Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/dvx4ZeTh-utJ0Rr_qrIj1HkjL2k.roa
File: dvx4ZeTh-utJ0Rr_qrIj1HkjL2k.roa (raw, json)
Hash identifier: YKVasIDfnWvKOIP3lL3N9zb0+aNYhSUgm4gD6HqMuu8=
Subject key identifier: 76:FC:78:65:E4:E1:FA:EB:49:D1:1A:FF:AA:B2:23:D4:79:23:2F:69
Certificate issuer: /CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
Certificate serial: 1B0879CF
Authority key identifier: E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/dvx4ZeTh-utJ0Rr_qrIj1HkjL2k.roa
Signing time: Sat 01 Jan 2022 14:08:25 +0000
ROA not before: Sat 01 Jan 2022 14:08:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48885
IP address blocks: 37.252.128.0/24 maxlen: 24
37.252.128.0/19 maxlen: 19
217.146.51.0/24 maxlen: 24
217.146.50.0/24 maxlen: 24
217.146.49.0/24 maxlen: 24
217.146.48.0/24 maxlen: 24
217.146.48.0/20 maxlen: 24
217.146.52.0/24 maxlen: 24
217.146.63.0/24 maxlen: 24
2a00:dbc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453540303 (0x1b0879cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
Validity
Not Before: Jan 1 14:08:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76fc7865e4e1faeb49d11affaab223d479232f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:16:64:71:53:ec:ac:9c:03:ac:88:5d:dc:34:
9f:58:39:f6:26:6a:dd:36:86:e6:e4:0e:9c:1b:5c:
b8:c1:43:74:52:b6:6b:e4:14:93:90:0d:a6:ec:c9:
f8:63:f4:4c:0d:43:01:20:e1:b6:8a:f6:41:65:3a:
de:0d:5c:56:09:42:41:89:00:d0:0c:fa:63:1d:8e:
97:0f:f2:72:f2:43:40:2f:a3:8e:b8:c3:51:b6:18:
6d:1c:8f:d6:9d:fe:f1:8d:95:31:ab:67:27:42:95:
13:2f:0c:b0:1e:d6:cd:43:9c:03:cb:d6:9c:90:a8:
5d:be:75:2c:22:24:68:ea:93:43:7c:57:be:21:4c:
67:eb:0b:da:b2:cb:f8:f8:96:71:cc:d5:8e:c8:a6:
1b:b6:1e:c2:d9:22:d6:35:a1:97:cb:01:81:0c:63:
67:8d:1f:1e:18:d2:20:74:b5:13:43:57:2d:fd:69:
92:a4:f0:0e:b3:e4:b9:ff:09:37:f5:f1:b9:a2:ff:
55:13:d7:9f:59:52:ce:dd:8a:bd:d7:a2:76:35:73:
c9:04:6a:04:de:75:b8:13:0c:72:cb:e3:0b:6c:3f:
2a:4e:9c:4d:e0:eb:80:f9:b9:5f:70:ff:d7:33:3d:
0d:75:8b:18:b8:4c:e4:65:18:36:71:5d:e0:3e:62:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FC:78:65:E4:E1:FA:EB:49:D1:1A:FF:AA:B2:23:D4:79:23:2F:69
X509v3 Authority Key Identifier:
keyid:E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/dvx4ZeTh-utJ0Rr_qrIj1HkjL2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.128.0/19
217.146.48.0/20
IPv6:
2a00:dbc0::/32
Signature Algorithm: sha256WithRSAEncryption
69:ec:c7:8a:48:31:a7:0d:73:0e:e2:28:98:c8:15:8e:45:3d:
bc:3f:26:8b:ab:6e:b9:3e:35:79:6a:1d:eb:83:ee:ef:9b:3b:
