Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Du5thcgT8Sj0AzC9jQgLrkAS1CM.roa
File: Du5thcgT8Sj0AzC9jQgLrkAS1CM.roa (raw, json)
Hash identifier: e39v69RgfP9YspjPDrRseRcdUQB3QfjDcQh7QhU4Orw=
Subject key identifier: 0E:EE:6D:85:C8:13:F1:28:F4:03:30:BD:8D:08:0B:AE:40:12:D4:23
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 042B7CE6
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Du5thcgT8Sj0AzC9jQgLrkAS1CM.roa
Signing time: Tue 05 Jul 2022 05:10:25 +0000
ROA not before: Tue 05 Jul 2022 05:10:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 46.23.98.0/24 maxlen: 24
46.23.96.0/24 maxlen: 24
164.215.100.0/24 maxlen: 24
46.23.99.0/24 maxlen: 24
85.158.148.0/22 maxlen: 22
85.158.146.0/24 maxlen: 24
46.23.111.0/24 maxlen: 24
46.23.108.0/24 maxlen: 24
185.81.216.0/22 maxlen: 22
88.151.198.0/24 maxlen: 24
88.151.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69958886 (0x42b7ce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jul 5 05:10:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0eee6d85c813f128f40330bd8d080bae4012d423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:4f:3c:c3:e8:6f:96:80:65:a5:7b:17:f4:
1d:8f:b5:ae:4c:fb:eb:bd:5e:46:b7:25:45:69:f2:
84:e1:f0:99:b8:3a:da:3f:15:7b:a3:92:63:33:9a:
8e:00:e4:d0:58:e0:bd:37:39:54:27:a9:02:eb:b9:
2d:60:3c:25:dc:88:f0:3e:4b:3a:a9:b3:34:8c:19:
02:15:cb:25:0b:5e:aa:bf:74:e5:1f:42:34:1b:58:
3f:f8:c1:f7:b8:70:fc:bb:54:dc:ab:c1:a0:ac:90:
bc:ac:6a:1c:b6:25:37:35:e0:56:2d:90:a1:0f:e6:
8a:17:5b:ea:28:58:81:02:07:7d:4c:5a:cd:e7:67:
5f:8a:ed:36:87:d0:df:bb:65:20:0a:53:c8:2c:88:
ee:97:b2:ff:32:4d:20:0d:29:39:a9:d8:86:8a:99:
87:c5:df:6c:03:7d:90:8d:66:91:d0:12:1e:19:80:
09:ac:05:de:48:8b:03:1a:ad:13:12:98:82:fe:39:
01:21:76:f3:fd:08:2f:8a:1d:bb:a1:14:b1:74:a8:
c4:72:50:b5:bd:1e:d1:aa:a5:65:89:7a:20:c6:75:
a9:ab:6c:6a:b9:d8:1c:4d:a1:33:e5:91:4b:79:cc:
f8:15:f4:95:0c:a6:93:56:cf:b0:41:18:8b:55:ba:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EE:6D:85:C8:13:F1:28:F4:03:30:BD:8D:08:0B:AE:40:12:D4:23
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Du5thcgT8Sj0AzC9jQgLrkAS1CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.96.0/24
46.23.98.0/23
46.23.108.0/24
46.23.111.0/24
85.158.146.0/24
85.158.148.0/22
88.151.195.0/24
88.151.198.0/24
164.215.100.0/24
185.81.216.0/22
Signature Algorithm: sha256WithRSAEncryption
31:98:3f:49:d2:1b:8e:76:f7:df:56:08:e1:21:1c:65:fb:48:
57:33:d3:fe:39:1f:20:b5:ef:48:48:8c:15:15:66:62:e7:b1:
