Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/GIwY-ARcJq_U9qORzWVfxa_ebv4.roa
File: GIwY-ARcJq_U9qORzWVfxa_ebv4.roa (raw, json)
Hash identifier: nomFEHiIELvlOpI1gR7xRysbg25mPwCYzXirRsodFQk=
Subject key identifier: 18:8C:18:F8:04:5C:26:AF:D4:F6:A3:91:CD:65:5F:C5:AF:DE:6E:FE
Certificate issuer: /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Certificate serial: 380E8944
Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/GIwY-ARcJq_U9qORzWVfxa_ebv4.roa
Signing time: Sat 01 Jan 2022 08:02:00 +0000
ROA not before: Sat 01 Jan 2022 08:02:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51405
IP address blocks: 46.29.176.0/21 maxlen: 24
2a02:2290::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940476740 (0x380e8944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Validity
Not Before: Jan 1 08:02:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=188c18f8045c26afd4f6a391cd655fc5afde6efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:ee:df:ec:76:af:ad:ca:88:1b:e0:95:d8:
1d:89:9f:e8:a0:e3:4b:07:c7:92:2e:f1:b8:f1:1a:
53:2e:ae:67:f2:41:d9:fc:a0:f5:f8:39:47:cb:23:
0f:c4:b7:e6:0d:a5:3a:52:30:63:92:b6:98:63:58:
47:f6:e8:d6:b2:16:a0:e8:1d:7f:42:61:86:69:bf:
52:5c:98:54:4f:50:40:a8:69:b1:ea:7e:f0:db:36:
78:6c:71:be:76:4e:9b:d9:5b:0a:40:fd:36:01:18:
0b:44:f3:0e:77:2d:5d:1d:c3:a7:dc:9f:e4:d2:dd:
6f:90:7c:61:bf:d1:a6:54:c4:09:11:f4:c6:f0:a1:
6c:7e:57:3c:8c:ba:2d:c6:a5:f0:19:fc:6a:f7:89:
75:92:1b:39:49:57:bb:21:f5:f6:e0:37:cd:8a:cc:
58:e3:26:77:bc:02:a6:79:49:e0:d6:ca:09:9b:cc:
fa:ce:18:2c:6a:b3:ca:b7:b8:90:a5:45:55:cd:cb:
0d:54:09:3e:a0:b8:de:c3:3b:8d:8e:05:d3:e7:a0:
70:91:3b:87:01:7d:dc:35:7d:7c:b8:28:50:ce:aa:
4c:9e:f2:f8:be:56:d3:de:8f:37:28:de:fd:0e:dd:
75:e8:e3:6b:80:1f:8e:30:81:15:21:0d:6d:a8:30:
af:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8C:18:F8:04:5C:26:AF:D4:F6:A3:91:CD:65:5F:C5:AF:DE:6E:FE
X509v3 Authority Key Identifier:
keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/GIwY-ARcJq_U9qORzWVfxa_ebv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.176.0/21
IPv6:
2a02:2290::/29
Signature Algorithm: sha256WithRSAEncryption
4a:67:46:9b:55:0e:54:94:dc:91:1f:26:98:27:83:c7:09:16:
93:b0:a4:d3:31:78:86:c1:ce:75:9f:ab:13:7e:4f:09:08:1d:
77:28:6c:71:2a:8c:83:8a:65:48:83:95:24:57:82:d2:84:85:
63:a8:11:4e:b2:d9:f5:49:26:f6:91:3b:39:53:64:ef:cf:9b:
27:e4:29:70:ac:0f:94:3b:53:2f:9c:00:78:19:2b:f5:06:d2:
cf:4b:c4:aa:15:dc:17:bf:72:6d:a9:f4:e7:07:83:06:80:66:
d9:64:4f:c0:17:f6:4a:d5:70:33:8f:d3:1d:c4:0d:99:18:ea:
38:6c:77:b3:d1:b7:bf:10:9b:7a:ae:52:05:2f:c5:79:d0:c7:
36:a3:5c:b9:58:96:55:3f:c4:b8:c8:a7:ed:00:f1:96:32:31:
92:e4:a3:04:e3:01:d8:bc:2b:88:ca:c8:8e:fb:7c:fc:00:18:
4a:c0:4f:dd:f5:1b:0b:30:b2:de:1a:af:1b:3d:81:f0:95:0c:
13:56:19:05:58:b8:fc:5a:af:fa:a8:cd:ac:f4:84:bd:da:5a:
ce:8f:07:b3:da:e5:3a:4a:78:1a:bb:a2:25:66:14:03:c2:0d:
2b:0b:ff:d2:87:4c:2a:be:45:aa:c4:f8:0d:d9:b4:38:09:04:
89:71:d5:c4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEOA6JRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ODk0ZTFiOGRhODBjYWMyYWQxYTJmM2YwOWJmOWRiNWExMjQ4NmE0MB4XDTIyMDEw
MTA4MDIwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTg4YzE4ZjgwNDVj
MjZhZmQ0ZjZhMzkxY2Q2NTVmYzVhZmRlNmVmZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALQn7t/sdq+tyogb4JXYHYmf6KDjSwfHki7xuPEaUy6uZ/JB
2fyg9fg5R8sjD8S35g2lOlIwY5K2mGNYR/bo1rIWoOgdf0Jhhmm/UlyYVE9QQKhp
sep+8Ns2eGxxvnZOm9lbCkD9NgEYC0TzDnctXR3Dp9yf5NLdb5B8Yb/RplTECRH0
xvChbH5XPIy6Lcal8Bn8aveJdZIbOUlXuyH19uA3zYrMWOMmd7wCpnlJ4NbKCZvM
+s4YLGqzyre4kKVFVc3LDVQJPqC43sM7jY4F0+egcJE7hwF93DV9fLgoUM6qTJ7y
+L5W096PNyje/Q7ddejja4AfjjCBFSENbagwrzcCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQYjBj4BFwmr9T2o5HNZV/Fr95u/jAfBgNVHSMEGDAWgBRolOG42oDKwq0a
Lz8Jv521oSSGpDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FKVGh1TnFBeXNLdEdpOF9DYi1kdGFFa2hxUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjYvMmNhYjFhLWRmNjYtNDE4Ny1iMTgyLTcwM2NhYjRkMDU5OC8x
L0dJd1ktQVJjSnFfVTlxT1J6V1ZmeGFfZWJ2NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYv
MmNhYjFhLWRmNjYtNDE4Ny1iMTgyLTcwM2NhYjRkMDU5OC8xL2FKVGh1TnFBeXNL
dEdpOF9DYi1kdGFFa2hxUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAy4dsDANBAIAAjAHAwUDKgIikDAN
BgkqhkiG9w0BAQsFAAOCAQEASmdGm1UOVJTckR8mmCeDxwkWk7Ck0zF4hsHOdZ+r
E35PCQgddyhscSqMg4plSIOVJFeC0oSFY6gRTrLZ9Ukm9pE7OVNk78+bJ+QpcKwP
lDtTL5wAeBkr9QbSz0vEqhXcF79yban05weDBoBm2WRPwBf2StVwM4/THcQNmRjq
OGx3s9G3vxCbeq5SBS/FedDHNqNcuViWVT/EuMin7QDxljIxkuSjBOMB2LwriMrI
jvt8/AAYSsBP3fUbCzCy3hqvGz2B8JUME1YZBVi4/Fqv+qjNrPSEvdpazo8Hs9rl
Okp4GruiJWYUA8INKwv/0odMKr5FqsT4Ddm0OAkEiXHVxA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:35 2025 by rpki-client