Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/p0yRC0YtFRH8lGZDciHU-9yU3jg.roa
File: p0yRC0YtFRH8lGZDciHU-9yU3jg.roa (raw, json)
Hash identifier: z2k3bJPJ6U71gnPxXXJjZndM32Yjd1gWXounHtvJtic=
Subject key identifier: A7:4C:91:0B:46:2D:15:11:FC:94:66:43:72:21:D4:FB:DC:94:DE:38
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018330A687DC181AA77568A4B9A8DE273D14
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/p0yRC0YtFRH8lGZDciHU-9yU3jg.roa
Signing time: Mon 12 Sep 2022 07:42:43 +0000
ROA not before: Mon 12 Sep 2022 07:42:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15723
IP address blocks: 46.23.103.0/24 maxlen: 24
46.23.101.0/24 maxlen: 24
46.23.102.0/24 maxlen: 24
46.23.100.0/24 maxlen: 24
109.205.215.0/24 maxlen: 24
37.128.203.0/24 maxlen: 24
37.128.202.0/24 maxlen: 24
37.128.200.0/24 maxlen: 24
37.128.201.0/24 maxlen: 24
185.81.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:30:a6:87:dc:18:1a:a7:75:68:a4:b9:a8:de:27:3d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Sep 12 07:42:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a74c910b462d1511fc9466437221d4fbdc94de38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:06:9d:55:b7:c8:72:d5:7b:24:35:71:4a:
23:8d:ee:be:85:0b:b0:46:58:b3:cc:ea:b1:50:f4:
14:25:58:79:e4:1b:d8:5f:18:20:6e:66:a7:af:5f:
7d:c1:0f:cc:d7:6f:3c:ad:14:62:a2:8a:84:e2:e0:
b7:4c:1d:82:9b:4b:19:04:b1:6b:7d:c1:32:46:04:
ab:3c:18:fb:f6:53:a9:8c:27:90:66:d7:2b:d1:e5:
b5:fe:5e:30:55:05:7c:11:2e:4e:1a:74:02:50:c0:
0e:da:94:e0:21:fb:4a:1f:e6:55:de:f5:06:ec:27:
36:ef:c1:11:28:b8:6b:06:84:e7:f3:9c:43:42:48:
98:97:f2:0b:5d:34:61:24:d1:d0:08:44:75:75:19:
03:63:11:45:e1:36:57:58:25:9d:0a:6c:8f:26:b3:
c9:a3:1c:9f:2f:66:4e:47:7c:cb:cb:c7:19:83:5a:
8c:2c:c4:3d:73:1a:c3:af:c9:fa:8a:cb:e9:b9:9c:
73:f3:27:43:7c:ce:0d:52:04:e5:2c:c0:bc:69:cd:
0f:02:25:c7:10:b3:ad:4c:f0:42:5e:5f:cc:ec:3c:
09:6f:d2:11:f0:65:5b:9e:54:2a:2c:9f:1e:43:e4:
61:98:c5:0c:7f:af:7d:5f:41:ee:30:f6:03:b8:98:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4C:91:0B:46:2D:15:11:FC:94:66:43:72:21:D4:FB:DC:94:DE:38
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/p0yRC0YtFRH8lGZDciHU-9yU3jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.200.0/22
46.23.100.0/22
109.205.215.0/24
185.81.216.0/22
Signature Algorithm: sha256WithRSAEncryption
ce:43:86:ad:c9:66:56:40:d1:c6:3c:c5:10:1a:37:72:cd:fe:
7c:77:b9:e9:9e:2b:a9:42:82:48:42:c0:e0:9b:84:81:d7:1e:
7d:dc:00:16:78:69:99:70:29:a5:b9:f7:05:82:de:7f:c0:c3:
92:da:00:ff:ea:59:06:84:fd:eb:e9:46:20:67:b1:aa:21:81:
6f:dc:34:59:83:6c:d8:ce:e7:77:0b:03:41:b1:a6:a7:99:da:
61:95:32:23:6c:f6:d0:2e:7c:51:1f:66:80:96:6d:8f:fc:67:
0d:8b:c1:84:2a:59:90:67:67:4d:a0:32:b8:d1:a4:7c:9c:bd:
ca:29:4c:85:cd:ff:5a:10:0c:e8:34:52:0d:ac:74:e5:52:5a:
12:08:dd:5e:6c:de:30:ff:71:a6:b0:d7:5c:c3:27:92:77:ed:
a8:4c:a2:ae:73:84:eb:1a:ab:33:f4:d4:68:70:cd:93:11:2e:
bc:3f:95:4b:89:5a:f2:79:9e:8e:42:d7:e5:73:1c:8f:d7:cd:
69:bf:4c:34:10:09:c8:c9:cc:8c:e9:87:40:6a:c7:39:fa:6e:
b7:86:8e:23:87:72:d5:08:f9:68:e5:52:b9:d6:5f:b2:62:0f:
88:ef:7b:90:ef:70:93:af:8c:b4:b7:bf:c9:44:fe:65:c0:96:
e9:a6:57:e4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYMwpofcGBqndWikuajeJz0UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjIwOTEyMDc0MjQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzRjOTEwYjQ2MmQxNTExZmM5NDY2NDM3MjIxZDRmYmRjOTRkZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgYGnVW3yHLVeyQ1cUojje6+hQuw
RlizzOqxUPQUJVh55BvYXxggbmanr199wQ/M1288rRRiooqE4uC3TB2Cm0sZBLFr
fcEyRgSrPBj79lOpjCeQZtcr0eW1/l4wVQV8ES5OGnQCUMAO2pTgIftKH+ZV3vUG
7Cc278ERKLhrBoTn85xDQkiYl/ILXTRhJNHQCER1dRkDYxFF4TZXWCWdCmyPJrPJ
oxyfL2ZOR3zLy8cZg1qMLMQ9cxrDr8n6isvpuZxz8ydDfM4NUgTlLMC8ac0PAiXH
ELOtTPBCXl/M7DwJb9IR8GVbnlQqLJ8eQ+RhmMUMf699X0HuMPYDuJjtTwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKdMkQtGLRUR/JRmQ3Ih1PvclN44MB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvcDB5UkMwWXRGUkg4bEdaRGNpSFUtOXlVM2pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCJYDIAwQC
LhdkAwQAbc3XAwQCuVHYMA0GCSqGSIb3DQEBCwUAA4IBAQDOQ4atyWZWQNHGPMUQ
Gjdyzf58d7npniupQoJIQsDgm4SB1x593AAWeGmZcCmlufcFgt5/wMOS2gD/6lkG
hP3r6UYgZ7GqIYFv3DRZg2zYzud3CwNBsaanmdphlTIjbPbQLnxRH2aAlm2P/GcN
i8GEKlmQZ2dNoDK40aR8nL3KKUyFzf9aEAzoNFINrHTlUloSCN1ebN4w/3GmsNdc
wyeSd+2oTKKuc4TrGqsz9NRocM2TES68P5VLiVryeZ6OQtflcxyP181pv0w0EAnI
ycyM6YdAasc5+m63ho4jh3LVCPlo5VK51l+yYg+I73uQ73CTr4y0t7/JRP5lwJbp
plfk
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:19 2025 by rpki-client