3f:e2:74:90:9d:bc:86:0e:ea:92:bf:92:b8:21:4b:f5:a0:ef:
71:9b:6f:02:d1:90:49:c9:af:5e:c6:94:2d:c5:3c:c5:57:76:
33:16:71:1f:3e:a9:4d:ac:56:74:7e:9b:ee:39:08:1f:6c:e7:
f3:a4:06:5e:14:d7:00:7a:ed:e8:75:b5:fb:21:a9:64:b6:67:
39:21:e9:0d:09:df:76:03:a9:c8:1a:d3:58:1a:7d:30:32:9d:
de:30:03:57:f7:42:ef:07:8e:59:d7:68:89:68:70:eb:48:87:
a1:91:a3:d4:22:2c:8c:fe:8a:ce:39:15:7f:fb:41:d0:58:0c:
d1:ff:dc:f0:1f:cf:ba:a3:a9:c8:c0:4b:05:09:e7:1f:bc:2d:
ee:f5:d3:34:2f:a5:b5:b3:d7:43:c9:65:ff:6d:88:a9:b4:27:
0b:28:9f:bd:fd:96:61:85:55:2f:c9:bf:5e:a8:a8:a3:06:86:
0e:0e:94:c0:f3:1d:8c:42:fb:ec:80:69:a1:bc:ad:3b:33:58:
42:a0:23:8e:8e:8b:7a:53:4c:d2:91:ea:60:33:97:7b:1b:2d:
6e:9d:ae:38
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIEBCt85jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDA2YTQyYmIyNDQ2ZTUxZjE5MmVhMzc1YmRmN2VlYzVhNTFjNzdmMB4XDTIyMDcw
NTA1MTAyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGVlZTZkODVjODEz
ZjEyOGY0MDMzMGJkOGQwODBiYWU0MDEyZDQyMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMMVTzzD6G+WgGWlexf0HY+1rkz7671eRrclRWnyhOHwmbg6
2j8Ve6OSYzOajgDk0FjgvTc5VCepAuu5LWA8JdyI8D5LOqmzNIwZAhXLJQteqr90
5R9CNBtYP/jB97hw/LtU3KvBoKyQvKxqHLYlNzXgVi2QoQ/mihdb6ihYgQIHfUxa
zednX4rtNofQ37tlIApTyCyI7pey/zJNIA0pOanYhoqZh8XfbAN9kI1mkdASHhmA
CawF3kiLAxqtExKYgv45ASF28/0IL4odu6EUsXSoxHJQtb0e0aqlZYl6IMZ1qats
arnYHE2hM+WRS3nM+BX0lQymk1bPsEEYi1W6X88CAwEAAaOCAj8wggI7MB0GA1Ud
DgQWBBQO7m2FyBPxKPQDML2NCAuuQBLUIzAfBgNVHSMEGDAWgBR9BqQrskRuUfGS
6jdb337sWlHHfzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZRYWtLN0pFYmxIeGt1bzNXOTktN0ZwUngzOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWMvNzgwMDJhLTRmYzAtNGRiZi04NTg1LTJjZjgwNmIyZDBmMi8x
L0R1NXRoY2dUOFNqMEF6QzlqUWdMcmtBUzFDTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMv
NzgwMDJhLTRmYzAtNGRiZi04NTg1LTJjZjgwNmIyZDBmMi8xL2ZRYWtLN0pFYmxI
eGt1bzNXOTktN0ZwUngzOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBV
BggrBgEFBQcBBwEB/wRGMEQwQgQCAAEwPAMEAC4XYAMEAS4XYgMEAC4XbAMEAC4X
bwMEAFWekgMEAlWelAMEAFiXwwMEAFiXxgMEAKTXZAMEArlR2DANBgkqhkiG9w0B
AQsFAAOCAQEAMZg/SdIbjnb331YI4SEcZftIVzPT/jkfILXvSEiMFRVmYuexP+J0
kJ28hg7qkr+SuCFL9aDvcZtvAtGQScmvXsaULcU8xVd2MxZxHz6pTaxWdH6b7jkI
H2zn86QGXhTXAHrt6HW1+yGpZLZnOSHpDQnfdgOpyBrTWBp9MDKd3jADV/dC7weO
WddoiWhw60iHoZGj1CIsjP6KzjkVf/tB0FgM0f/c8B/PuqOpyMBLBQnnH7wt7vXT
NC+ltbPXQ8ll/22IqbQnCyifvf2WYYVVL8m/XqioowaGDg6UwPMdjEL77IBpobyt
OzNYQqAjjo6LelNM0pHqYDOXexstbp2uOA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:00 2023 by rpki-client on console-fra.rpki-client.org