Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/GWOFA6qL895FBt4-5_OwHyuKU_s.roa
File: GWOFA6qL895FBt4-5_OwHyuKU_s.roa (raw, json)
Hash identifier: Vg4+3RTJlNAKn4pu9CjuYZ+MQds6rgwyY9o2OlhCEe0=
Subject key identifier: 19:63:85:03:AA:8B:F3:DE:45:06:DE:3E:E7:F3:B0:1F:2B:8A:53:FB
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187F00AFFDB69029A20B79F9E52BC8914F6
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/GWOFA6qL895FBt4-5_OwHyuKU_s.roa
Signing time: Sat 06 May 2023 07:51:05 +0000
ROA not before: Sat 06 May 2023 07:51:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 46.162.7.0/24 maxlen: 24
46.162.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f0:0a:ff:db:69:02:9a:20:b7:9f:9e:52:bc:89:14:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 6 07:51:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19638503aa8bf3de4506de3ee7f3b01f2b8a53fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d6:f2:df:5f:fe:6f:f8:2d:a7:e4:b1:48:16:
da:2a:2d:52:f5:2f:e2:b3:1f:25:14:b2:5d:61:9f:
84:8e:5a:92:70:07:cf:67:67:49:05:e0:32:de:a9:
c3:30:03:46:59:7f:70:f0:6e:b0:99:ce:5a:33:09:
95:25:ea:a9:49:b3:34:59:94:b5:70:d5:1d:d4:ba:
d3:09:27:c9:06:a4:94:e5:ac:a1:eb:2e:74:45:c5:
92:f1:6a:d1:1f:50:9d:f5:bb:34:17:30:a0:aa:1e:
5a:c7:0a:60:96:db:af:53:8f:58:59:2c:db:38:b5:
b3:5a:c3:70:bf:9f:10:d6:80:1c:bf:26:2a:f8:80:
19:c3:53:2a:09:83:7f:b9:c7:e5:a3:a3:73:11:36:
01:db:b5:1e:f7:51:09:5e:98:ea:7f:70:45:9b:64:
fd:07:dd:db:45:92:c3:e3:91:d8:2c:c1:6f:23:11:
a3:cc:08:26:5a:95:82:b6:2f:68:99:30:6b:12:88:
8d:03:1a:24:82:16:67:f4:5c:9b:13:77:e0:60:67:
63:4c:db:e3:0a:49:44:e9:8d:cf:9d:ae:ba:36:06:
8b:9d:82:35:94:d3:f3:c8:5f:dd:6f:6e:05:03:2c:
31:72:6a:09:bf:b8:ad:2d:c3:b3:7a:10:1d:d3:0e:
67:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:63:85:03:AA:8B:F3:DE:45:06:DE:3E:E7:F3:B0:1F:2B:8A:53:FB
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/GWOFA6qL895FBt4-5_OwHyuKU_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.7.0/24
46.162.54.0/24
Signature Algorithm: sha256WithRSAEncryption
21:9a:ea:9a:80:51:b0:c3:d4:77:88:a2:4b:e5:77:b4:b8:59:
21:e9:8f:58:4a:96:02:a8:8a:01:47:f5:64:20:a3:93:f8:6f:
20:af:92:c7:e2:f8:a0:15:92:d5:eb:1b:2f:b6:9c:43:59:da:
85:b9:d2:ac:f3:c9:c5:5e:79:05:63:3b:23:ad:1c:7a:f8:7c:
2b:57:b8:05:7b:e8:28:40:ff:17:e9:1f:94:8a:d8:29:80:bd:
d9:12:e4:19:e7:32:42:71:13:e2:37:25:c1:3a:10:97:53:23:
f5:e1:71:07:d9:b3:38:c3:8c:20:ba:e7:ba:7e:4e:a5:c0:e1:
5c:71:53:3f:2a:72:6e:df:cd:03:eb:1c:69:fb:08:a9:4b:5a:
e1:8c:8a:7a:7f:16:47:98:40:1b:9d:10:49:81:55:10:a4:1f:
0a:88:8c:71:9b:a8:0a:3f:13:a2:a2:08:a0:a9:b3:b5:66:c9:
f1:b0:6b:68:d7:b7:12:2e:79:c3:21:01:1b:02:01:5a:09:5c:
dd:0e:a2:93:32:5d:23:ad:33:02:ca:cf:cd:c6:77:a2:3a:af:
fc:84:e6:d1:4e:c4:eb:21:36:09:79:fa:0a:51:7e:1e:96:a8:
2a:da:38:98:43:5d:7b:2c:9a:fd:04:fb:4b:e3:01:25:fc:d2:
47:c8:ec:cc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYfwCv/baQKaILefnlK8iRT2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNTA2MDc1MTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTYzODUwM2FhOGJmM2RlNDUwNmRlM2VlN2YzYjAxZjJiOGE1M2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtby31/+b/gtp+SxSBbaKi1S9S/i
sx8lFLJdYZ+EjlqScAfPZ2dJBeAy3qnDMANGWX9w8G6wmc5aMwmVJeqpSbM0WZS1
cNUd1LrTCSfJBqSU5ayh6y50RcWS8WrRH1Cd9bs0FzCgqh5axwpgltuvU49YWSzb
OLWzWsNwv58Q1oAcvyYq+IAZw1MqCYN/ucflo6NzETYB27Ue91EJXpjqf3BFm2T9
B93bRZLD45HYLMFvIxGjzAgmWpWCti9omTBrEoiNAxokghZn9FybE3fgYGdjTNvj
CklE6Y3Pna66NgaLnYI1lNPzyF/db24FAywxcmoJv7itLcOzehAd0w5n0QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBljhQOqi/PeRQbePufzsB8rilP7MB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvR1dPRkE2cUw4OTVGQnQ0LTVfT3dIeXVLVV9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALqIHAwQA
LqI2MA0GCSqGSIb3DQEBCwUAA4IBAQAhmuqagFGww9R3iKJL5Xe0uFkh6Y9YSpYC
qIoBR/VkIKOT+G8gr5LH4vigFZLV6xsvtpxDWdqFudKs88nFXnkFYzsjrRx6+Hwr
V7gFe+goQP8X6R+UitgpgL3ZEuQZ5zJCcRPiNyXBOhCXUyP14XEH2bM4w4wguue6
fk6lwOFccVM/KnJu380D6xxp+wipS1rhjIp6fxZHmEAbnRBJgVUQpB8KiIxxm6gK
PxOiogigqbO1ZsnxsGto17cSLnnDIQEbAgFaCVzdDqKTMl0jrTMCys/NxneiOq/8
hObRTsTrITYJefoKUX4elqgq2jiYQ117LJr9BPtL4wEl/NJHyOzM
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:02:59 2025 by rpki-client