Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/YYLhQpDEJJnEPNuj-3LoZOeHt5k.roa
File: YYLhQpDEJJnEPNuj-3LoZOeHt5k.roa (raw, json)
Hash identifier: r2lOVu+rsBnORM20h9u7ouoK80GGbTSODoDwMcs4kT0=
Subject key identifier: 61:82:E1:42:90:C4:24:99:C4:3C:DB:A3:FB:72:E8:64:E7:87:B7:99
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018946BE1EE266DC7BEDE87025D0097E9210
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/YYLhQpDEJJnEPNuj-3LoZOeHt5k.roa
Signing time: Tue 11 Jul 2023 20:56:51 +0000
ROA not before: Tue 11 Jul 2023 20:56:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 46.232.64.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.71.0/24 maxlen: 24
46.232.67.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.70.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.72.0/21 maxlen: 24
46.232.72.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.185.0/24 maxlen: 24
46.3.186.0/24 maxlen: 24
46.3.184.0/24 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.189.0/24 maxlen: 24
46.3.191.0/24 maxlen: 24
46.3.187.0/24 maxlen: 24
46.3.101.0/24 maxlen: 24
46.3.116.0/22 maxlen: 24
46.3.120.0/21 maxlen: 21
46.3.134.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
46.3.202.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
46.3.246.0/24 maxlen: 24
46.3.245.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:46:be:1e:e2:66:dc:7b:ed:e8:70:25:d0:09:7e:92:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 11 20:56:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6182e14290c42499c43cdba3fb72e864e787b799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bc:d1:a1:f8:78:54:65:6d:b3:60:6c:90:de:
ee:b2:d4:da:01:bf:ba:63:8d:51:79:0f:9d:5d:31:
d0:c6:2d:fb:b1:cb:25:02:04:f8:e8:6e:fe:b6:f7:
9f:c4:95:9a:f1:0d:9d:83:71:d8:c0:ec:8e:36:b9:
aa:e3:7b:a9:a2:e7:ba:64:24:56:f0:dd:f4:4f:92:
45:63:7b:90:cd:38:23:08:8a:eb:3e:0b:be:88:bf:
47:93:b4:13:a9:1f:d9:39:ec:58:37:2e:35:fa:01:
c4:55:52:81:d3:f5:86:19:9b:d0:6e:a6:9f:83:c3:
fe:b0:37:f5:95:50:16:8b:ae:9d:85:b6:6f:1e:70:
b8:de:f8:3f:07:00:85:51:33:36:2e:6a:68:e5:bb:
62:84:ba:3f:5f:14:2d:18:ce:bd:b1:33:51:6d:0d:
0d:84:ff:1d:cb:55:07:66:82:66:50:36:77:60:3b:
a4:bf:18:b8:f6:49:91:52:49:ca:fb:0d:63:55:09:
8f:a1:7c:f2:ac:d6:43:ca:21:28:b2:4b:fb:a8:ef:
42:5c:e8:de:13:16:d9:22:2d:0c:36:9a:ca:4b:27:
2b:b5:d4:b9:ad:76:b4:24:cb:5b:42:8b:d5:f6:9e:
85:cb:e1:e2:9a:01:77:20:38:41:41:1e:30:82:4b:
98:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:82:E1:42:90:C4:24:99:C4:3C:DB:A3:FB:72:E8:64:E7:87:B7:99
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/YYLhQpDEJJnEPNuj-3LoZOeHt5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.88.0/22
