Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/_WEGbqaAiOfcwPhBTykHthH1fgY.roa
File: _WEGbqaAiOfcwPhBTykHthH1fgY.roa (raw, json)
Hash identifier: s5V2go4RqP6kkoYC4vsO+1OqIbBX4aXaTH1MlEtK2TQ=
Subject key identifier: FD:61:06:6E:A6:80:88:E7:DC:C0:F8:41:4F:29:07:B6:11:F5:7E:06
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01894AF843D67750E07E3200D3700E326587
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/_WEGbqaAiOfcwPhBTykHthH1fgY.roa
Signing time: Wed 12 Jul 2023 16:38:51 +0000
ROA not before: Wed 12 Jul 2023 16:38:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 46.232.64.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.70.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.67.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.71.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.72.0/24 maxlen: 24
46.232.72.0/21 maxlen: 24
46.232.96.0/20 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.246.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.184.0/24 maxlen: 24
46.3.186.0/24 maxlen: 24
46.3.185.0/24 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.187.0/24 maxlen: 24
46.3.189.0/24 maxlen: 24
46.3.191.0/24 maxlen: 24
46.232.112.0/20 maxlen: 22
46.3.101.0/24 maxlen: 24
46.3.116.0/22 maxlen: 24
46.3.120.0/21 maxlen: 21
46.3.134.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
46.3.202.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
46.3.208.0/21 maxlen: 21
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
46.3.243.0/24 maxlen: 24
46.3.245.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:f8:43:d6:77:50:e0:7e:32:00:d3:70:0e:32:65:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 12 16:38:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd61066ea68088e7dcc0f8414f2907b611f57e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3b:4d:dd:00:d5:14:3c:7d:f9:d3:48:2e:14:
c2:7c:97:cc:ae:79:9c:8c:40:3b:a6:92:67:05:c5:
8e:4c:11:6e:84:03:12:24:21:eb:6c:7f:dc:f7:b6:
87:d1:4e:e4:24:17:5e:31:da:d6:77:f3:f4:40:7a:
0d:b3:4b:57:7a:b7:8a:da:a1:af:40:59:56:ec:8c:
75:0d:d1:d9:7f:de:96:61:78:c3:e6:4c:f5:a1:c8:
17:21:ef:b9:cd:12:71:3b:2d:09:ec:74:78:4c:98:
9e:fd:f1:06:49:77:cb:9f:5c:4c:a9:34:3b:b6:13:
e4:b5:19:be:63:ad:c9:d1:8e:a6:b1:0f:e1:82:62:
de:0f:38:39:39:f7:c9:f8:84:67:cc:f9:34:bf:f9:
7e:fb:e0:cf:79:b1:23:93:d7:9e:77:b5:9d:4a:c9:
b7:ec:ed:52:e0:19:9f:f2:2e:a0:10:9c:d6:37:3f:
86:c1:e3:76:44:75:7c:f8:90:5a:35:d6:36:50:53:
56:33:8e:9c:ea:53:c3:d4:09:00:bd:dd:7e:63:c0:
d5:12:1c:89:46:16:3d:2c:63:d8:4b:88:5d:cf:f5:
8c:46:dc:0c:80:11:3d:80:77:e8:97:f6:8b:fb:03:
b8:31:db:81:e3:9e:42:a4:c8:5d:80:c5:06:18:d7:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:61:06:6E:A6:80:88:E7:DC:C0:F8:41:4F:29:07:B6:11:F5:7E:06
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/_WEGbqaAiOfcwPhBTykHthH1fgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.88.0/22
46.3.101.0/24
46.3.116.0-46.3.127.255
46.3.134.0/24
46.3.160.0/22
46.3.184.0/21
46.3.200.0-46.3.202.255
46.3.208.0/21
46.3.220.0/23
46.3.230.0/23
46.3.243.0/24
46.3.245.0-46.3.246.255
46.3.248.0/21
46.232.64.0/20
46.232.96.0/19
149.126.226.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.244.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c6:6e:5c:7b:38:96:8d:26:3b:4a:a6:f4:97:b2:d5:59:ee:
b6:9f:f6:6a:a0:c9:18:75:ce:2d:d0:39:f6:23:9a:3d:b8:77:
12:be:53:a3:84:9d:81:76:3d:cd:f0:29:21:43:64:fa:65:0a:
b8:1f:86:af:36:dd:45:11:fc:91:69:88:03:2c:4b:4b:07:66:
a2:39:0f:a0:ae:56:18:20:6e:8f:f2:57:ba:7f:dc:9c:5e:b5:
eb:ec:cc:c9:53:d5:05:ef:14:db:e2:33:7b:d8:d6:44:33:d8:
be:50:c1:61:9c:3d:a1:67:4f:41:b6:db:ea:46:bb:3a:b6:7c:
5d:92:30:94:a6:78:b1:2c:70:db:04:31:29:88:f4:07:d7:56:
f5:ce:77:76:db:cf:0e:90:94:46:39:46:f9:42:1f:2e:f1:80:
ca:65:c6:66:b2:18:6c:a8:b1:e8:56:08:1c:69:36:51:fa:58:
5b:fb:cb:63:68:40:3d:71:29:28:dd:a5:82:e8:e0:99:bb:0e:
75:f7:d5:99:97:13:3f:33:7e:bf:20:4f:fb:5c:60:0f:ee:5d:
c1:92:ca:2f:93:05:5d:c7:34:f5:6c:b9:f5:73:c7:dd:92:b6:
99:74:3f:bf:e6:0e:86:3b:fc:cf:e9:dc:de:1d:dc:18:ff:d6:
52:3f:0e:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:53 2025 by rpki-client