Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/iXgCN72CYTTKYksHJ9_dGkGlDNU.roa
File: iXgCN72CYTTKYksHJ9_dGkGlDNU.roa (raw, json)
Hash identifier: hht3jOt7CPd3F1Za74RZe5IB9un0h/pvixUuzwth/Us=
Subject key identifier: 89:78:02:37:BD:82:61:34:CA:62:4B:07:27:DF:DD:1A:41:A5:0C:D5
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018A8FEF77DF1BD73FF3CAA2D832F7B023D7
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/iXgCN72CYTTKYksHJ9_dGkGlDNU.roa
Signing time: Wed 13 Sep 2023 19:05:50 +0000
ROA not before: Wed 13 Sep 2023 19:05:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 46.3.176.0/21 maxlen: 24
46.3.185.0/24 maxlen: 24
46.3.186.0/24 maxlen: 24
46.3.184.0/24 maxlen: 24
46.3.189.0/24 maxlen: 24
46.3.187.0/24 maxlen: 24
46.3.202.0/24 maxlen: 24
46.3.101.0/24 maxlen: 24
149.126.232.0/21 maxlen: 21
46.3.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8f:ef:77:df:1b:d7:3f:f3:ca:a2:d8:32:f7:b0:23:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Sep 13 19:05:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89780237bd826134ca624b0727dfdd1a41a50cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:2a:b3:5c:bc:03:5f:57:8d:86:38:40:12:
61:ec:2f:4d:11:e9:1f:27:ea:17:bb:49:db:a4:db:
86:28:fb:97:45:c1:77:93:c6:74:32:49:6b:f4:28:
40:fc:c1:76:ca:50:13:22:c1:dc:a0:da:ca:dc:43:
77:c2:06:44:87:45:a6:30:20:ee:c8:31:50:65:a3:
4b:22:98:69:dc:b6:5a:49:7a:1a:ff:cd:a1:81:1c:
b9:f6:f5:9a:d7:99:9e:82:cf:1a:62:72:04:50:80:
e2:01:1f:32:6a:97:d5:fd:0f:6d:e9:b2:68:6e:2b:
de:3b:cf:39:7a:bb:21:90:21:c3:37:3b:74:60:3a:
36:10:67:20:f5:dd:e1:e1:20:8c:63:0a:0c:58:41:
27:67:8d:3e:60:5b:ca:bc:25:3c:51:4a:6b:af:f4:
1f:3d:62:f4:fc:ce:9d:2d:e2:2a:d5:a3:ee:03:16:
8c:a2:6f:62:0c:38:c7:12:e1:2d:63:3c:5a:91:aa:
81:a6:7a:b8:59:45:43:79:59:69:9e:a7:d2:86:ec:
30:a3:b2:3d:b1:9f:e4:48:18:eb:f8:07:56:11:0b:
cd:08:b9:e2:9d:fc:69:69:a8:52:ef:fb:07:3b:4a:
96:77:6b:5f:00:d6:72:48:ae:0a:39:84:27:5c:84:
3b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:78:02:37:BD:82:61:34:CA:62:4B:07:27:DF:DD:1A:41:A5:0C:D5
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/iXgCN72CYTTKYksHJ9_dGkGlDNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.101.0/24
46.3.176.0-46.3.187.255
46.3.189.0/24
46.3.202.0/24
46.3.243.0/24
149.126.232.0/21
Signature Algorithm: sha256WithRSAEncryption
74:53:f0:aa:23:df:f7:4b:14:e5:33:85:50:df:03:f3:69:80:
5b:75:17:85:10:85:3c:e6:d2:21:22:91:14:84:67:be:74:13:
5f:2d:4d:ef:4e:28:12:1c:dc:8a:b8:91:86:2b:9a:ca:b2:af:
f6:6c:67:0c:13:41:f1:0b:43:fc:e5:2f:91:bc:7e:dc:95:d9:
e6:28:73:a0:f5:b7:36:d7:6e:91:51:a4:f9:4a:71:ea:8f:c1:
fa:c7:86:f3:81:69:97:7d:5c:91:97:03:49:d0:00:4c:7d:00:
0f:ca:25:04:47:47:55:8f:c6:08:68:a5:54:95:02:38:7d:7d:
de:4c:c9:4b:82:c1:e5:94:f1:5e:13:e6:7b:73:78:21:74:6b:
9d:42:e1:ab:db:df:bd:5d:44:f0:2c:83:a1:9f:61:f0:2b:20:
06:dd:70:e1:1d:66:15:49:bf:d0:f5:d8:e3:70:d1:cf:a6:aa:
c4:07:bf:f6:49:a6:f8:9b:83:d2:73:cb:f4:3c:34:da:99:d7:
98:e4:ea:77:58:da:9f:d4:9c:84:dd:ae:47:39:1d:b0:48:44:
b5:c9:fd:20:58:39:71:ab:7c:db:4a:d9:90:62:6b:c3:ce:d6:
3c:9b:47:fb:53:a3:06:99:83:d8:2a:97:a0:21:ca:80:49:d9:
91:9a:37:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:57 2025 by rpki-client