46.3.101.0/24
46.3.116.0-46.3.127.255
46.3.134.0/24
46.3.160.0/22
46.3.184.0/21
46.3.200.0-46.3.202.255
46.3.220.0/23
46.3.230.0/23
46.3.245.0-46.3.246.255
46.3.248.0/21
46.232.64.0/20
149.126.226.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.244.0/23
149.126.247.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
88:6e:68:e2:2a:be:58:8f:a9:44:25:e5:86:d5:32:ef:17:67:
5b:1e:92:ee:be:7c:b4:bc:29:d1:7c:a5:ac:72:01:ab:cb:b0:
a6:8a:9e:41:8f:6a:cd:d0:2b:55:f8:36:26:14:81:6d:ec:1b:
de:c4:13:61:c6:4a:9c:3d:c4:4a:68:82:0b:39:65:6f:3e:5b:
34:92:41:ff:48:5d:f7:b1:52:45:49:0f:3d:7b:cb:0c:9e:d9:
6d:50:c3:17:a7:52:f4:b1:16:da:7c:e3:a9:a6:19:47:e8:96:
ab:03:1c:43:e4:ba:6d:65:3b:71:89:59:2a:74:ac:ae:0a:aa:
85:ad:e4:dd:a3:c8:73:04:c4:a1:65:f1:fe:60:42:5e:be:e0:
13:94:1c:cd:59:7f:3e:7c:d3:81:1a:c6:90:85:c9:83:55:69:
3f:af:04:68:30:4b:ad:d9:35:4e:0f:e6:41:3a:b7:d6:e1:26:
0e:d6:99:53:7e:21:3a:87:fc:a1:43:35:3c:83:a9:83:32:7d:
a8:7e:c0:4c:42:1e:43:ff:68:74:05:ec:c0:e0:ef:48:36:40:
0d:3d:8d:23:d6:28:a7:7b:e9:f3:d6:a3:13:fd:c5:50:fe:7a:
35:9f:6c:e5:b0:be:43:68:76:52:b0:64:e2:24:be:cd:88:f2:
36:7a:cf:f0
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISAYlGvh7iZtx77ehwJdAJfpIQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwNzExMjA1NjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTgyZTE0MjkwYzQyNDk5YzQzY2RiYTNmYjcyZTg2NGU3ODdiNzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLzRofh4VGVts2BskN7ustTaAb+6
Y41ReQ+dXTHQxi37scslAgT46G7+tvefxJWa8Q2dg3HYwOyONrmq43upoue6ZCRW
8N30T5JFY3uQzTgjCIrrPgu+iL9Hk7QTqR/ZOexYNy41+gHEVVKB0/WGGZvQbqaf
g8P+sDf1lVAWi66dhbZvHnC43vg/BwCFUTM2Lmpo5btihLo/XxQtGM69sTNRbQ0N
hP8dy1UHZoJmUDZ3YDukvxi49kmRUknK+w1jVQmPoXzyrNZDyiEoskv7qO9CXOje
ExbZIi0MNprKSycrtdS5rXa0JMtbQovV9p6Fy+HimgF3IDhBQR4wgkuYewIDAQAB
o4ICmjCCApYwHQYDVR0OBBYEFGGC4UKQxCSZxDzbo/ty6GTnh7eZMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvWVlMaFFwREVKSm5FUE51ai0zTG9aT2VIdDVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIDBAIu
A1gDBAAuA2UwDAMEAi4DdAMEBy4DAAMEAC4DhgMEAi4DoAMEAy4DuDAMAwQDLgPI
AwQALgPKAwQBLgPcAwQBLgPmMAwDBAAuA/UDBAAuA/YDBAMuA/gDBAQu6EADBACV
fuIDBACVfuQDBACVfucDBACVfvIDBAGVfvQwDAMEAJV+9wMEAJV++gMEAJV+/DAN
BgkqhkiG9w0BAQsFAAOCAQEAiG5o4iq+WI+pRCXlhtUy7xdnWx6S7r58tLwp0Xyl
rHIBq8uwpoqeQY9qzdArVfg2JhSBbewb3sQTYcZKnD3ESmiCCzllbz5bNJJB/0hd
97FSRUkPPXvLDJ7ZbVDDF6dS9LEW2nzjqaYZR+iWqwMcQ+S6bWU7cYlZKnSsrgqq
ha3k3aPIcwTEoWXx/mBCXr7gE5QczVl/PnzTgRrGkIXJg1VpP68EaDBLrdk1Tg/m
QTq31uEmDtaZU34hOof8oUM1PIOpgzJ9qH7ATEIeQ/9odAXswODvSDZADT2NI9Yo
p3vp89ajE/3FUP56NZ9s5bC+Q2h2UrBk4iS+zYjyNnrP8A==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:16 2025 by rpki-client