Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/WisMmxmmt-vZrGlmy8vesdEWQyI.roa
File: WisMmxmmt-vZrGlmy8vesdEWQyI.roa (raw, json)
Hash identifier: SNSNom7fs58NGE0AVEwD+3zQo6MHWZRlEEqQcoP+83Y=
Subject key identifier: 5A:2B:0C:9B:19:A6:B7:EB:D9:AC:69:66:CB:CB:DE:B1:D1:16:43:22
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0189588533527883DAE5A5017DF60397BBD2
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/WisMmxmmt-vZrGlmy8vesdEWQyI.roa
Signing time: Sat 15 Jul 2023 07:47:51 +0000
ROA not before: Sat 15 Jul 2023 07:47:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 80.243.128.0/20 maxlen: 24
46.3.48.0/20 maxlen: 20
46.3.84.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.232.0.0/17 maxlen: 17
46.232.16.0/23 maxlen: 23
46.232.18.0/23 maxlen: 23
46.3.0.0/16 maxlen: 16
46.232.21.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.3.152.0/24 maxlen: 24
46.3.148.0/22 maxlen: 22
46.3.158.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.232.112.0/23 maxlen: 23
46.232.116.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
46.232.118.0/23 maxlen: 23
46.232.124.0/23 maxlen: 23
46.232.126.0/23 maxlen: 23
46.3.136.0/22 maxlen: 22
46.3.135.0/24 maxlen: 24
46.3.144.0/22 maxlen: 22
46.3.205.0/24 maxlen: 24
149.126.192.0/18 maxlen: 18
46.3.212.0/22 maxlen: 22
46.3.208.0/22 maxlen: 22
149.126.213.0/24 maxlen: 24
46.3.232.0/22 maxlen: 22
46.3.239.0/24 maxlen: 24
46.3.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:58:85:33:52:78:83:da:e5:a5:01:7d:f6:03:97:bb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 15 07:47:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a2b0c9b19a6b7ebd9ac6966cbcbdeb1d1164322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:4d:a3:64:17:57:ca:c8:d8:03:2c:4e:48:
1f:c6:4b:c2:fa:3a:31:c0:72:49:90:4c:2f:45:63:
e3:15:9f:9f:3e:30:e2:e8:df:d1:84:79:47:6e:b0:
a2:14:0e:c9:d4:ed:dc:97:aa:87:9f:9e:16:79:8e:
7b:68:ee:98:ac:cf:d9:e2:9e:dd:6b:6d:71:ba:bf:
1f:c0:22:de:a8:a5:90:2c:2c:6d:00:88:62:29:d0:
18:84:b7:98:03:92:f1:d4:4f:c6:8d:8b:5b:df:1b:
4e:26:c5:1b:c5:fa:d8:ed:f2:b5:11:29:12:d2:80:
c9:b5:ee:77:97:1a:3a:ca:7a:c4:10:39:2c:a0:e4:
8a:3d:ad:ea:7e:59:3b:7d:65:98:fa:9f:61:2f:fc:
b1:20:ed:fb:2d:8c:ee:5c:1f:ea:19:b2:32:27:52:
14:8d:61:04:6b:8e:70:11:21:bb:72:be:84:b9:00:
7d:49:61:5a:04:08:99:3d:ea:01:a0:47:8b:b9:1e:
0c:15:12:9c:13:74:f9:2c:6b:9f:e0:f7:7d:bc:3e:
45:7e:59:16:b9:a5:3e:b4:47:33:a2:c9:f0:f0:41:
15:e2:38:91:8e:c0:76:c2:61:74:eb:31:90:ef:60:
a8:0c:81:41:03:d6:18:d8:59:08:0e:02:73:b9:fa:
5a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2B:0C:9B:19:A6:B7:EB:D9:AC:69:66:CB:CB:DE:B1:D1:16:43:22
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/WisMmxmmt-vZrGlmy8vesdEWQyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/16
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
97:98:2c:b8:ec:34:40:7c:98:88:b6:13:8f:69:e0:c4:f6:ca:
71:de:f0:d4:29:f9:de:fd:3b:3e:ac:b7:56:7b:d8:83:8e:bf:
59:b9:23:7a:15:ad:1f:77:e6:64:92:43:21:56:fe:89:c8:2f:
03:22:ec:63:41:a8:b2:2d:d7:fd:a3:63:3f:ae:47:b3:6e:88:
a6:ee:a3:c2:15:fe:fb:e9:51:06:6e:75:d1:87:3d:74:23:46:
ed:d3:c7:f8:af:07:0f:dd:9c:d6:47:02:87:81:25:24:51:39:
f2:d0:13:f7:28:a5:60:6a:fa:69:31:ba:e1:ae:b1:eb:d4:18:
a6:3e:22:40:68:a9:3c:93:67:44:97:0a:57:86:ab:46:32:e6:
16:14:ed:06:05:b1:41:83:e7:21:a1:18:e3:08:c8:bf:91:db:
52:89:57:23:5e:6f:1a:f2:ac:27:8b:22:1c:14:c8:bb:1d:69:
1c:77:e2:62:a9:23:a7:c1:ec:f9:e3:d2:e5:81:bb:bb:ce:c8:
6d:de:3a:2c:5a:50:ee:b4:6c:31:5e:5e:a4:b0:89:c3:b1:f6:
5b:30:b1:04:d2:66:46:38:30:9c:bd:13:a2:63:b6:e5:6e:41:
4f:a8:3c:68:f4:ec:80:39:1f:cc:d8:65:f4:92:93:b1:8a:54:
aa:55:cb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:01 2025 by rpki-client