Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/xfg5wHGKALjN0Pp9pM45cRX2fEA.roa
File: xfg5wHGKALjN0Pp9pM45cRX2fEA.roa (raw, json)
Hash identifier: uGNPj94Rt4XCd2jjStKw0T+H69PlMhl2XioAQW5pfro=
Subject key identifier: C5:F8:39:C0:71:8A:00:B8:CD:D0:FA:7D:A4:CE:39:71:15:F6:7C:40
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018A2E3F5E9A7FB93F1377BB5FE5286B752D
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/xfg5wHGKALjN0Pp9pM45cRX2fEA.roa
Signing time: Fri 25 Aug 2023 19:50:19 +0000
ROA not before: Fri 25 Aug 2023 19:50:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.37.0/24 maxlen: 24
46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.39.0/24 maxlen: 24
46.34.42.0/24 maxlen: 24
46.34.43.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.49.0/24 maxlen: 24
46.34.54.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2e:3f:5e:9a:7f:b9:3f:13:77:bb:5f:e5:28:6b:75:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Aug 25 19:50:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5f839c0718a00b8cdd0fa7da4ce397115f67c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:01:05:23:b2:d1:8e:c6:a8:f8:ec:1b:e3:
4e:e6:e0:ad:0c:a2:72:d9:9d:f5:b7:97:40:1b:d7:
08:8b:fb:14:8c:73:cf:95:a2:69:69:fa:24:ec:f5:
2b:06:dc:43:43:49:46:bb:55:48:25:32:56:6e:d9:
d9:39:65:e3:55:fa:ce:f8:a1:97:f7:a9:28:83:46:
c2:27:ce:06:b0:c2:3a:44:a6:9a:da:84:0d:2c:53:
32:5a:90:e1:b4:21:66:87:be:d3:48:a4:cc:a6:ff:
d6:c7:ba:4b:78:32:72:0d:a2:73:a0:ed:5f:d4:25:
9a:51:db:e9:b5:68:8a:5f:50:26:d6:39:c0:74:73:
f3:7d:43:ed:18:83:dc:0d:78:76:4c:1f:65:fd:21:
90:f9:95:b0:5d:75:3d:15:47:2a:91:fc:d1:e2:87:
e6:c4:cd:6e:5a:e9:03:f0:72:57:8f:ea:d7:ca:70:
c9:18:0d:9d:27:57:31:36:33:bc:00:eb:e9:4b:cb:
dc:d5:78:ca:a9:54:51:7b:4f:ec:61:7f:67:e3:12:
10:d0:a5:36:e8:ce:a8:f0:b3:9e:34:7f:20:f3:b8:
f8:48:c1:06:d5:5b:5f:a6:dd:bc:dc:7a:31:d2:20:
53:7b:32:63:4a:a3:55:44:e6:69:e7:cc:8c:c6:4a:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F8:39:C0:71:8A:00:B8:CD:D0:FA:7D:A4:CE:39:71:15:F6:7C:40
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/xfg5wHGKALjN0Pp9pM45cRX2fEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.37.255
46.34.39.0-46.34.40.255
46.34.42.0/23
46.34.49.0/24
46.34.54.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:27:68:d8:ec:6c:91:75:f2:c2:e3:83:3d:49:61:50:81:b1:
db:7e:a9:49:e5:94:74:10:2c:29:df:aa:0a:b5:22:1f:0d:2c:
90:13:2a:4e:99:d2:13:5e:fc:8a:08:91:33:fe:03:f4:34:f5:
14:fb:7a:a1:2f:f5:77:dc:7d:12:bb:3b:57:f7:78:bd:4e:31:
5e:1c:39:6e:12:a1:ac:8c:a9:02:f8:4c:d1:12:db:e6:40:d3:
40:47:21:db:97:38:33:3a:e4:be:f7:cc:4c:d8:72:87:83:62:
8c:dc:40:e4:6d:91:90:1f:1a:ac:8b:2b:e8:ec:18:d7:bf:f2:
7f:ce:8e:f0:d4:5e:1f:a1:3f:fe:5e:b1:c5:b8:f1:e2:4b:dd:
b1:34:a4:51:b5:d9:5b:17:16:94:a0:49:6b:f3:0f:61:2e:eb:
b2:e4:2e:73:3d:d4:43:54:de:87:f2:4c:02:6a:e4:e1:b8:c7:
db:b6:eb:69:84:0b:86:66:00:32:fd:fa:c9:c9:75:44:34:ad:
06:9a:67:a5:b6:a4:83:47:70:71:23:29:41:fa:70:2a:84:35:
66:ef:90:e7:8e:07:f4:0d:34:c2:c7:57:f1:12:7f:1c:d0:77:
3a:c4:38:b0:5a:d9:13:2c:60:c0:12:93:21:3b:78:1a:f6:a7:
97:04:4e:b2
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYouP16af7k/E3e7X+Uoa3UtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMwODI1MTk1MDE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWY4MzljMDcxOGEwMGI4Y2RkMGZhN2RhNGNlMzk3MTE1ZjY3YzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNgBBSOy0Y7GqPjsG+NO5uCtDKJy
2Z31t5dAG9cIi/sUjHPPlaJpafok7PUrBtxDQ0lGu1VIJTJWbtnZOWXjVfrO+KGX
96kog0bCJ84GsMI6RKaa2oQNLFMyWpDhtCFmh77TSKTMpv/Wx7pLeDJyDaJzoO1f
1CWaUdvptWiKX1Am1jnAdHPzfUPtGIPcDXh2TB9l/SGQ+ZWwXXU9FUcqkfzR4ofm
xM1uWukD8HJXj+rXynDJGA2dJ1cxNjO8AOvpS8vc1XjKqVRRe0/sYX9n4xIQ0KU2
6M6o8LOeNH8g87j4SMEG1Vtfpt283Hox0iBTezJjSqNVROZp58yMxkooTwIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFMX4OcBxigC4zdD6faTOOXEV9nxAMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEveGZnNXdIR0tBTGpOMFBwOXBNNDVjUlgyZkVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBAUuIiAD
BAEuIiQwDAMEAC4iJwMEAC4iKAMEAS4iKgMEAC4iMQMEAC4iNgMEAC4iPzANBgkq
hkiG9w0BAQsFAAOCAQEAXSdo2OxskXXywuODPUlhUIGx236pSeWUdBAsKd+qCrUi
Hw0skBMqTpnSE178igiRM/4D9DT1FPt6oS/1d9x9Ers7V/d4vU4xXhw5bhKhrIyp
AvhM0RLb5kDTQEch25c4MzrkvvfMTNhyh4NijNxA5G2RkB8arIsr6OwY17/yf86O
8NReH6E//l6xxbjx4kvdsTSkUbXZWxcWlKBJa/MPYS7rsuQucz3UQ1Teh/JMAmrk
4bjH27braYQLhmYAMv36ycl1RDStBppnpbakg0dwcSMpQfpwKoQ1Zu+Q544H9A00
wsdX8RJ/HNB3OsQ4sFrZEyxgwBKTITt4GvanlwROsg==
-----END CERTIFICATE-----
Generated at Mon May 12 15:43:43 2025 by rpki-client