Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/w_Ia4m9Y8Z1udvZkw_Jl7HM9Wjg.roa
File: w_Ia4m9Y8Z1udvZkw_Jl7HM9Wjg.roa (raw, json)
Hash identifier: ZfocRzvy3t0S27D8ck/hUTCc3pa2jTnOC6SBF4dot0U=
Subject key identifier: C3:F2:1A:E2:6F:58:F1:9D:6E:76:F6:64:C3:F2:65:EC:73:3D:5A:38
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0184C820C20523D1A10DDFF5E63484EEB81A
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/w_Ia4m9Y8Z1udvZkw_Jl7HM9Wjg.roa
Signing time: Wed 30 Nov 2022 10:41:40 +0000
ROA not before: Wed 30 Nov 2022 10:41:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 46.23.108.0/24 maxlen: 24
185.81.216.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
88.151.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:20:c2:05:23:d1:a1:0d:df:f5:e6:34:84:ee:b8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Nov 30 10:41:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3f21ae26f58f19d6e76f664c3f265ec733d5a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7f:bb:97:af:5b:1a:40:71:a3:4b:c3:e4:c4:
58:25:0d:86:63:f2:bc:ca:78:8a:d7:2f:73:79:00:
db:d3:65:f6:bc:d6:b9:ea:ac:79:4c:23:68:6d:1a:
20:ea:2b:7c:29:f6:dd:f6:dd:c6:82:46:0e:85:6c:
9c:0a:a2:9b:19:75:bb:64:45:d4:ce:6f:5c:89:b0:
75:a4:84:43:35:53:a7:4b:69:48:ec:5e:5b:09:98:
c7:78:07:fe:9c:01:af:a1:da:45:c4:80:d2:d9:45:
51:0a:81:50:cd:cf:9e:dd:00:f8:d2:15:02:7c:ac:
db:f8:c7:93:1e:6a:38:6f:2b:59:c7:f5:a3:fa:3e:
ef:86:f1:b2:3f:ab:28:1b:56:8c:57:c5:90:51:8b:
67:d1:eb:42:5b:d8:b1:87:ae:df:d9:3d:9c:80:6e:
d4:e3:7d:3a:7d:ce:6b:0c:18:10:54:f5:7b:6a:83:
a0:05:ed:fe:2e:93:3b:14:5f:d7:a1:66:5c:9a:96:
c4:bf:05:6d:03:bf:21:b1:89:c6:0c:00:cc:66:81:
ba:3d:52:60:a4:d4:c0:c6:c5:4f:80:5b:9b:9c:05:
2d:3b:1b:d0:5a:11:a9:67:38:3a:9b:f4:c0:ee:9c:
a4:db:0e:a7:22:5d:2b:62:b5:78:3d:e4:7d:73:00:
57:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F2:1A:E2:6F:58:F1:9D:6E:76:F6:64:C3:F2:65:EC:73:3D:5A:38
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/w_Ia4m9Y8Z1udvZkw_Jl7HM9Wjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.108.0/24
88.151.192.0/24
185.81.216.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:b9:9e:a7:90:30:43:bd:29:dd:ac:71:4a:8a:01:77:1b:1d:
67:c7:0c:24:69:09:b6:1f:b8:7f:dc:2e:56:0b:31:9a:eb:11:
6d:5a:f5:8f:fb:8c:77:af:3e:d9:5f:49:57:36:e0:47:ec:eb:
c3:94:53:2a:6d:bd:d4:52:c3:10:5d:e6:25:89:8f:30:06:ce:
a9:df:7d:d0:a2:22:4c:7b:cf:1d:9a:ff:e2:09:30:31:7e:b2:
5e:f1:4a:40:cd:ff:f7:2a:85:d8:61:ec:f5:25:e0:8a:ec:25:
aa:6e:55:f4:99:9e:c0:c5:f7:a2:99:bd:e3:23:b9:65:d5:78:
05:9c:0d:f7:54:39:ec:79:82:58:fe:dd:1c:7c:8a:45:49:8c:
9e:b0:24:b7:74:94:4c:78:e7:8b:e6:0b:1d:4f:26:9f:2c:0c:
ad:35:93:d2:66:67:50:f3:35:04:4d:d3:e2:24:11:aa:e0:04:
d9:af:ff:e7:d5:fa:3d:4d:ce:48:ac:49:77:df:83:77:7e:41:
bb:e8:fa:f6:84:7f:29:bc:b1:a2:3c:ab:c0:a9:40:b0:61:1a:
5e:f6:47:49:85:09:61:6c:7f:da:f9:54:de:60:7a:90:be:0b:
02:fd:b6:c2:52:6b:95:ec:7d:07:19:b4:04:0a:f4:a9:8a:5b:
c5:f1:3b:99
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYTIIMIFI9GhDd/15jSE7rgaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjIxMTMwMTA0MTQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2YyMWFlMjZmNThmMTlkNmU3NmY2NjRjM2YyNjVlYzczM2Q1YTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH+7l69bGkBxo0vD5MRYJQ2GY/K8
yniK1y9zeQDb02X2vNa56qx5TCNobRog6it8Kfbd9t3GgkYOhWycCqKbGXW7ZEXU
zm9cibB1pIRDNVOnS2lI7F5bCZjHeAf+nAGvodpFxIDS2UVRCoFQzc+e3QD40hUC
fKzb+MeTHmo4bytZx/Wj+j7vhvGyP6soG1aMV8WQUYtn0etCW9ixh67f2T2cgG7U
4306fc5rDBgQVPV7aoOgBe3+LpM7FF/XoWZcmpbEvwVtA78hsYnGDADMZoG6PVJg
pNTAxsVPgFubnAUtOxvQWhGpZzg6m/TA7pyk2w6nIl0rYrV4PeR9cwBXpQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMPyGuJvWPGdbnb2ZMPyZexzPVo4MB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvd19JYTRtOVk4WjF1ZHZaa3dfSmw3SE05V2pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALhdsAwQA
WJfAAwQBuVHYMA0GCSqGSIb3DQEBCwUAA4IBAQAOuZ6nkDBDvSndrHFKigF3Gx1n
xwwkaQm2H7h/3C5WCzGa6xFtWvWP+4x3rz7ZX0lXNuBH7OvDlFMqbb3UUsMQXeYl
iY8wBs6p333QoiJMe88dmv/iCTAxfrJe8UpAzf/3KoXYYez1JeCK7CWqblX0mZ7A
xfeimb3jI7ll1XgFnA33VDnseYJY/t0cfIpFSYyesCS3dJRMeOeL5gsdTyafLAyt
NZPSZmdQ8zUETdPiJBGq4ATZr//n1fo9Tc5IrEl334N3fkG76Pr2hH8pvLGiPKvA
qUCwYRpe9kdJhQlhbH/a+VTeYHqQvgsC/bbCUmuV7H0HGbQECvSpilvF8TuZ
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:36 2025 by rpki-client