69:b9:be:8b:57:e4:6c:d9:ca:82:43:44:06:1d:ea:2a:c5:8a:
3a:2f:0c:12:76:27:ea:ff:00:96:65:5f:20:d4:a8:d4:20:18:
15:de:37:0e:13:19:63:04:67:dc:16:9e:bc:b0:8b:41:b4:5c:
4c:55:d4:f8:46:ff:dc:f1:28:14:a2:c6:30:ee:4e:a9:33:9f:
47:b4:f7:20:ae:e8:c2:d1:9c:db:43:31:a1:32:9a:1b:03:74:
e4:cd:c3:68:ae:1d:11:e8:b6:e4:84:12:9b:58:cf:30:f9:46:
a9:fc:16:4d:59:85:cc:cb:0d:aa:24:9c:0c:51:1a:c3:59:53:
a0:97:53:a7:0b:1f:47:1c:34:74:6e:3a:08:e6:2e:12:22:7d:
80:1c:d7:c2:8d:78:3b:91:e7:c1:09:5b:96:90:20:d3:63:49:
51:8c:26:e2:be:e8:24:80:a5:fb:9e:87:db:20:ca:70:77:1e:
a7:b1:e3:8c:e3:4a:53:c8:e7:47:9c:68:2a:27:cc:0b:9c:43:
8d:5d:56:5d:dd:23:f9:c7:38:b6:5c:c5:06:e1:90:fe:77:e0:
b8:21:75:b9
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEGwh5zzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MGEwMTA2Y2QyODU3ZWYxMzIzNDg2N2NiN2YxNmEyM2E5M2ZhYTkzMB4XDTIyMDEw
MTE0MDgyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzZmYzc4NjVlNGUx
ZmFlYjQ5ZDExYWZmYWFiMjIzZDQ3OTIzMmY2OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJUWZHFT7KycA6yIXdw0n1g59iZq3TaG5uQOnBtcuMFDdFK2
a+QUk5ANpuzJ+GP0TA1DASDhtor2QWU63g1cVglCQYkA0Az6Yx2Olw/ycvJDQC+j
jrjDUbYYbRyP1p3+8Y2VMatnJ0KVEy8MsB7WzUOcA8vWnJCoXb51LCIkaOqTQ3xX
viFMZ+sL2rLL+PiWcczVjsimG7Yewtki1jWhl8sBgQxjZ40fHhjSIHS1E0NXLf1p
kqTwDrPkuf8JN/XxuaL/VRPXn1lSzt2KvdeidjVzyQRqBN51uBMMcsvjC2w/Kk6c
TeDrgPm5X3D/1zM9DXWLGLhM5GUYNnFd4D5iibcCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBR2/Hhl5OH660nRGv+qsiPUeSMvaTAfBgNVHSMEGDAWgBTgoBBs0oV+8TI0
hny38WojqT+qkzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRLQVFiTktGZnZFeU5JWjh0X0ZxSTZrX3FwTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzYvNDZmMTQ3LTE3M2YtNDI2MC1hYTdiLTNhNmJmODkwYTAxZC8x
L2R2eDRaZVRoLXV0SjBScl9xcklqMUhrakwyay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYv
NDZmMTQ3LTE3M2YtNDI2MC1hYTdiLTNhNmJmODkwYTAxZC8xLzRLQVFiTktGZnZF
eU5JWjh0X0ZxSTZrX3FwTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBSX8gAMEBNmSMDANBAIAAjAHAwUA
KgDbwDANBgkqhkiG9w0BAQsFAAOCAQEAaezHikgxpw1zDuIomMgVjkU9vD8mi6tu
uT41eWod64Pu75s7abm+i1fkbNnKgkNEBh3qKsWKOi8MEnYn6v8AlmVfINSo1CAY
Fd43DhMZYwRn3BaevLCLQbRcTFXU+Eb/3PEoFKLGMO5OqTOfR7T3IK7owtGc20Mx
oTKaGwN05M3DaK4dEei25IQSm1jPMPlGqfwWTVmFzMsNqiScDFEaw1lToJdTpwsf
Rxw0dG46COYuEiJ9gBzXwo14O5HnwQlblpAg02NJUYwm4r7oJICl+56H2yDKcHce
p7HjjONKU8jnR5xoKifMC5xDjV1WXd0j+cc4tlzFBuGQ/nfguCF1uQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:19 2023 by rpki-client on console.sobornost.net