Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/0hbLDNB_HjqfyxYfSTn2ArTevbY.roa
File: 0hbLDNB_HjqfyxYfSTn2ArTevbY.roa (raw, json)
Hash identifier: 8wAXx0Ly6sA3eUpNq8ALHAfslAJaAcIq6rvvFGT/60I=
Subject key identifier: D2:16:CB:0C:D0:7F:1E:3A:9F:CB:16:1F:49:39:F6:02:B4:DE:BD:B6
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018A690A28F0533A4D1B9EC02D594ADA4163
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/0hbLDNB_HjqfyxYfSTn2ArTevbY.roa
Signing time: Wed 06 Sep 2023 05:49:48 +0000
ROA not before: Wed 06 Sep 2023 05:49:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15723
IP address blocks: 46.23.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:0a:28:f0:53:3a:4d:1b:9e:c0:2d:59:4a:da:41:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Sep 6 05:49:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d216cb0cd07f1e3a9fcb161f4939f602b4debdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:26:a8:a8:70:79:78:f7:a9:ca:8d:2b:9f:
81:d0:03:fa:ca:7c:d9:7a:c8:86:df:d0:a3:91:43:
fb:de:d8:41:d2:f7:ff:fc:ad:50:71:dd:93:f5:41:
b8:49:2e:cb:f9:6d:40:b2:48:12:bb:0b:d5:8e:4f:
fd:65:11:8d:36:15:75:4b:8d:b4:f9:ec:0f:0d:54:
89:fe:88:9e:2b:e0:68:79:d8:f4:8a:f3:8f:b2:19:
70:fe:1f:d7:f9:e2:79:bd:71:36:7f:6a:c2:56:a0:
6e:f6:68:52:3e:d9:6b:ca:26:16:a9:1e:1d:a9:70:
54:18:ed:6d:15:dc:e3:10:5a:84:77:0d:a4:c5:16:
f5:84:ed:16:b4:36:82:60:ac:01:fe:c7:fb:c3:a1:
58:7e:b1:21:3c:41:96:1c:86:1c:35:f1:cb:ea:b2:
cc:37:4d:04:9d:94:6d:36:8c:ad:35:9f:15:26:3e:
79:a5:56:d5:76:80:a3:a6:98:55:42:86:06:05:d9:
31:5d:12:62:ca:80:8d:de:d3:9c:d5:b4:c3:a0:6d:
2e:e3:ea:50:6e:a6:1e:8c:e1:8a:16:af:c7:ae:5a:
62:ad:96:36:09:c9:cf:13:06:36:d1:ce:b5:9b:9d:
04:73:00:e0:43:77:33:19:9b:6c:7c:10:f1:52:d2:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:16:CB:0C:D0:7F:1E:3A:9F:CB:16:1F:49:39:F6:02:B4:DE:BD:B6
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/0hbLDNB_HjqfyxYfSTn2ArTevbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.99.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c8:85:e5:d8:96:73:23:c6:eb:43:34:de:98:9b:af:9f:1a:
97:eb:86:ea:72:e4:64:aa:5c:ad:8c:b7:8b:8b:6a:db:1e:06:
14:27:43:2b:09:7f:8f:43:ef:bc:38:b3:69:b5:73:ea:1e:93:
39:25:9e:90:6e:8e:61:5d:78:58:e3:b7:d7:7e:55:ac:9d:cd:
f2:ba:fb:4f:db:08:fb:4d:c4:9d:5a:c3:44:7d:71:28:53:1a:
ba:2e:ed:82:0c:31:ac:39:b0:bc:ed:3e:66:93:da:c0:97:50:
8a:5d:44:31:f5:75:f8:02:e5:fe:1c:c0:b3:f4:24:81:f2:66:
7b:77:9b:d2:20:21:db:cc:7a:e1:b2:cb:81:bd:00:8c:2c:ee:
88:4e:03:af:a6:03:3e:26:e7:a8:61:71:e7:f3:a5:e4:7d:b4:
d1:0d:d5:55:db:1c:32:cc:a7:7d:cc:6f:22:05:64:57:00:cc:
58:1d:cd:d7:48:bc:c7:e2:d8:7f:9f:66:bc:cb:17:63:03:e2:
02:3b:38:36:6c:85:fa:9d:8d:68:80:f1:8f:eb:60:8a:8b:a4:
8e:c7:01:d1:be:3e:ed:b7:dd:25:c9:c0:c9:26:3e:ce:4f:2a:
90:be:3b:ac:fd:e6:0c:fe:e9:1a:dd:9e:e4:4c:c9:13:51:e2:
60:4e:b4:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYppCijwUzpNG57ALVlK2kFjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwOTA2MDU0OTQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjE2Y2IwY2QwN2YxZTNhOWZjYjE2MWY0OTM5ZjYwMmI0ZGViZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwcmqKhweXj3qcqNK5+B0AP6ynzZ
esiG39CjkUP73thB0vf//K1Qcd2T9UG4SS7L+W1AskgSuwvVjk/9ZRGNNhV1S420
+ewPDVSJ/oieK+Boedj0ivOPshlw/h/X+eJ5vXE2f2rCVqBu9mhSPtlryiYWqR4d
qXBUGO1tFdzjEFqEdw2kxRb1hO0WtDaCYKwB/sf7w6FYfrEhPEGWHIYcNfHL6rLM
N00EnZRtNoytNZ8VJj55pVbVdoCjpphVQoYGBdkxXRJiyoCN3tOc1bTDoG0u4+pQ
bqYejOGKFq/HrlpirZY2CcnPEwY20c61m50EcwDgQ3czGZtsfBDxUtKOoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNIWywzQfx46n8sWH0k59gK03r22MB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvMGhiTEROQl9IanFmeXhZZlNUbjJBclRldmJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhdjMA0G
CSqGSIb3DQEBCwUAA4IBAQBYyIXl2JZzI8brQzTemJuvnxqX64bqcuRkqlytjLeL
i2rbHgYUJ0MrCX+PQ++8OLNptXPqHpM5JZ6Qbo5hXXhY47fXflWsnc3yuvtP2wj7
TcSdWsNEfXEoUxq6Lu2CDDGsObC87T5mk9rAl1CKXUQx9XX4AuX+HMCz9CSB8mZ7
d5vSICHbzHrhssuBvQCMLO6ITgOvpgM+JueoYXHn86XkfbTRDdVV2xwyzKd9zG8i
BWRXAMxYHc3XSLzH4th/n2a8yxdjA+ICOzg2bIX6nY1ogPGP62CKi6SOxwHRvj7t
t90lycDJJj7OTyqQvjus/eYM/uka3Z7kTMkTUeJgTrSq
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:55 2025 by rpki-client