Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/6ft2BZbdfVjex73W3mEMxLiUhEA.roa
File: 6ft2BZbdfVjex73W3mEMxLiUhEA.roa (raw, json)
Hash identifier: fxp7Wd9Dazxytpme6/Wto/JEmL/e7KxoE8NlbzPm5cI=
Subject key identifier: E9:FB:76:05:96:DD:7D:58:DE:C7:BD:D6:DE:61:0C:C4:B8:94:84:40
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0186CDABCB3DB55AFE6F45A98E5E72C75ACA
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/6ft2BZbdfVjex73W3mEMxLiUhEA.roa
Signing time: Fri 10 Mar 2023 22:37:13 +0000
ROA not before: Fri 10 Mar 2023 22:37:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 46.232.64.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.71.0/24 maxlen: 24
46.232.67.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.70.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.72.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
149.126.246.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.185.0/24 maxlen: 24
46.3.186.0/24 maxlen: 24
46.3.184.0/24 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.189.0/24 maxlen: 24
46.3.191.0/24 maxlen: 24
46.3.187.0/24 maxlen: 24
46.3.101.0/24 maxlen: 24
46.3.116.0/22 maxlen: 24
46.3.120.0/21 maxlen: 21
46.3.134.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
46.3.202.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
46.3.246.0/24 maxlen: 24
46.3.245.0/24 maxlen: 24
46.3.243.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cd:ab:cb:3d:b5:5a:fe:6f:45:a9:8e:5e:72:c7:5a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 10 22:37:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9fb760596dd7d58dec7bdd6de610cc4b8948440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:14:ba:40:a1:1e:8f:99:e9:fb:61:e5:a2:8d:
d6:c8:c8:bd:fd:d9:38:8f:cc:81:02:5d:d8:b6:b7:
4a:c1:f8:ab:cb:82:44:f4:bf:54:1f:1a:ad:c7:77:
02:f0:e0:b3:a0:94:32:b6:73:74:ae:91:77:94:63:
24:b5:e9:f0:9d:46:79:1c:3d:1d:4e:6e:2a:ce:8e:
d7:79:36:5f:c9:75:75:fb:34:df:2e:fe:ad:1c:ac:
5c:ef:c5:f4:69:49:31:21:81:10:49:92:7b:8b:8a:
9d:a9:19:ad:fd:69:b3:8c:c3:71:cf:ec:a2:88:1e:
84:f8:1e:e6:08:a0:62:08:52:a0:95:53:9e:fa:e1:
51:95:53:ed:c4:b8:31:0d:2e:96:53:b3:ca:c5:b1:
3c:8b:09:53:35:b9:76:0c:67:6b:73:24:aa:0a:fc:
59:58:c0:78:53:32:ef:9a:c0:83:88:d6:51:fe:03:
29:6c:ad:d9:99:fd:6c:5a:83:c7:04:48:46:24:7a:
ca:ea:ed:01:3b:b1:2c:af:1f:55:8d:e4:04:d6:b5:
38:af:33:2e:c9:87:8d:db:32:c5:01:b3:3b:7a:a3:
84:04:ea:78:f6:51:83:de:fe:f4:82:4f:48:73:29:
fd:a7:5a:e3:6a:c9:79:bc:8a:31:b6:93:16:f1:58:
09:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FB:76:05:96:DD:7D:58:DE:C7:BD:D6:DE:61:0C:C4:B8:94:84:40
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/6ft2BZbdfVjex73W3mEMxLiUhEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.88.0/22
46.3.101.0/24
46.3.116.0-46.3.127.255
46.3.134.0/24
46.3.160.0/22
46.3.184.0/21
46.3.200.0-46.3.202.255
46.3.220.0/23
46.3.230.0/23
46.3.243.0/24
46.3.245.0-46.3.246.255
46.3.248.0/21
46.232.64.0-46.232.72.255
149.126.226.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.244.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c1:f4:15:0a:81:bd:fb:77:68:cf:44:d8:2c:8a:51:da:79:
6e:71:0f:59:77:01:0e:6a:7c:77:1f:64:25:5d:c5:0b:47:ae:
da:48:d2:9a:bd:5a:23:bd:73:b2:0b:5b:22:b4:31:3d:24:86:
eb:10:e3:1d:59:68:48:87:53:db:1b:e1:81:13:d0:ae:95:47:
d9:a4:86:11:5b:38:ac:8f:9d:0f:e0:ed:e3:b3:61:0a:25:4d:
21:90:04:d9:81:16:8a:f0:b5:2d:3c:b4:83:0d:8f:3c:b4:86:
5e:b9:fc:7c:4d:3d:0d:b0:9e:f9:23:11:ce:1d:29:9a:b3:f4:
e9:0f:d0:95:f7:d1:cf:9e:d6:45:fa:94:d2:ec:42:d1:0e:a1:
7b:a9:d3:19:33:78:72:ee:44:bf:32:5d:26:50:b1:84:2d:f4:
5f:99:b1:e5:e6:77:05:67:9c:7e:ce:43:6c:ce:bf:d2:09:bd:
dd:f5:65:84:05:d3:cb:4f:c1:4c:c7:44:47:a2:a2:84:a7:79:
b1:c6:78:9b:e3:a3:a8:25:28:98:7d:b2:73:5f:ce:b7:36:17:
93:ca:93:ce:fe:5e:4b:f1:cd:9f:81:a1:05:09:e3:a2:d1:6d:
df:d8:47:7d:ff:34:9f:31:f2:56:2d:e4:e7:e3:9e:b0:e5:8e:
94:37:9b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:24 2025 by rpki-client