Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/zKS_u7OzMxl5p6k-C-Y2NU6cosg.roa
File: zKS_u7OzMxl5p6k-C-Y2NU6cosg.roa (raw, json)
Hash identifier: ll5KB9Lzb8W7xm1bvflC54hf9eRtMuFex5SlkW3jV8Y=
Subject key identifier: CC:A4:BF:BB:B3:B3:33:19:79:A7:A9:3E:0B:E6:36:35:4E:9C:A2:C8
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 08C94144
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/zKS_u7OzMxl5p6k-C-Y2NU6cosg.roa
Signing time: Sat 01 Jan 2022 12:56:09 +0000
ROA not before: Sat 01 Jan 2022 12:56:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212804
IP address blocks: 46.252.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147407172 (0x8c94144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Jan 1 12:56:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cca4bfbbb3b3331979a7a93e0be636354e9ca2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:ab:91:82:16:d4:f2:76:82:34:ee:02:a0:
3e:5e:66:96:d9:f3:86:e1:50:f3:99:a9:73:50:4b:
8f:f2:69:41:85:78:27:8d:64:dd:f8:ad:e9:dc:e8:
cb:38:47:f6:8c:59:95:20:df:95:a8:05:e2:63:b9:
b4:6f:9a:bd:2d:ac:ef:cf:9e:a1:3e:3b:27:b2:30:
db:42:8d:a9:29:e5:3a:cd:35:4e:2d:28:2b:df:37:
ae:a3:c7:24:75:6e:4f:bf:cc:7e:4f:e4:ab:cd:77:
89:20:c0:bb:7a:be:38:da:67:c9:88:c0:44:97:84:
93:cd:24:41:87:eb:79:9d:69:4a:88:6c:6a:22:a9:
9b:6d:cb:17:fd:88:30:0e:51:22:1c:b6:e1:c6:86:
a8:b3:7d:d2:73:46:30:12:78:3c:82:f2:e3:08:ff:
f7:5e:04:61:88:ec:82:67:9a:17:99:11:5e:f7:2a:
87:af:5b:9b:65:a1:28:90:62:a0:ab:bc:b2:06:9b:
0f:5b:31:49:2c:a1:dd:75:2d:8d:91:b8:8c:ea:7e:
3c:89:4a:f8:79:68:db:aa:73:d7:d6:35:e6:35:15:
b5:39:1e:74:10:85:dc:70:91:3d:c9:da:18:be:60:
19:28:ed:fd:c4:c5:85:0e:7c:6a:1c:38:c7:dd:e7:
47:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A4:BF:BB:B3:B3:33:19:79:A7:A9:3E:0B:E6:36:35:4E:9C:A2:C8
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/zKS_u7OzMxl5p6k-C-Y2NU6cosg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.0.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f7:1f:bc:55:f9:b2:0b:cd:d1:45:75:a9:ed:60:00:a2:75:
ad:de:36:e4:bb:44:31:34:d4:fd:d0:7d:95:a5:73:7d:93:86:
f2:69:a1:56:a7:40:4c:74:c0:1a:08:67:6d:88:1c:d1:65:1e:
a1:7d:d5:69:33:46:e6:bb:a6:76:a7:43:bf:7b:d7:c4:fb:99:
ac:ec:42:ca:b8:4a:07:70:74:9c:c4:94:55:52:87:87:56:24:
aa:84:16:8e:b3:e1:7c:08:f7:37:7f:5f:53:24:7e:50:36:a9:
97:4b:0a:6c:c2:71:c9:25:83:43:48:34:db:d4:f5:8a:e9:c8:
a9:9e:4f:90:b8:64:e6:49:0a:5d:e1:5d:80:48:a4:d5:07:58:
ca:4a:74:77:f9:b3:63:2a:9c:ef:48:18:9d:9b:ca:6c:b7:e4:
4e:99:1b:3a:cb:df:f2:c3:3b:c6:53:57:7d:49:3d:89:45:1d:
63:b7:3c:0c:41:7f:f2:02:8c:30:5d:c5:3a:1b:d1:76:0d:d6:
f5:97:2a:e5:df:16:b2:fa:b0:62:93:c4:0e:e3:53:f7:cc:ac:
7e:a1:af:6a:2c:54:7f:04:93:23:fa:84:4e:8e:ee:a8:48:5b:
5c:72:12:c1:66:5f:b0:32:99:cd:56:df:23:77:a7:3d:24:77:
24:bf:a7:cd
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECMlBRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ODI4NGYxOGNkNDQ2MDRiZGQ2ZDA4ZjRkODc4ZGM2MTQ1NmM0MGZkMB4XDTIyMDEw
MTEyNTYwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2NhNGJmYmJiM2Iz
MzMxOTc5YTdhOTNlMGJlNjM2MzU0ZTljYTJjODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALuHq5GCFtTydoI07gKgPl5mltnzhuFQ85mpc1BLj/JpQYV4
J41k3fit6dzoyzhH9oxZlSDflagF4mO5tG+avS2s78+eoT47J7Iw20KNqSnlOs01
Ti0oK983rqPHJHVuT7/Mfk/kq813iSDAu3q+ONpnyYjARJeEk80kQYfreZ1pSohs
aiKpm23LF/2IMA5RIhy24caGqLN90nNGMBJ4PILy4wj/914EYYjsgmeaF5kRXvcq
h69bm2WhKJBioKu8sgabD1sxSSyh3XUtjZG4jOp+PIlK+Hlo26pz19Y15jUVtTke
dBCF3HCRPcnaGL5gGSjt/cTFhQ58ahw4x93nR1kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTMpL+7s7MzGXmnqT4L5jY1TpyiyDAfBgNVHSMEGDAWgBTYKE8YzURgS91t
CPTYeNxhRWxA/TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJDaFBHTTFFWUV2ZGJRajAySGpjWVVWc1FQMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWIvMjY1MmNkLTdlY2YtNDllOC1hNGY4LWM3ODY5MTI4NTgyYy8x
L3pLU191N096TXhsNXA2ay1DLVkyTlU2Y29zZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIv
MjY1MmNkLTdlY2YtNDllOC1hNGY4LWM3ODY5MTI4NTgyYy8xLzJDaFBHTTFFWUV2
ZGJRajAySGpjWVVWc1FQMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC78ADANBgkqhkiG9w0BAQsFAAOC
AQEAOfcfvFX5sgvN0UV1qe1gAKJ1rd425LtEMTTU/dB9laVzfZOG8mmhVqdATHTA
GghnbYgc0WUeoX3VaTNG5rumdqdDv3vXxPuZrOxCyrhKB3B0nMSUVVKHh1YkqoQW
jrPhfAj3N39fUyR+UDapl0sKbMJxySWDQ0g029T1iunIqZ5PkLhk5kkKXeFdgEik
1QdYykp0d/mzYyqc70gYnZvKbLfkTpkbOsvf8sM7xlNXfUk9iUUdY7c8DEF/8gKM
MF3FOhvRdg3W9Zcq5d8WsvqwYpPEDuNT98ysfqGvaixUfwSTI/qETo7uqEhbXHIS
wWZfsDKZzVbfI3enPSR3JL+nzQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:19 2023 by rpki-client on console.sobornost.net