Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/3f1U79Y-RrO9w_34maR-IxkpLRE.roa
File: 3f1U79Y-RrO9w_34maR-IxkpLRE.roa (raw, json)
Hash identifier: 5PfB23Y9mFJbV27LORb8WNxM7FRvyp3yCHLB7IKpch8=
Subject key identifier: DD:FD:54:EF:D6:3E:46:B3:BD:C3:FD:F8:99:A4:7E:23:19:29:2D:11
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 37DEBCDB
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/3f1U79Y-RrO9w_34maR-IxkpLRE.roa
Signing time: Sat 01 Jan 2022 10:00:41 +0000
ROA not before: Sat 01 Jan 2022 10:00:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51541
IP address blocks: 46.34.163.0/24 maxlen: 24
46.34.160.0/24 maxlen: 24
46.34.162.0/24 maxlen: 24
46.34.161.0/24 maxlen: 24
2a01:5501::/32 maxlen: 32
2a01:5503::/32 maxlen: 32
2a01:5504::/32 maxlen: 32
2a01:5507::/32 maxlen: 32
2a01:5500::/32 maxlen: 32
2a01:5506::/32 maxlen: 32
2a01:5505::/32 maxlen: 32
2a01:5502::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937344219 (0x37debcdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Jan 1 10:00:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddfd54efd63e46b3bdc3fdf899a47e2319292d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:95:58:22:33:6b:79:f5:82:ec:d0:2e:ea:a4:
c6:ab:f8:cf:1e:6b:46:82:4b:d7:b4:49:2d:3b:ed:
fe:c9:f2:44:16:44:14:32:fa:f2:18:33:13:de:88:
a1:79:15:13:8c:b4:ee:59:4a:01:06:86:2f:5e:20:
59:d5:07:10:7e:21:ed:5c:12:e3:55:d1:7d:90:49:
4d:c5:b6:42:6b:2c:de:96:78:ad:d5:e2:cc:26:80:
c7:90:a9:8d:c4:dd:29:72:ef:14:e1:6f:79:11:86:
9a:fc:c3:8d:a0:b2:7c:07:3b:ee:e6:cb:64:c8:17:
14:ea:33:e7:c4:e0:2e:d0:73:91:dd:ba:fc:56:00:
a9:5d:83:d5:28:2b:e8:f8:3e:a0:b3:d0:26:f6:f5:
15:ca:e3:a7:d7:b2:d7:13:ad:f3:32:d1:7b:6f:f0:
a8:1e:67:93:a6:ce:57:b5:c0:bf:01:27:72:e7:bb:
7c:66:94:c8:df:a8:a9:ab:11:06:c6:4b:b0:4d:e7:
a5:4f:e9:7b:9f:63:37:2b:3a:0d:32:88:02:cc:59:
72:01:5a:ed:37:24:12:c3:e7:65:7b:e4:de:6c:de:
c9:66:0e:00:5e:f0:a3:4e:1e:ea:2d:49:b2:b4:e8:
d1:92:be:e4:f0:3c:7b:31:fc:b2:5d:4b:8a:8c:56:
47:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FD:54:EF:D6:3E:46:B3:BD:C3:FD:F8:99:A4:7E:23:19:29:2D:11
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/3f1U79Y-RrO9w_34maR-IxkpLRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.160.0/22
IPv6:
2a01:5500::/29
Signature Algorithm: sha256WithRSAEncryption
b3:c3:c4:86:2f:c2:ef:e2:55:b0:69:82:79:d5:a7:6a:e5:a4:
55:9b:aa:cc:6e:ae:ec:68:47:4d:10:a4:74:f0:72:f3:52:ab:
