Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/H8q43ZxdkRcNEX5EPe8qSF0zoX4.roa
File: H8q43ZxdkRcNEX5EPe8qSF0zoX4.roa (raw, json)
Hash identifier: QzQXBDvi0+y7pdMhRaktR2g+DLNDiPxhLf51DhTCSxk=
Subject key identifier: 1F:CA:B8:DD:9C:5D:91:17:0D:11:7E:44:3D:EF:2A:48:5D:33:A1:7E
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0188A971DF9C645B1797CE63EE052897196C
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/H8q43ZxdkRcNEX5EPe8qSF0zoX4.roa
Signing time: Sun 11 Jun 2023 07:53:12 +0000
ROA not before: Sun 11 Jun 2023 07:53:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 46.232.64.0/21 maxlen: 24
46.3.156.0/24 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.80.0/22 maxlen: 22
46.3.208.0/21 maxlen: 21
149.126.203.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a9:71:df:9c:64:5b:17:97:ce:63:ee:05:28:97:19:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 11 07:53:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fcab8dd9c5d91170d117e443def2a485d33a17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:c0:98:4a:21:d8:d4:5d:16:9c:f2:a2:2a:
68:b3:46:80:cd:d7:45:e1:52:8c:6f:11:4b:2a:b1:
33:82:64:23:ae:e6:fe:5b:9c:d9:2d:e2:af:45:df:
15:98:8c:98:4d:40:ca:39:6a:50:3c:a6:2e:d4:f0:
c4:a9:f4:35:41:8c:b8:61:bd:be:8b:2c:05:81:5b:
ae:98:6f:09:47:51:d6:22:b6:bd:43:0a:9b:49:1d:
e1:11:27:eb:17:08:59:34:b4:c5:74:43:2c:55:39:
f2:db:28:01:a7:93:d6:fd:da:78:7b:f3:96:45:a7:
40:6d:a0:b3:81:ee:13:fb:12:84:34:a4:c3:13:11:
a1:17:a3:b0:ee:38:0a:e7:c7:d4:19:73:8b:1f:5f:
18:a6:bd:ef:f6:be:0b:4a:82:f5:52:4a:96:99:ff:
76:8c:52:50:5b:b0:b8:72:71:c9:da:98:72:e5:62:
09:e2:fe:79:b1:07:d1:da:69:ac:62:79:2d:aa:01:
47:b8:fe:4b:64:c4:b0:f1:3f:41:ba:07:25:d8:01:
70:2b:ba:50:75:03:be:60:a7:20:a7:7c:8b:08:12:
5c:27:06:b2:fc:3f:dc:13:39:82:1b:59:05:3c:c3:
66:93:12:65:00:eb:8f:e6:0e:56:62:07:88:4c:e6:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CA:B8:DD:9C:5D:91:17:0D:11:7E:44:3D:EF:2A:48:5D:33:A1:7E
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/H8q43ZxdkRcNEX5EPe8qSF0zoX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.80.0/22
46.3.135.0/24
46.3.156.0/23
46.3.188.0/22
46.3.208.0/21
46.232.64.0/21
149.126.203.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
02:a3:6c:ac:e3:25:80:77:5d:12:5d:77:b6:cc:54:9a:57:7b:
89:f1:e7:89:87:e0:cc:a3:a1:00:24:b6:c5:62:d1:60:d3:48:
c5:1b:f8:6d:e6:48:81:7e:ef:1d:2a:3d:fc:70:4b:aa:b2:40:
a4:cf:ba:6e:3b:3b:c3:0e:e9:2a:23:57:8b:ad:58:47:97:bd:
17:60:02:ab:02:c3:a9:05:dd:d7:fc:79:a9:87:34:36:39:c7:
e8:28:eb:bf:87:30:bc:32:aa:e2:ad:fb:3f:33:25:87:6d:92:
ff:3a:a7:7d:48:9b:79:32:05:27:ad:15:3e:cb:f6:57:a5:73:
cd:01:f5:1c:ea:4d:10:64:bb:82:f5:4d:ba:e3:f5:0c:e3:cb:
fb:71:9a:bf:a7:0d:fe:f4:c5:4c:3e:c0:9c:3e:08:ea:89:fe:
f1:06:97:e3:1b:96:ae:da:22:4b:1e:fd:05:d9:b7:68:76:89:
75:51:9f:3e:35:8c:cb:4b:85:fa:35:7f:43:29:6e:a0:a4:59:
93:42:5f:ce:6a:d0:ed:4a:b8:98:b5:28:02:ba:05:95:d7:83:
7d:68:3c:43:55:18:67:aa:11:9e:fd:bf:02:3a:bb:c3:b2:be:
03:41:01:4e:11:e2:e3:fa:0a:9c:12:86:cd:e6:74:88:97:e7:
f5:7f:0c:3f
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgISAYipcd+cZFsXl85j7gUolxlsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwNjExMDc1MzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmNhYjhkZDljNWQ5MTE3MGQxMTdlNDQzZGVmMmE0ODVkMzNhMTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHLAmEoh2NRdFpzyoipos0aAzddF
4VKMbxFLKrEzgmQjrub+W5zZLeKvRd8VmIyYTUDKOWpQPKYu1PDEqfQ1QYy4Yb2+
iywFgVuumG8JR1HWIra9QwqbSR3hESfrFwhZNLTFdEMsVTny2ygBp5PW/dp4e/OW
RadAbaCzge4T+xKENKTDExGhF6Ow7jgK58fUGXOLH18Ypr3v9r4LSoL1UkqWmf92
jFJQW7C4cnHJ2phy5WIJ4v55sQfR2mmsYnktqgFHuP5LZMSw8T9Bugcl2AFwK7pQ
dQO+YKcgp3yLCBJcJway/D/cEzmCG1kFPMNmkxJlAOuP5g5WYgeITOZfbwIDAQAB
o4ICQDCCAjwwHQYDVR0OBBYEFB/KuN2cXZEXDRF+RD3vKkhdM6F+MB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvSDhxNDNaeGRrUmNORVg1RVBlOHFTRjB6b1g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTBDBAIAATA9AwQCLgNQAwQA
LgOHAwQBLgOcAwQCLgO8AwQDLgPQAwQDLuhAAwQAlX7LAwQAlX77MAsDBACVfv0D
AwCVfjANBgkqhkiG9w0BAQsFAAOCAQEAAqNsrOMlgHddEl13tsxUmld7ifHniYfg
zKOhACS2xWLRYNNIxRv4beZIgX7vHSo9/HBLqrJApM+6bjs7ww7pKiNXi61YR5e9
F2ACqwLDqQXd1/x5qYc0NjnH6Cjrv4cwvDKq4q37PzMlh22S/zqnfUibeTIFJ60V
Psv2V6VzzQH1HOpNEGS7gvVNuuP1DOPL+3Gav6cN/vTFTD7AnD4I6on+8QaX4xuW
rtoiSx79Bdm3aHaJdVGfPjWMy0uF+jV/QyluoKRZk0JfzmrQ7Uq4mLUoAroFldeD
fWg8Q1UYZ6oRnv2/Ajq7w7K+A0EBThHi4/oKnBKGzeZ0iJfn9X8MPw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:59 2025 by rpki-client