Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/kS1uBydYMfSRtl9TDTgqAh9uP2M.roa
File: kS1uBydYMfSRtl9TDTgqAh9uP2M.roa (raw, json)
Hash identifier: A0sBLjOlS9tjGPfEPl708qntyvjJWy7I15cx+yLkRvA=
Subject key identifier: 91:2D:6E:07:27:58:31:F4:91:B6:5F:53:0D:38:2A:02:1F:6E:3F:63
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01881EF5DE946B31FE7D6E10EF449CA41022
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/kS1uBydYMfSRtl9TDTgqAh9uP2M.roa
Signing time: Mon 15 May 2023 10:30:09 +0000
ROA not before: Mon 15 May 2023 10:30:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59729
IP address blocks: 46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
149.126.192.0/24 maxlen: 24
46.3.204.0/24 maxlen: 24
149.126.197.0/24 maxlen: 24
149.126.203.0/24 maxlen: 24
46.3.224.0/24 maxlen: 24
46.3.225.0/24 maxlen: 24
46.3.226.0/24 maxlen: 24
46.3.227.0/24 maxlen: 24
46.3.238.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:f5:de:94:6b:31:fe:7d:6e:10:ef:44:9c:a4:10:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: May 15 10:30:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=912d6e07275831f491b65f530d382a021f6e3f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b8:62:69:95:9a:02:2a:39:55:ce:e6:7e:3f:
b7:75:56:61:25:38:bd:38:2d:c9:5c:7c:ac:6a:26:
e0:f8:40:2e:2b:b1:06:97:66:f4:57:e8:8b:01:eb:
a8:a8:9a:c7:56:ab:5d:26:7f:81:5e:a7:11:df:21:
05:02:78:cc:57:71:df:a3:11:1b:6e:8d:45:f8:ea:
13:42:4d:f1:82:b3:45:72:00:eb:c7:82:41:5f:30:
cf:c8:d2:d6:60:d8:f6:9c:b9:5b:ad:c1:9c:22:83:
ac:f7:53:cf:6f:75:ca:96:54:16:58:07:28:a1:e0:
c7:fa:0c:aa:1e:63:64:7e:d4:e1:b4:5a:47:4a:8a:
55:f7:25:77:a4:a3:e8:4f:ce:cd:30:f0:05:d9:39:
a4:39:02:e1:2e:cc:be:c9:38:22:a5:3e:bb:6f:60:
62:b2:e9:8a:50:8d:89:a1:30:17:65:a0:c0:97:b3:
00:c6:a4:e4:57:a7:fc:a1:7a:7f:34:75:73:84:c7:
01:bb:ae:43:53:7a:de:0d:4e:3e:4e:85:66:fb:2a:
c2:f9:a7:b3:5c:ac:76:1a:75:7f:e1:3f:b2:69:44:
66:19:1f:04:61:71:0f:a3:26:4d:fe:22:6a:22:ce:
2f:38:a6:ce:2b:6a:f8:29:a9:a7:ef:23:f3:0c:14:
a9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2D:6E:07:27:58:31:F4:91:B6:5F:53:0D:38:2A:02:1F:6E:3F:63
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/kS1uBydYMfSRtl9TDTgqAh9uP2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.152.0/22
46.3.204.0/24
46.3.224.0/22
46.3.238.0/23
149.126.192.0/24
149.126.197.0/24
149.126.203.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b4:59:35:58:1f:d7:80:7e:cb:0b:57:2b:b7:c4:06:6d:5e:
3d:64:af:4c:52:c4:bd:43:f0:0e:74:fc:48:bc:d5:c5:48:92:
e0:82:ce:6b:83:12:40:d5:2c:00:36:29:19:91:9d:53:d8:3d:
50:74:15:20:52:17:b5:22:d1:3e:55:9a:03:81:61:2a:b3:a6:
c9:4d:ed:59:f9:2d:ee:37:cc:60:9a:8a:0b:a8:ca:e7:22:a9:
85:22:09:03:96:7e:27:8a:2c:ee:1c:8b:8e:4b:b3:79:aa:37:
16:2b:a9:23:2f:4c:74:4d:ea:16:ff:48:1c:da:3e:d6:f8:81:
8e:07:5c:89:b8:10:63:02:65:11:12:75:1f:79:34:ab:d8:70:
13:e8:a2:02:f2:dd:fa:2a:49:2c:47:ea:b5:89:17:54:39:e8:
5e:d7:ea:ab:52:a6:d3:ee:ac:c5:01:26:4a:ae:8a:6a:3c:5d:
2a:eb:17:93:4a:18:9e:7b:e4:9a:79:70:3f:77:eb:28:70:72:
7f:e5:e5:e1:2a:4b:3d:95:4a:c0:1b:3b:fc:3a:ae:a7:f1:bd:
0d:f9:7b:0a:18:50:f7:07:3f:68:99:8d:62:81:3b:b1:e5:76:
45:6e:71:ff:aa:45:56:cb:a4:2d:99:56:df:ea:73:73:d0:8a:
86:52:5c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:12 2025 by rpki-client