Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/AX5a_zCMkQ4qYiesxUTRZPtDHDM.roa
File: AX5a_zCMkQ4qYiesxUTRZPtDHDM.roa (raw, json)
Hash identifier: GywKuNn2cBHMXgz6ikm5THWbFivIGvRbAtq2l+4+9to=
Subject key identifier: 01:7E:5A:FF:30:8C:91:0E:2A:62:27:AC:C5:44:D1:64:FB:43:1C:33
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018566EDD8ADE74168C4429662CBD1BD5EDF
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/AX5a_zCMkQ4qYiesxUTRZPtDHDM.roa
Signing time: Sat 31 Dec 2022 06:45:41 +0000
ROA not before: Sat 31 Dec 2022 06:45:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 46.232.64.0/21 maxlen: 24
46.3.64.0/22 maxlen: 24
46.232.80.0/20 maxlen: 24
46.3.68.0/22 maxlen: 24
46.3.4.0/22 maxlen: 24
46.3.0.0/16 maxlen: 24
46.232.24.0/21 maxlen: 24
46.3.16.0/22 maxlen: 24
46.232.32.0/20 maxlen: 24
46.3.24.0/22 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.92.0/22 maxlen: 24
46.3.135.0/24 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
149.126.203.0/24 maxlen: 24
149.126.200.0/24 maxlen: 24
46.3.224.0/22 maxlen: 24
149.126.215.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:66:ed:d8:ad:e7:41:68:c4:42:96:62:cb:d1:bd:5e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Dec 31 06:45:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=017e5aff308c910e2a6227acc544d164fb431c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:53:67:b1:64:1a:6e:f0:63:b9:f9:aa:54:
f8:0a:54:5b:c5:53:59:2d:4f:e8:67:9d:e8:cd:28:
b5:11:0b:73:4e:c2:d1:67:0c:db:75:8f:18:3b:9a:
eb:50:42:b1:3e:99:1b:20:60:b2:15:e2:0d:76:bd:
e5:76:cd:fd:7e:5d:8c:fa:b5:af:4f:0e:26:36:c5:
a5:59:94:10:db:a5:c6:d2:f5:25:4a:66:12:75:72:
14:15:7a:a8:29:fa:59:d5:ce:86:6d:04:d6:e9:51:
ac:9b:fb:c9:51:1a:86:8b:41:9c:da:96:03:2d:b1:
75:21:b1:41:c1:05:ce:77:cb:33:88:8f:f6:94:3a:
d5:aa:57:88:ff:02:c2:42:af:2e:30:df:f6:1b:7c:
89:bd:5a:ae:ff:1b:a9:7c:1b:cd:b7:43:23:1d:1d:
27:02:d2:63:54:7f:14:11:d3:26:2d:dd:90:fb:87:
16:7b:f1:12:87:10:af:ac:df:66:32:0c:e2:62:0b:
77:0b:db:5c:09:60:09:5d:30:50:d3:9c:ba:f9:91:
0e:b8:9b:e9:2a:3d:e3:7a:53:19:dd:ef:d2:e5:7d:
57:31:e7:ec:ae:54:f4:ca:3b:25:f7:50:ad:39:bf:
fb:51:c8:e9:64:03:fb:87:d7:ac:72:73:58:9d:d4:
7e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7E:5A:FF:30:8C:91:0E:2A:62:27:AC:C5:44:D1:64:FB:43:1C:33
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/AX5a_zCMkQ4qYiesxUTRZPtDHDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/16
46.232.24.0-46.232.47.255
46.232.64.0/21
46.232.80.0/20
149.126.200.0/24
149.126.203.0/24
149.126.215.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
2b:92:d6:5b:6c:cd:e5:55:0e:a4:54:d2:8a:8a:6b:4c:1c:11:
a1:1b:61:3c:3c:97:10:37:bc:31:fc:a9:30:36:ac:6c:1e:43:
16:e2:db:4a:2f:36:21:9b:45:a3:d4:23:a3:ed:1b:08:b3:08:
cd:ee:58:fe:6b:14:83:3f:2e:71:22:b5:0a:79:c0:c6:b2:8d:
3f:08:72:f6:9b:0a:21:72:b9:0b:cd:3e:26:58:71:b9:5d:8a:
dc:4d:b4:7b:6f:37:12:28:73:d3:49:0e:d6:23:32:43:d4:92:
b0:5a:be:63:90:df:5f:0e:8a:36:81:7f:b5:47:35:f4:7c:18:
c6:1b:82:d2:75:0b:f7:e6:de:6a:bb:a9:91:0a:13:8b:9f:49:
b0:ed:cc:45:eb:00:00:1a:bb:f8:19:fb:99:72:f7:1b:4d:16:
bc:3f:0c:72:6a:ef:10:9e:72:56:37:b4:70:3b:a5:53:5e:ff:
9e:c8:97:cd:ee:fb:78:f4:5a:e1:16:ff:f9:79:a5:e6:d8:38:
de:d8:55:86:3d:e6:93:ab:d4:e5:9e:ea:e7:ca:77:9a:51:27:
ec:af:5b:42:e7:26:10:48:49:9e:c3:bf:c4:16:00:c0:d7:31:
fd:e8:78:73:3a:55:04:fb:58:03:cf:43:4b:70:3c:0d:74:aa:
60:1f:f9:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:40 2025 by rpki-client