Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/JG5DAD51dhjI10Y_NoGcUuzk9rA.roa
File: JG5DAD51dhjI10Y_NoGcUuzk9rA.roa (raw, json)
Hash identifier: cgXT4bSbTid8vBD27wXyyRWkCyY1bmMB5RmuWnsMHek=
Subject key identifier: 24:6E:43:00:3E:75:76:18:C8:D7:46:3F:36:81:9C:52:EC:E4:F6:B0
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01845CC4AD5D7E53844AA0994E6ADC7A16B5
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/JG5DAD51dhjI10Y_NoGcUuzk9rA.roa
Signing time: Wed 09 Nov 2022 14:21:44 +0000
ROA not before: Wed 09 Nov 2022 14:21:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59729
IP address blocks: 46.3.152.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.158.0/24 maxlen: 24
149.126.192.0/24 maxlen: 24
46.3.202.0/24 maxlen: 24
46.3.203.0/24 maxlen: 24
46.3.204.0/24 maxlen: 24
149.126.197.0/24 maxlen: 24
149.126.203.0/24 maxlen: 24
46.3.224.0/24 maxlen: 24
46.3.225.0/24 maxlen: 24
46.3.226.0/24 maxlen: 24
46.3.227.0/24 maxlen: 24
46.3.238.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5c:c4:ad:5d:7e:53:84:4a:a0:99:4e:6a:dc:7a:16:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Nov 9 14:21:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=246e43003e757618c8d7463f36819c52ece4f6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2f:1c:13:ce:05:fa:5c:33:b0:74:c5:77:2c:
20:ad:eb:22:19:d8:e9:8d:5c:d9:4f:37:54:09:b8:
05:6b:7c:dd:ab:12:d1:92:2d:78:6b:f1:ff:1f:22:
e9:b8:bf:a7:5f:4f:1f:5a:46:5a:d1:2a:6a:4a:05:
85:82:c5:e2:1f:34:75:b1:ef:b5:1c:35:ea:48:dc:
ef:4d:4e:82:30:62:04:76:39:f1:e8:ad:3a:dc:84:
59:3d:4b:64:07:b2:88:1b:fa:85:5c:a5:be:b3:b9:
95:d9:f3:d0:d5:f7:8a:5f:9b:25:6b:0e:b9:87:5d:
5c:00:13:ad:e7:16:5d:95:91:f0:59:89:d4:d2:8f:
6f:5a:9c:71:51:b2:1a:2e:f8:2d:3a:17:a6:18:27:
72:a4:f7:c7:29:d0:04:cf:75:54:96:27:8d:5a:56:
e2:0b:8d:b3:6a:2a:c1:7f:4f:69:ab:3e:e3:21:71:
3c:9b:e9:41:54:6e:75:12:12:b7:8a:61:94:c6:14:
93:fd:41:58:3f:07:24:7a:3b:b8:46:d6:44:56:c5:
b6:d7:62:8b:bf:fd:33:09:2f:b0:d5:1c:08:6d:47:
75:32:18:4d:2c:e4:05:be:58:92:22:c5:17:50:36:
67:85:62:6a:4a:57:3c:da:4d:7d:f8:a1:95:60:5e:
75:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6E:43:00:3E:75:76:18:C8:D7:46:3F:36:81:9C:52:EC:E4:F6:B0
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/JG5DAD51dhjI10Y_NoGcUuzk9rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.152.0/22
46.3.158.0/23
46.3.202.0-46.3.204.255
46.3.224.0/22
46.3.238.0/23
149.126.192.0/24
149.126.197.0/24
149.126.203.0/24
Signature Algorithm: sha256WithRSAEncryption
25:7a:b2:2b:8f:71:74:c4:82:31:f8:e6:db:5c:81:dd:c2:fe:
30:ae:9a:c0:b1:94:de:4d:cb:f0:2b:7e:78:55:04:7d:82:b7:
99:e0:6b:07:10:05:9c:21:64:c1:f9:ce:63:50:7c:32:fa:5c:
75:59:d3:63:84:bc:f7:8e:8a:84:18:d7:b7:3b:3c:c0:1e:0c:
b2:25:ef:0e:0b:a1:2c:7e:ce:7b:b4:2f:d2:35:c1:41:f3:45:
09:1c:57:9b:e4:c0:39:bf:2d:40:cb:b3:8e:11:ec:d4:54:f7:
92:d2:09:8b:96:67:82:60:7b:f7:76:25:61:8f:dc:55:69:cf:
71:17:f7:65:ea:5e:00:c2:4b:fb:9a:db:f9:06:97:53:89:2a:
9e:3b:6f:5a:aa:e2:c6:2a:a6:cf:7b:3a:b3:da:ea:f8:9a:e9:
be:5e:d3:ed:3d:86:31:c3:6c:ac:c2:b3:93:b3:27:08:73:7e:
71:85:11:43:28:ed:e5:b6:f1:7a:98:26:62:ae:bb:d0:2f:af:
2b:97:8e:1f:f6:fd:f6:37:88:a8:c9:cc:6d:b8:19:92:ec:94:
db:20:00:ca:5c:4b:a2:11:5a:93:ad:e4:85:e4:c4:2c:82:94:
e8:b7:9c:cd:d3:39:57:8e:1a:34:27:05:5f:74:01:f6:db:02:
68:e5:53:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:18 2025 by rpki-client