97:a7:26:74:75:59:44:90:89:86:ba:47:e0:f4:44:52:f9:bc:
16:67:be:dd:98:f5:65:55:78:24:f5:d9:ab:e7:57:f5:83:84:
db:d8:8c:41:42:4f:ad:02:34:93:83:ab:4f:58:79:7e:7e:ec:
59:2e:7a:0e:1e:fd:7c:d4:31:a4:fa:12:96:b8:b2:48:56:04:
e8:d2:1b:77:d7:60:32:56:d3:eb:1a:a7:d0:e1:9a:93:0d:7e:
80:45:68:d6:1c:b5:51:05:f6:1f:3a:6c:10:57:93:ea:d3:c7:
f0:bd:23:eb:01:05:cb:94:99:53:ff:53:67:54:5c:75:00:78:
50:f9:c6:4e:35:bc:b3:62:a2:4c:9e:49:6a:4c:aa:92:aa:a8:
e1:c8:6c:45:66:4d:52:f5:ee:af:99:52:9f:a8:2b:17:f4:a5:
99:87:66:68:96:02:4d:17:86:fe:e8:cc:9b:72:a8:cf:5c:fa:
cb:76:47:80:35:60:dd:27:cf:0a:3d:97:29:4e:e8:a3:a5:e0:
4b:5e:99:a5:d8:bf:92:0a:07:f9:ec:d3:41:13:a8:83:ba:66:
9f:56:84:e8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEN9682zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NmUxYzhjNjVjODZlOGQyNmRkYmViNjg2NThhMzlhN2E4ZTI3ODY2MB4XDTIyMDEw
MTEwMDA0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGRmZDU0ZWZkNjNl
NDZiM2JkYzNmZGY4OTlhNDdlMjMxOTI5MmQxMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOiVWCIza3n1guzQLuqkxqv4zx5rRoJL17RJLTvt/snyRBZE
FDL68hgzE96IoXkVE4y07llKAQaGL14gWdUHEH4h7VwS41XRfZBJTcW2Qmss3pZ4
rdXizCaAx5CpjcTdKXLvFOFveRGGmvzDjaCyfAc77ubLZMgXFOoz58TgLtBzkd26
/FYAqV2D1Sgr6Pg+oLPQJvb1Fcrjp9ey1xOt8zLRe2/wqB5nk6bOV7XAvwEncue7
fGaUyN+oqasRBsZLsE3npU/pe59jNys6DTKIAsxZcgFa7TckEsPnZXvk3mzeyWYO
AF7wo04e6i1JsrTo0ZK+5PA8ezH8sl1LioxWRwkCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTd/VTv1j5Gs73D/fiZpH4jGSktETAfBgNVHSMEGDAWgBTG4cjGXIbo0m3b
62hlijmnqOJ4ZjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3h1SEl4bHlHNk5KdDItdG9aWW81cDZqaWVHWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWUvYTQ1M2ZlLWE2NjQtNDdhMi04YjhhLWNlNWUwMWU3MWM5MS8x
LzNmMVU3OVktUnJPOXdfMzRtYVItSXhrcExSRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUv
YTQ1M2ZlLWE2NjQtNDdhMi04YjhhLWNlNWUwMWU3MWM5MS8xL3h1SEl4bHlHNk5K
dDItdG9aWW81cDZqaWVHWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi4ioDANBAIAAjAHAwUDKgFVADAN
BgkqhkiG9w0BAQsFAAOCAQEAs8PEhi/C7+JVsGmCedWnauWkVZuqzG6u7GhHTRCk
dPBy81Krl6cmdHVZRJCJhrpH4PREUvm8Fme+3Zj1ZVV4JPXZq+dX9YOE29iMQUJP
rQI0k4OrT1h5fn7sWS56Dh79fNQxpPoSlriySFYE6NIbd9dgMlbT6xqn0OGakw1+
gEVo1hy1UQX2HzpsEFeT6tPH8L0j6wEFy5SZU/9TZ1RcdQB4UPnGTjW8s2KiTJ5J
akyqkqqo4chsRWZNUvXur5lSn6grF/SlmYdmaJYCTReG/ujMm3Koz1z6y3ZHgDVg
3SfPCj2XKU7oo6XgS16Zpdi/kgoH+ezTQROog7pmn1aE6A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:53 2024 by rpki-client on console-fra.rpki-client.org