Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/4ZDOkHuIfaSvWWPp15ulWjAnbvU.roa
File: 4ZDOkHuIfaSvWWPp15ulWjAnbvU.roa (raw, json)
Hash identifier: DydliUK7bGQXub0dtLUN1pyiMUylcUOFMBxNNZV1J4E=
Subject key identifier: E1:90:CE:90:7B:88:7D:A4:AF:59:63:E9:D7:9B:A5:5A:30:27:6E:F5
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0186972147E753585FC365856D781AF8657E
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/4ZDOkHuIfaSvWWPp15ulWjAnbvU.roa
Signing time: Tue 28 Feb 2023 08:26:26 +0000
ROA not before: Tue 28 Feb 2023 08:26:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 46.3.255.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.246.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:21:47:e7:53:58:5f:c3:65:85:6d:78:1a:f8:65:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Feb 28 08:26:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e190ce907b887da4af5963e9d79ba55a30276ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:40:c7:18:6e:5a:8e:70:66:aa:6c:47:94:
4e:cf:dd:06:fa:f5:ca:76:eb:0c:34:2c:0d:f9:2b:
bd:f9:e2:40:f4:6a:83:82:dc:5f:cb:f1:4e:ec:91:
fa:77:ee:86:e8:9f:ec:1d:d8:2a:ee:51:3d:1f:02:
b1:24:5b:93:db:c8:3d:4a:f1:1b:c7:27:04:50:f4:
14:b1:58:86:80:d6:d2:96:ed:14:3c:61:d0:7b:63:
5c:9d:33:10:8f:e2:5c:75:7f:9f:d7:4e:95:06:15:
a0:f8:02:cc:6c:01:79:5e:39:41:1a:4f:56:fa:be:
71:a1:f6:bc:d2:b7:c1:75:ad:1e:73:e8:0d:09:54:
7b:fb:4c:7b:f4:43:b4:38:71:4a:f1:25:cd:a7:a3:
70:0f:26:88:5b:38:a1:b6:67:7a:b7:34:3c:c2:cc:
28:4d:34:0e:88:8e:c3:79:45:f2:5b:7e:dd:2c:dd:
ba:6e:98:28:9a:ba:c7:97:f6:b4:54:ee:b5:54:55:
7f:3a:2a:0b:c5:2c:b6:d2:f4:85:f4:e0:04:90:1c:
c7:4d:55:d6:aa:28:21:fc:60:cf:33:7b:30:8c:b9:
6f:22:f9:d9:0c:bc:0c:b7:f4:e3:23:dd:6d:c8:8b:
bb:3b:e9:c8:4d:be:49:90:f2:3a:a3:59:d1:d5:cc:
cc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:90:CE:90:7B:88:7D:A4:AF:59:63:E9:D7:9B:A5:5A:30:27:6E:F5
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/4ZDOkHuIfaSvWWPp15ulWjAnbvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.251.0/24
46.3.253.0-46.3.255.255
149.126.226.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.244.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d7:48:7f:4d:66:d8:c7:7d:ce:a1:19:13:c6:f7:ce:b0:9f:
aa:7b:87:c8:2f:5e:89:aa:73:2a:98:f4:6b:30:92:12:8e:eb:
be:81:d6:5e:5c:ba:6b:ef:da:59:f0:d3:b0:0b:a2:c2:18:02:
0c:39:be:06:de:e7:8a:15:cb:d6:17:6b:e7:df:66:60:ad:31:
86:31:7d:5c:c6:fc:13:42:2c:d8:57:51:4a:e9:18:ad:8d:f8:
f9:65:f8:27:1b:dd:be:7d:5c:77:ab:40:74:1a:44:45:51:71:
4d:d5:7e:9a:2f:75:3b:a2:14:0f:fa:29:90:03:34:04:38:58:
7b:01:a0:68:fc:86:6e:1b:ef:0e:5f:33:f2:6d:da:4a:1a:74:
7a:74:10:00:30:1a:9d:20:94:e4:5c:b4:a7:4b:cd:84:4e:a0:
f4:08:fb:89:2f:21:4b:be:d6:3d:00:4e:e4:4e:27:b0:5b:a4:
09:f1:23:cf:49:40:16:f8:d7:01:28:7d:22:bc:ef:9c:a5:0e:
9a:2f:5d:4e:27:fe:ab:a6:0d:45:a7:04:96:17:2f:a5:9f:1c:
03:24:ff:4f:e8:d0:d1:26:b7:96:91:ff:24:81:14:a5:c5:c3:
65:53:3f:e1:29:3f:da:6e:be:90:3f:f0:77:71:18:fb:30:14:
db:b3:7d:41
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAYaXIUfnU1hfw2WFbXga+GV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwMjI4MDgyNjI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTkwY2U5MDdiODg3ZGE0YWY1OTYzZTlkNzliYTU1YTMwMjc2ZWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG5AxxhuWo5wZqpsR5ROz90G+vXK
dusMNCwN+Su9+eJA9GqDgtxfy/FO7JH6d+6G6J/sHdgq7lE9HwKxJFuT28g9SvEb
xycEUPQUsViGgNbSlu0UPGHQe2NcnTMQj+JcdX+f106VBhWg+ALMbAF5XjlBGk9W
+r5xofa80rfBda0ec+gNCVR7+0x79EO0OHFK8SXNp6NwDyaIWzihtmd6tzQ8wswo
TTQOiI7DeUXyW37dLN26bpgomrrHl/a0VO61VFV/OioLxSy20vSF9OAEkBzHTVXW
qigh/GDPM3swjLlvIvnZDLwMt/TjI91tyIu7O+nITb5JkPI6o1nR1czMdwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFOGQzpB7iH2kr1lj6debpVowJ271MB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvNFpET2tIdUlmYVN2V1dQcDE1dWxXakFuYnZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzBFBAIAATA/AwQALgP7MAsD
BAAuA/0DAwIuAAMEAJV+4gMEAJV+5AMEAJV+5wMEAJV+8jAMAwQClX70AwQAlX76
AwQAlX78MA0GCSqGSIb3DQEBCwUAA4IBAQAx10h/TWbYx33OoRkTxvfOsJ+qe4fI
L16JqnMqmPRrMJISjuu+gdZeXLpr79pZ8NOwC6LCGAIMOb4G3ueKFcvWF2vn32Zg
rTGGMX1cxvwTQizYV1FK6Ritjfj5ZfgnG92+fVx3q0B0GkRFUXFN1X6aL3U7ohQP
+imQAzQEOFh7AaBo/IZuG+8OXzPybdpKGnR6dBAAMBqdIJTkXLSnS82ETqD0CPuJ
LyFLvtY9AE7kTiewW6QJ8SPPSUAW+NcBKH0ivO+cpQ6aL11OJ/6rpg1FpwSWFy+l
nxwDJP9P6NDRJreWkf8kgRSlxcNlUz/hKT/abr6QP/B3cRj7MBTbs31B
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:55 2025 by rpki-client