Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/GeQNEekgXoAfqUD8eCTl7kaqp-k.roa
File: GeQNEekgXoAfqUD8eCTl7kaqp-k.roa (raw, json)
Hash identifier: irg52WI4/XVJS9alCV7BzgbSHPejFa4Wkn+JOErLQj0=
Subject key identifier: 19:E4:0D:11:E9:20:5E:80:1F:A9:40:FC:78:24:E5:EE:46:AA:A7:E9
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 384DB348
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/GeQNEekgXoAfqUD8eCTl7kaqp-k.roa
Signing time: Sat 01 Jan 2022 13:57:03 +0000
ROA not before: Sat 01 Jan 2022 13:57:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57908
IP address blocks: 46.243.16.0/24 maxlen: 24
46.243.17.0/24 maxlen: 24
46.243.19.0/24 maxlen: 24
46.243.20.0/24 maxlen: 24
46.243.23.0/24 maxlen: 24
46.243.21.0/24 maxlen: 24
46.243.22.0/24 maxlen: 24
46.243.18.0/24 maxlen: 24
2a03:6dc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 944616264 (0x384db348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Jan 1 13:57:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19e40d11e9205e801fa940fc7824e5ee46aaa7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:e0:fc:66:59:0b:33:1e:05:32:fc:73:3f:
a8:29:08:f2:73:1f:45:a4:fc:33:67:5f:5b:d3:cf:
5f:5f:5e:8a:ba:46:b8:c1:66:f8:46:e1:5b:c7:e0:
1e:9f:00:46:98:af:70:45:8f:9d:15:59:07:a7:a9:
55:5f:0c:67:82:b0:a0:99:cd:26:32:5d:78:f0:72:
4e:18:7d:74:37:80:ad:2b:af:1b:01:32:f6:0e:8f:
eb:93:e1:02:92:83:ef:ff:2e:ed:d4:02:32:ad:0e:
4c:cd:30:0b:ae:55:7e:61:53:e4:28:db:37:4d:c6:
4d:b2:e3:ee:49:44:45:cd:56:ef:0b:32:40:3e:75:
0d:be:a3:e9:6d:a1:d8:f1:24:78:58:53:18:26:08:
07:b6:2f:23:07:b3:3b:b9:07:0e:f8:78:59:a5:f0:
90:d8:9a:37:94:d7:98:58:06:d9:3e:60:05:06:a7:
da:d2:4b:e2:38:7a:42:02:83:e0:bb:a7:8c:bb:ca:
25:8b:be:2e:02:f6:4b:78:f7:73:c4:d1:bc:73:9a:
f0:3f:62:c9:1a:d7:32:86:e6:0e:95:2f:b7:fa:0d:
a8:63:99:f8:6e:b7:84:15:dd:50:74:f8:9a:50:ee:
a8:01:8a:c1:c9:7f:0b:a8:6a:94:bb:dc:15:e9:4b:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E4:0D:11:E9:20:5E:80:1F:A9:40:FC:78:24:E5:EE:46:AA:A7:E9
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/GeQNEekgXoAfqUD8eCTl7kaqp-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.16.0/21
IPv6:
2a03:6dc0::/32
Signature Algorithm: sha256WithRSAEncryption
ad:6c:d7:26:cb:a5:3b:ce:3b:35:c3:38:b0:69:b6:71:ae:50:
f6:4a:6c:d8:7e:80:3e:79:59:27:be:a1:e7:35:14:40:e3:d5:
af:92:3a:e6:48:7e:90:64:da:f5:b1:15:22:56:c3:13:b4:15:
