Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kZcbwCXWnmEkIT5oSRR1tiR3FNo.roa
File: kZcbwCXWnmEkIT5oSRR1tiR3FNo.roa (raw, json)
Hash identifier: WpgnN16Oh+oi49J5qHkwBawoQfKWKk5mF1FELdmAO2c=
Subject key identifier: 91:97:1B:C0:25:D6:9E:61:24:21:3E:68:49:14:75:B6:24:77:14:DA
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0330EEF4
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kZcbwCXWnmEkIT5oSRR1tiR3FNo.roa
Signing time: Tue 05 Apr 2022 19:23:16 +0000
ROA not before: Tue 05 Apr 2022 19:23:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 394648
IP address blocks: 46.23.96.0/24 maxlen: 24
46.23.98.0/24 maxlen: 24
46.23.99.0/24 maxlen: 24
46.23.108.0/24 maxlen: 24
46.23.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53538548 (0x330eef4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Apr 5 19:23:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91971bc025d69e6124213e68491475b6247714da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:a5:01:05:f7:a5:a3:8d:3a:6c:47:17:7b:
7f:92:2e:d9:a7:6c:94:1c:69:3b:7b:3c:09:39:81:
e3:4b:bd:d3:e6:49:02:f6:35:16:e2:b6:24:76:bb:
ac:b8:1a:1e:a0:20:81:01:ce:1e:de:63:78:8f:e9:
49:25:7f:e0:e2:a3:65:74:8e:a6:8c:70:3b:94:31:
a3:75:98:a1:6e:5d:53:9f:a1:67:27:cd:cf:8f:8f:
56:bc:df:0b:98:90:69:54:8a:9e:4b:a8:33:08:db:
93:c4:4d:ff:a9:fc:1c:da:99:26:db:30:b1:9b:c9:
08:49:0e:ed:48:09:a0:df:f2:1d:c2:f6:2d:52:00:
f3:30:c3:63:0c:1e:90:e1:7f:60:f3:6d:16:ac:89:
9d:6c:a9:c2:03:03:af:51:74:c6:95:f4:4a:44:76:
c3:a4:c3:1a:fd:a9:38:37:f4:0f:7c:33:1c:6a:39:
30:cb:56:13:10:fd:fc:b8:73:e8:90:4d:20:f6:91:
cf:3e:5c:f1:3d:e7:e4:eb:9e:0a:c6:99:94:b2:5b:
9b:33:c5:27:5c:b0:ac:86:09:73:48:98:84:bb:37:
ef:ea:56:7a:b7:23:d7:e2:c6:d2:e3:46:cd:fa:75:
94:8a:45:27:1f:ff:6f:c5:05:5c:73:85:2b:02:4f:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:97:1B:C0:25:D6:9E:61:24:21:3E:68:49:14:75:B6:24:77:14:DA
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kZcbwCXWnmEkIT5oSRR1tiR3FNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.96.0/24
46.23.98.0/23
46.23.108.0/24
46.23.111.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:08:e5:41:91:8e:54:0e:ca:6a:33:65:25:11:10:09:8f:5e:
9c:42:ef:99:9d:83:be:5b:b3:9b:8d:fa:26:c1:20:02:7e:87:
6e:2f:aa:8b:9a:32:d7:80:b4:07:f3:6c:0c:6e:76:0b:57:7b:
d7:82:b7:f0:0e:6b:c5:75:1e:9b:dc:4c:25:53:f2:22:2f:37:
6b:6e:9a:1f:c4:ff:92:51:ae:12:1c:b5:ec:ca:38:85:ed:a3:
5e:67:0d:46:38:27:0a:a7:5e:88:8d:fd:9d:75:93:ce:e8:83:
86:ed:3c:1c:9f:ee:7d:c2:3b:bc:33:a9:e9:83:91:cc:13:8f:
46:91:81:fb:ed:d4:2b:b4:c8:8e:ab:ed:f0:26:c5:63:03:52:
72:73:77:ab:00:70:f2:fe:ba:b8:4d:dd:3d:c3:21:19:af:d6:
fe:00:40:c0:f4:81:80:83:9f:04:82:3d:6f:40:03:82:f7:c9:
0e:3a:a7:e1:5b:7b:2c:2c:7f:85:8d:26:fd:4e:f7:c7:c3:9d:
70:e3:1d:c2:dd:8c:3f:72:ff:0a:59:55:5e:3c:d7:f4:1c:c1:
29:50:ba:9b:85:da:0c:41:90:a7:f0:ec:75:fd:a7:69:a9:7e:
7b:16:11:64:de:c7:fb:9d:5c:e7:b8:8e:b3:55:e4:55:5e:56:
fd:23:06:e1
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEAzDu9DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDA2YTQyYmIyNDQ2ZTUxZjE5MmVhMzc1YmRmN2VlYzVhNTFjNzdmMB4XDTIyMDQw
NTE5MjMxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTE5NzFiYzAyNWQ2
OWU2MTI0MjEzZTY4NDkxNDc1YjYyNDc3MTRkYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKTFpQEF96WjjTpsRxd7f5Iu2adslBxpO3s8CTmB40u90+ZJ
AvY1FuK2JHa7rLgaHqAggQHOHt5jeI/pSSV/4OKjZXSOpoxwO5Qxo3WYoW5dU5+h
ZyfNz4+PVrzfC5iQaVSKnkuoMwjbk8RN/6n8HNqZJtswsZvJCEkO7UgJoN/yHcL2
LVIA8zDDYwwekOF/YPNtFqyJnWypwgMDr1F0xpX0SkR2w6TDGv2pODf0D3wzHGo5
MMtWExD9/Lhz6JBNIPaRzz5c8T3n5OueCsaZlLJbmzPFJ1ywrIYJc0iYhLs37+pW
ercj1+LG0uNGzfp1lIpFJx//b8UFXHOFKwJPzfkCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBSRlxvAJdaeYSQhPmhJFHW2JHcU2jAfBgNVHSMEGDAWgBR9BqQrskRuUfGS
6jdb337sWlHHfzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZRYWtLN0pFYmxIeGt1bzNXOTktN0ZwUngzOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWMvNzgwMDJhLTRmYzAtNGRiZi04NTg1LTJjZjgwNmIyZDBmMi8x
L2taY2J3Q1hXbm1Fa0lUNW9TUlIxdGlSM0ZOby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMv
NzgwMDJhLTRmYzAtNGRiZi04NTg1LTJjZjgwNmIyZDBmMi8xL2ZRYWtLN0pFYmxI
eGt1bzNXOTktN0ZwUngzOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAC4XYAMEAS4XYgMEAC4XbAMEAC4X
bzANBgkqhkiG9w0BAQsFAAOCAQEAHAjlQZGOVA7KajNlJREQCY9enELvmZ2Dvluz
m436JsEgAn6Hbi+qi5oy14C0B/NsDG52C1d714K38A5rxXUem9xMJVPyIi83a26a
H8T/klGuEhy17Mo4he2jXmcNRjgnCqdeiI39nXWTzuiDhu08HJ/ufcI7vDOp6YOR
zBOPRpGB++3UK7TIjqvt8CbFYwNScnN3qwBw8v66uE3dPcMhGa/W/gBAwPSBgIOf
BII9b0ADgvfJDjqn4Vt7LCx/hY0m/U73x8OdcOMdwt2MP3L/CllVXjzX9BzBKVC6
m4XaDEGQp/Dsdf2naal+exYRZN7H+51c57iOs1XkVV5W/SMG4Q==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:09 2025 by rpki-client