
19:aa:d7:86:9c:a7:05:ec:c4:5f:d8:be:8c:f1:c5:ad:16:1d:
17:90:68:e2:bf:04:25:ea:90:0e:aa:52:4d:77:14:97:d0:a2:
ea:8b:1a:11:14:24:a1:13:e8:5a:83:17:93:3a:a3:9c:fd:08:
12:df:a1:f4:15:41:2e:eb:35:14:04:8d:fa:e1:ae:d4:3b:87:
6a:b2:ea:e9:4d:af:e4:aa:a7:5a:63:22:6a:26:f8:12:d0:00:
2a:15:0d:71:a7:41:ba:49:c2:2b:ec:a8:35:9b:bb:3e:d5:82:
96:91:a9:18:fe:c3:8e:55:8e:1a:7d:11:a0:de:4d:bf:42:7f:
81:e3:11:da:1d:ca:47:72:33:63:79:1b:a9:94:37:c0:8f:a4:
4e:10:4a:41:18:ec:e2:5e:52:4b:53:e2:09:04:15:0a:af:85:
1a:e0:8e:bc
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIECgarPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NTg4ZjE5N2Y5N2U4OTAwNzU1NTQ0ZTgxMGNkZGVmOWQ5MGZiYzQxMB4XDTIyMDYw
NjE3MjgyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDdkOGZmYWQ5NTdh
MzA1ZTAzYTZiZGFjNWI1NGE3ZTBkYjdkZGU1ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKa9YfqA99vVeqpLsiq7MniZ+05bSxiOYurAHFyRes3qgAAw
2eTCaJnQraH9/WVksgu1/xnapwPvAVO5x8SXOw1a/ZpTfFuyqifwCVzCfNamK1N1
T0dlUUmN67IQ5HD31kXXYMzIwGyzUXHJaopB1Uwgv8B8Qx9jzMWcYSzkqIgbO+6g
ajodq1tfcK9+GEbZXz5QC8zJB1IVd6Oj0GdFRlJt2VHqHXzDgd4KeigM90k3LNj+
84exEwIFxBiwcQWPz3XZKZRvfx4qvlV3TzuEyvw8GfkRUeF7AZI/PAXdDCzu6yQJ
TuRD/k/G1oG06WBUXOwfPIorsjviEP9XryQA7EUCAwEAAaOCAkMwggI/MB0GA1Ud
DgQWBBRH2P+tlXowXgOmvaxbVKfg233eXTAfBgNVHSMEGDAWgBRViPGX+X6JAHVV
ROgQzd752Q+8QTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZZanhsX2wtaVFCMVZVVG9FTTNlLWRrUHZFRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvNjIyOTgxLTk2NTAtNDI3MS05MmNhLTdjZmVmNDI3NmEwZi8x
L1I5al9yWlY2TUY0RHByMnNXMVNuNE50OTNsMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
NjIyOTgxLTk2NTAtNDI3MS05MmNhLTdjZmVmNDI3NmEwZi8xL1ZZanhsX2wtaVFC
MVZVVG9FTTNlLWRrUHZFRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZ
BggrBgEFBQcBBwEB/wRKMEgwRgQCAAEwQAMEBS4DIDAMAwQDLgNIAwQDLgNQAwQE
LgNgAwQDLgN4AwQCLgOkMAwDBAQuA9ADBAMuA+ADBAIu6BQDBAIu6EAwDQYJKoZI
hvcNAQELBQADggEBAIuTYDJSDgNgft883i8bGk+9cMe1qVoYSI8GkbOUCcnopE2S
hnczgJrnNuHlPnJPOFudbVaGadw7Ujw2DlKrzGMMx3I43ij2fsUx3j73EFQ0H9i2
/+kDTBCKBhmq14acpwXsxF/Yvozxxa0WHReQaOK/BCXqkA6qUk13FJfQouqLGhEU
JKET6FqDF5M6o5z9CBLfofQVQS7rNRQEjfrhrtQ7h2qy6ulNr+Sqp1pjImom+BLQ
ACoVDXGnQbpJwivsqDWbuz7VgpaRqRj+w45Vjhp9EaDeTb9Cf4HjEdodykdyM2N5
G6mUN8CPpE4QSkEY7OJeUktT4gkEFQqvhRrgjrw=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org