Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/IyvzgSovYEJLZ7LAD3HiWgF8KZM.roa
File: IyvzgSovYEJLZ7LAD3HiWgF8KZM.roa (raw, json)
Hash identifier: GSSVD2HlCtUQTy7grso2LxZUlBqzB32wYK2iW7bUS08=
Subject key identifier: 23:2B:F3:81:2A:2F:60:42:4B:67:B2:C0:0F:71:E2:5A:01:7C:29:93
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018617634E15056487A8112910C2960CC774
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/IyvzgSovYEJLZ7LAD3HiWgF8KZM.roa
Signing time: Fri 03 Feb 2023 13:07:09 +0000
ROA not before: Fri 03 Feb 2023 13:07:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 46.23.99.0/24 maxlen: 24
185.81.216.0/24 maxlen: 24
185.81.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:63:4e:15:05:64:87:a8:11:29:10:c2:96:0c:c7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 3 13:07:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=232bf3812a2f60424b67b2c00f71e25a017c2993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:43:c4:2b:2e:25:d4:b0:78:f5:74:84:8a:
70:d3:d6:01:be:a7:76:a8:06:d0:8d:b9:48:fb:f8:
3f:38:41:8e:b5:5b:e6:ee:a1:48:c9:ab:87:9a:2e:
ad:00:94:8e:88:ff:4e:95:9f:9f:c5:27:b4:3f:79:
5f:44:3e:a0:a9:28:fa:3a:88:e6:67:01:2c:35:94:
e9:83:4d:ad:6f:7d:df:6b:72:bf:cb:14:27:52:0a:
a2:30:6a:66:7b:c7:9b:86:42:53:a4:3c:5a:e7:0b:
42:f2:8c:54:e1:0d:12:72:5d:f1:7b:69:1c:c0:cb:
0d:1e:02:af:90:dc:f8:fb:d7:0b:2f:95:34:a6:c5:
45:4e:36:af:50:98:dd:10:b2:34:13:b8:dc:41:67:
59:a4:c4:6e:81:20:73:76:56:8c:0d:8c:3c:8b:37:
0e:31:8e:f2:34:c7:bb:ce:6c:2a:6e:41:31:4c:75:
47:3e:0a:a4:9f:f3:fe:e3:ab:be:5e:b6:e0:0a:b8:
7b:45:39:b4:c0:53:c5:15:ed:1d:68:b1:89:6a:80:
de:00:f6:d7:44:56:3a:cc:d8:d5:0f:e2:e2:96:23:
38:5e:7f:00:cf:92:3a:91:05:6c:4f:6d:fc:59:90:
5d:3a:56:1e:5d:01:67:14:a7:f0:be:87:2c:d9:12:
80:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2B:F3:81:2A:2F:60:42:4B:67:B2:C0:0F:71:E2:5A:01:7C:29:93
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/IyvzgSovYEJLZ7LAD3HiWgF8KZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.99.0/24
185.81.216.0/24
185.81.219.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e6:b7:45:a3:7c:54:06:43:d0:2d:68:ca:ea:78:4c:2d:f3:
b0:e9:95:bd:b2:ba:8e:03:dc:0a:a7:e0:0b:e5:3d:2a:47:18:
c3:74:66:d7:94:91:ff:23:43:1f:f7:5e:2c:19:25:3f:3b:39:
cc:a0:47:4b:d0:59:04:c2:ce:c4:38:13:a9:8d:07:32:b3:7f:
fa:1f:6e:23:1f:67:d7:34:7c:54:8b:b5:28:51:3b:70:bd:f0:
93:22:4d:b5:b1:ba:a2:f6:92:ae:05:fe:77:4e:f8:72:3d:b9:
36:f1:84:5b:c7:b9:04:e4:96:73:a8:5a:d5:6b:b3:a3:64:ef:
81:14:0f:43:9c:cc:5b:80:bd:93:44:de:42:a2:91:a3:16:f8:
9f:e0:60:06:a7:64:16:71:5c:13:59:c1:45:ed:4f:20:d6:18:
f5:25:93:f6:68:b2:ea:9b:19:c2:fb:6d:9b:95:fc:9b:c9:43:
f7:62:a2:6d:52:33:04:e7:0e:36:ae:75:5f:e8:50:b6:ee:bd:
66:d6:34:5d:89:0b:2f:0c:36:ea:d3:3c:a7:04:c7:c7:2c:09:
5b:9b:54:06:6c:28:8d:99:e7:5c:c0:85:90:bf:cc:7a:ba:57:
17:c2:5f:6a:d2:a0:4a:74:0f:c8:ea:a9:d7:03:da:b7:ee:46:
0c:72:b6:3e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYYXY04VBWSHqBEpEMKWDMd0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwMjAzMTMwNzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzJiZjM4MTJhMmY2MDQyNGI2N2IyYzAwZjcxZTI1YTAxN2MyOTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoBDxCsuJdSwePV0hIpw09YBvqd2
qAbQjblI+/g/OEGOtVvm7qFIyauHmi6tAJSOiP9OlZ+fxSe0P3lfRD6gqSj6Oojm
ZwEsNZTpg02tb33fa3K/yxQnUgqiMGpme8ebhkJTpDxa5wtC8oxU4Q0Scl3xe2kc
wMsNHgKvkNz4+9cLL5U0psVFTjavUJjdELI0E7jcQWdZpMRugSBzdlaMDYw8izcO
MY7yNMe7zmwqbkExTHVHPgqkn/P+46u+XrbgCrh7RTm0wFPFFe0daLGJaoDeAPbX
RFY6zNjVD+LiliM4Xn8Az5I6kQVsT238WZBdOlYeXQFnFKfwvocs2RKA9wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCMr84EqL2BCS2eywA9x4loBfCmTMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvSXl2emdTb3ZZRUpMWjdMQUQzSGlXZ0Y4S1pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALhdjAwQA
uVHYAwQAuVHbMA0GCSqGSIb3DQEBCwUAA4IBAQAl5rdFo3xUBkPQLWjK6nhMLfOw
6ZW9srqOA9wKp+AL5T0qRxjDdGbXlJH/I0Mf914sGSU/OznMoEdL0FkEws7EOBOp
jQcys3/6H24jH2fXNHxUi7UoUTtwvfCTIk21sbqi9pKuBf53TvhyPbk28YRbx7kE
5JZzqFrVa7OjZO+BFA9DnMxbgL2TRN5CopGjFvif4GAGp2QWcVwTWcFF7U8g1hj1
JZP2aLLqmxnC+22blfybyUP3YqJtUjME5w42rnVf6FC27r1m1jRdiQsvDDbq0zyn
BMfHLAlbm1QGbCiNmedcwIWQv8x6ulcXwl9q0qBKdA/I6qnXA9q37kYMcrY+
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:00 2025 by rpki-client