Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/npUIwqmddTr_yv8OGmALSmh8bwE.roa
File: npUIwqmddTr_yv8OGmALSmh8bwE.roa (raw, json)
Hash identifier: khnuS25XCsRn0mEx+Bqilc/gvB7fsue2SNq5LNKAWGI=
Subject key identifier: 9E:95:08:C2:A9:9D:75:3A:FF:CA:FF:0E:1A:60:0B:4A:68:7C:6F:01
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0186972367129950CDF0B99C26C12E8B89D6
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/npUIwqmddTr_yv8OGmALSmh8bwE.roa
Signing time: Tue 28 Feb 2023 08:28:45 +0000
ROA not before: Tue 28 Feb 2023 08:28:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 46.3.134.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.246.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:23:67:12:99:50:cd:f0:b9:9c:26:c1:2e:8b:89:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Feb 28 08:28:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e9508c2a99d753affcaff0e1a600b4a687c6f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7e:cf:7f:92:d6:fb:e3:cd:a0:f2:d1:7b:b8:
8f:9c:9a:e1:d6:e9:df:49:8d:68:87:c1:87:9c:04:
3a:8c:78:3b:d6:a1:8b:1b:6d:2f:72:31:d0:a1:23:
9d:d0:ce:ea:db:e4:21:d1:a6:37:21:73:89:7b:3a:
83:31:6e:f8:61:50:86:a6:e7:6a:b5:f2:7e:dc:81:
8d:94:29:6b:28:07:f8:18:91:a0:18:9d:a3:b8:5b:
94:86:d8:4f:29:5f:18:29:d7:00:22:a8:18:67:c8:
0b:5a:b8:6d:42:62:45:55:e4:08:42:58:2f:5e:54:
01:43:3f:29:9f:c2:94:32:23:ad:05:6a:e5:be:ed:
87:5b:60:ce:58:34:2e:15:d9:ca:a3:0b:87:f2:32:
e5:c9:03:85:1e:c1:b6:dd:ef:7a:5a:35:2f:90:26:
14:49:2c:44:f2:9f:41:9b:77:6c:cc:91:a7:61:96:
4e:d4:b7:80:c3:20:f3:13:8f:38:b5:c9:58:fe:27:
30:42:db:45:25:1b:62:9e:99:7e:23:26:0c:1c:27:
56:54:b5:41:1f:31:1d:3d:a3:b5:e1:4d:2c:93:76:
c3:b9:3d:58:d6:49:04:9c:d8:ac:9b:f0:9a:60:d6:
af:e4:3a:cc:02:8c:0e:db:56:2e:d2:32:e3:de:f3:
6f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:95:08:C2:A9:9D:75:3A:FF:CA:FF:0E:1A:60:0B:4A:68:7C:6F:01
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/npUIwqmddTr_yv8OGmALSmh8bwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.134.0/24
46.3.201.0/24
46.3.248.0/23
46.3.251.0/24
46.3.253.0-46.3.255.255
149.126.226.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.244.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
49:7d:a3:e4:ce:79:ba:ab:b3:3b:7b:74:c6:09:d5:e4:09:51:
a7:60:53:50:c7:2c:e1:cd:2a:22:88:f3:81:9e:eb:ca:27:e7:
58:d4:81:67:2d:df:1e:f0:48:99:7c:7d:1f:10:c4:00:d7:26:
f7:ef:b0:d8:30:ea:6b:00:dd:2c:44:b5:c4:63:ca:4e:13:ff:
36:4b:4f:67:8b:e9:81:32:80:be:05:d3:f9:bc:ed:f1:db:3f:
dd:71:93:93:74:07:b5:c6:d4:03:9e:65:9c:97:0b:7a:df:1d:
ce:37:d9:cc:d8:7f:5a:30:e7:ea:8d:ff:9e:65:78:aa:34:10:
92:e7:51:94:01:43:04:32:3a:d8:b0:a5:5a:a7:91:1a:e5:72:
38:1c:1e:fa:b0:f4:7e:18:92:77:a5:81:c3:f6:d4:82:98:dd:
86:18:d1:27:35:53:54:8b:7b:b3:9c:e2:42:19:cb:83:74:0c:
d1:61:b4:08:40:8e:eb:f7:5f:6d:ee:11:19:99:34:97:48:8f:
1b:a4:fb:7d:dc:b1:ec:26:7e:6f:46:13:0d:1d:57:21:2e:ce:
5a:b6:98:f3:17:74:7a:76:b6:c2:9b:95:35:43:db:e5:64:a3:
19:9d:1d:7c:5b:d8:bc:d5:cd:79:57:8d:40:f4:02:e9:da:49:
35:68:eb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:43 2025 by rpki-client