Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/vzq8wT8Z9u6VsnASJzzLTjGYHIk.roa
File: vzq8wT8Z9u6VsnASJzzLTjGYHIk.roa (raw, json)
Hash identifier: sR6mRRGx+dRPIw5QI1x+3NEJS07lL8F/+J5qJLTJBZM=
Subject key identifier: BF:3A:BC:C1:3F:19:F6:EE:95:B2:70:12:27:3C:CB:4E:31:98:1C:89
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01889663F1C8444B8DDB88D04C417084DD08
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/vzq8wT8Z9u6VsnASJzzLTjGYHIk.roa
Signing time: Wed 07 Jun 2023 15:05:12 +0000
ROA not before: Wed 07 Jun 2023 15:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.135.0/24 maxlen: 24
46.232.64.0/21 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
46.3.80.0/22 maxlen: 22
46.3.204.0/24 maxlen: 24
46.3.208.0/21 maxlen: 21
149.126.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:63:f1:c8:44:4b:8d:db:88:d0:4c:41:70:84:dd:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 7 15:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf3abcc13f19f6ee95b27012273ccb4e31981c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:81:3b:00:67:50:d5:be:98:00:70:f8:d9:
5a:71:bd:0b:7c:51:78:04:08:d9:3c:be:b7:31:2d:
44:49:05:3d:2f:83:30:e2:8a:2b:9e:88:ec:e8:ce:
52:d3:0c:6c:dc:a7:02:68:f9:ef:d9:43:a6:cd:a6:
67:7d:b0:e7:52:b1:2c:7e:35:c3:22:8f:c5:e8:0d:
8d:08:79:c3:99:d0:b0:d1:a4:80:89:04:97:4b:ff:
4b:37:35:a2:6f:6c:96:8e:f6:0a:be:ed:28:d7:7a:
eb:48:5d:9b:2e:69:b5:80:8f:03:8e:1d:95:6e:11:
47:46:dc:db:f6:ef:a7:7c:e8:40:57:1f:43:c1:c6:
bf:19:1b:50:8c:57:15:0c:22:7f:a7:5d:ee:3a:8b:
4e:b2:a7:06:7f:c9:c2:7f:9f:c5:66:5e:71:3c:9f:
9b:32:cc:1e:ff:17:1a:97:d1:c0:d8:63:d0:63:8f:
d7:92:54:96:c8:af:d2:d6:49:3f:25:93:53:2d:35:
76:fe:a9:d3:69:8f:92:f3:31:65:94:41:39:a8:7f:
40:c9:01:bb:86:52:85:56:a0:31:7a:69:7e:74:b2:
e9:4c:ab:f8:70:8a:1e:78:f9:82:6b:91:60:5a:e1:
bb:0d:92:34:5a:cc:95:7b:b1:be:90:77:6f:ed:a4:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3A:BC:C1:3F:19:F6:EE:95:B2:70:12:27:3C:CB:4E:31:98:1C:89
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/vzq8wT8Z9u6VsnASJzzLTjGYHIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.80.0/22
46.3.135.0/24
46.3.156.0/23
46.3.188.0/22
46.3.204.0/24
46.3.208.0/21
46.232.64.0/21
149.126.203.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
25:33:e5:50:51:1b:a0:6c:78:83:d5:20:df:8d:4f:32:5c:19:
0f:a2:bc:ec:fd:96:5a:e5:f2:df:f4:f1:40:4a:84:65:0c:42:
a3:3a:52:40:5b:f4:f9:6a:d1:15:18:e5:eb:04:51:20:e4:59:
6c:52:3d:39:a2:ef:c1:e9:0d:cc:b5:ef:94:19:b2:e8:5c:6a:
a5:55:da:6b:4e:d2:2f:65:e9:cd:c4:ca:e8:5a:36:48:aa:ef:
9a:07:f5:3c:8f:ac:f9:88:50:47:26:90:0d:9c:86:e8:44:3b:
71:77:3b:6e:8f:5e:1c:2a:72:2a:fd:04:3a:b9:13:f7:8b:db:
bd:a8:cc:46:47:99:02:0f:53:53:82:3f:35:0b:59:36:fc:1f:
06:7b:bf:62:07:ce:c9:1d:0f:f9:14:1e:98:b7:0a:bc:52:89:
38:83:c7:27:ae:de:d3:f7:6b:28:d3:77:21:ab:f1:76:17:36:
17:d2:1d:bc:7e:32:68:fb:ce:4c:e0:6e:bf:59:a4:e8:35:12:
dd:37:f8:2b:ad:15:26:69:c8:59:ec:b5:40:fd:6a:74:80:16:
f2:b3:f3:06:ed:68:e1:b2:d0:2e:e1:22:bf:60:fe:d6:01:f1:
32:25:a8:20:65:58:98:74:08:bc:f8:83:5b:28:3d:38:99:66:
66:c3:e7:af
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgISAYiWY/HIREuN24jQTEFwhN0IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwNjA3MTUwNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjNhYmNjMTNmMTlmNmVlOTViMjcwMTIyNzNjY2I0ZTMxOTgxYzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJCBOwBnUNW+mABw+Nlacb0LfFF4
BAjZPL63MS1ESQU9L4Mw4oornojs6M5S0wxs3KcCaPnv2UOmzaZnfbDnUrEsfjXD
Io/F6A2NCHnDmdCw0aSAiQSXS/9LNzWib2yWjvYKvu0o13rrSF2bLmm1gI8Djh2V
bhFHRtzb9u+nfOhAVx9Dwca/GRtQjFcVDCJ/p13uOotOsqcGf8nCf5/FZl5xPJ+b
Mswe/xcal9HA2GPQY4/XklSWyK/S1kk/JZNTLTV2/qnTaY+S8zFllEE5qH9AyQG7
hlKFVqAxeml+dLLpTKv4cIoeePmCa5FgWuG7DZI0WsyVe7G+kHdv7aSELQIDAQAB
o4ICRjCCAkIwHQYDVR0OBBYEFL86vME/GfbulbJwEic8y04xmByJMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvdnpxOHdUOFo5dTZWc25BU0p6ekxUakdZSElrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzBJBAIAATBDAwQCLgNQAwQA
LgOHAwQBLgOcAwQCLgO8AwQALgPMAwQDLgPQAwQDLuhAAwQAlX7LAwQAlX77MAsD
BACVfv0DAwCVfjANBgkqhkiG9w0BAQsFAAOCAQEAJTPlUFEboGx4g9Ug341PMlwZ
D6K87P2WWuXy3/TxQEqEZQxCozpSQFv0+WrRFRjl6wRRIORZbFI9OaLvwekNzLXv
lBmy6FxqpVXaa07SL2XpzcTK6Fo2SKrvmgf1PI+s+YhQRyaQDZyG6EQ7cXc7bo9e
HCpyKv0EOrkT94vbvajMRkeZAg9TU4I/NQtZNvwfBnu/YgfOyR0P+RQemLcKvFKJ
OIPHJ67e0/drKNN3Iavxdhc2F9IdvH4yaPvOTOBuv1mk6DUS3Tf4K60VJmnIWey1
QP1qdIAW8rPzBu1o4bLQLuEiv2D+1gHxMiWoIGVYmHQIvPiDWyg9OJlmZsPnrw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:52 2025 by rpki-client