aa:da:ef:10:1b:38:95:27:38:98:dc:01:52:98:26:37:ba:11:
e9:55:65:39:b6:40:8b:30:25:9b:8c:07:49:73:74:2e:af:0a:
6e:72:53:fd:9c:dc:65:53:90:2a:c3:b6:1d:51:c5:63:49:2b:
46:0d:b8:35:b0:86:88:99:e7:23:32:3d:2b:da:d0:1e:b0:8c:
41:3e:ca:25:1d:2d:9d:7c:ea:92:99:e0:86:f5:39:3d:82:f3:
bd:e3:dd:1f:5b:cf:12:5c:47:46:ac:41:ba:36:1e:83:1e:7b:
9f:fa:ba:4d:b6:70:82:a5:92:c0:e5:43:f1:e8:e1:9e:ff:3d:
e4:c1:1e:aa:e4:cf:29:68:4c:c3:7e:65:b7:39:2a:1d:75:0b:
63:6d:91:e9:aa:86:31:f0:26:fb:56:e5:e5:08:bf:88:01:e8:
e2:ab:d1:a5:07:5b:88:d5:d3:38:83:90:2b:77:02:12:2f:4f:
19:b9:cb:b3:68:16:2a:e1:bc:19:73:e9:e2:72:08:9e:2d:d1:
1f:ec:65:e6
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEOE2zSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YjkyODA5N2RjOWY4OWE3YTNhOGEyOTZhNzhhNGY5ZDBjYmNlMTdmMB4XDTIyMDEw
MTEzNTcwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTllNDBkMTFlOTIw
NWU4MDFmYTk0MGZjNzgyNGU1ZWU0NmFhYTdlOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALYK4PxmWQszHgUy/HM/qCkI8nMfRaT8M2dfW9PPX19eirpG
uMFm+EbhW8fgHp8ARpivcEWPnRVZB6epVV8MZ4KwoJnNJjJdePByThh9dDeArSuv
GwEy9g6P65PhApKD7/8u7dQCMq0OTM0wC65VfmFT5CjbN03GTbLj7klERc1W7wsy
QD51Db6j6W2h2PEkeFhTGCYIB7YvIwezO7kHDvh4WaXwkNiaN5TXmFgG2T5gBQan
2tJL4jh6QgKD4LunjLvKJYu+LgL2S3j3c8TRvHOa8D9iyRrXMobmDpUvt/oNqGOZ
+G63hBXdUHT4mlDuqAGKwcl/C6hqlLvcFelLFskCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQZ5A0R6SBegB+pQPx4JOXuRqqn6TAfBgNVHSMEGDAWgBQrkoCX3J+Jp6Oo
opanik+dDLzhfzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0s1S0FsOXlmaWFlanFLS1dwNHBQblF5ODRYOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzYvYTczNGE0LTE0M2QtNDYxZC1iZmQ2LTQ1Y2FhNmVmNjcwMC8x
L0dlUU5FZWtnWG9BZnFVRDhlQ1RsN2thcXAtay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYv
YTczNGE0LTE0M2QtNDYxZC1iZmQ2LTQ1Y2FhNmVmNjcwMC8xL0s1S0FsOXlmaWFl
anFLS1dwNHBQblF5ODRYOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAy7zEDANBAIAAjAHAwUAKgNtwDAN
BgkqhkiG9w0BAQsFAAOCAQEArWzXJsulO847NcM4sGm2ca5Q9kps2H6APnlZJ76h
5zUUQOPVr5I65kh+kGTa9bEVIlbDE7QVqtrvEBs4lSc4mNwBUpgmN7oR6VVlObZA
izAlm4wHSXN0Lq8KbnJT/ZzcZVOQKsO2HVHFY0krRg24NbCGiJnnIzI9K9rQHrCM
QT7KJR0tnXzqkpnghvU5PYLzvePdH1vPElxHRqxBujYegx57n/q6TbZwgqWSwOVD
8ejhnv895MEequTPKWhMw35ltzkqHXULY22R6aqGMfAm+1bl5Qi/iAHo4qvRpQdb
iNXTOIOQK3cCEi9PGbnLs2gWKuG8GXPp4nIIni3RH+xl5g==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:20 2023 by rpki-client on console.sobornost.net