Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/wxua01sPnkSM6mE6A9R5U5rcCpA.roa
File: wxua01sPnkSM6mE6A9R5U5rcCpA.roa (raw, json)
Hash identifier: hC86gxI8f3DoFp620rdTq8z+zzi5hPjlEV5nJSl6984=
Subject key identifier: C3:1B:9A:D3:5B:0F:9E:44:8C:EA:61:3A:03:D4:79:53:9A:DC:0A:90
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01855DACC78B401320B4FB6DB9543424AAA2
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/wxua01sPnkSM6mE6A9R5U5rcCpA.roa
Signing time: Thu 29 Dec 2022 11:38:02 +0000
ROA not before: Thu 29 Dec 2022 11:38:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 46.232.64.0/21 maxlen: 24
46.3.64.0/22 maxlen: 24
46.232.80.0/20 maxlen: 24
46.3.68.0/22 maxlen: 24
46.3.4.0/22 maxlen: 24
46.3.0.0/16 maxlen: 24
46.232.24.0/21 maxlen: 24
46.3.16.0/22 maxlen: 24
46.232.32.0/20 maxlen: 24
46.3.24.0/22 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.92.0/22 maxlen: 24
46.3.135.0/24 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
149.126.203.0/24 maxlen: 24
149.126.200.0/24 maxlen: 24
46.3.224.0/22 maxlen: 24
149.126.215.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:ac:c7:8b:40:13:20:b4:fb:6d:b9:54:34:24:aa:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Dec 29 11:38:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c31b9ad35b0f9e448cea613a03d479539adc0a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d5:f5:a0:80:1e:41:87:8e:26:77:0e:5a:70:
48:b1:5b:6f:e5:a9:16:3b:ba:1f:f5:86:de:ca:55:
09:63:5a:70:91:8a:f2:83:38:02:e0:79:20:0a:b7:
a3:c6:1e:12:2b:fe:3f:d2:64:81:79:e7:c8:2b:fa:
16:94:1e:9a:4a:33:c8:cf:8a:e6:86:5b:67:b5:51:
9d:ad:8f:b2:65:74:19:30:cb:c6:f4:0c:24:d0:bc:
a5:8a:d8:7a:d2:a4:71:d0:f3:a6:5d:a9:46:53:4e:
fd:48:fa:c0:d9:de:0c:f3:d6:9a:25:37:47:f0:bd:
bb:8c:7b:47:02:08:05:47:5a:e2:e2:3a:8c:32:df:
75:7a:ce:f9:4b:0c:23:a0:62:41:2d:ae:35:77:39:
27:56:75:9a:01:62:2d:8a:58:33:cb:dd:c6:82:fe:
7c:9a:ca:fe:bb:2d:4e:c2:27:82:33:1d:fb:3e:1e:
03:90:20:d5:96:fb:03:67:bc:4f:7e:08:33:af:de:
09:a8:2a:9b:3c:6e:23:e1:4f:cf:dd:22:30:c6:11:
24:a9:64:56:64:77:d1:ae:5b:ef:89:78:e0:04:19:
34:ae:3e:32:69:c0:13:54:1a:9b:74:7e:12:8f:2b:
7c:38:f0:7b:53:e3:0c:68:fb:a3:52:a2:e6:57:50:
e9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1B:9A:D3:5B:0F:9E:44:8C:EA:61:3A:03:D4:79:53:9A:DC:0A:90
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/wxua01sPnkSM6mE6A9R5U5rcCpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/16
46.232.24.0-46.232.47.255
46.232.64.0/21
46.232.80.0/20
149.126.200.0/24
149.126.203.0/24
149.126.215.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
36:38:cd:55:cd:57:71:c6:75:f4:d9:2f:a2:23:68:4a:1a:b2:
e3:2c:b3:09:35:bd:14:13:94:a7:fe:94:0f:73:c7:8b:29:8b:
53:6c:df:6e:87:80:72:8e:91:8a:92:7a:25:e5:b2:0e:90:b3:
35:b0:90:36:d6:af:48:40:6f:8b:1e:57:15:63:f7:6f:6d:cb:
2e:29:5e:77:47:36:9e:96:d4:5b:a8:60:85:ed:7e:a9:6f:50:
db:fb:04:13:cb:c6:bc:a9:6a:48:29:01:5b:5d:7d:0b:c4:39:
aa:f8:e4:a5:63:d7:e6:92:42:d4:60:c4:8e:ec:e3:58:6b:3e:
f4:68:bd:de:08:cc:2d:93:3e:31:64:1d:a3:02:d7:3d:b5:55:
27:6a:e1:41:c1:3b:5e:c0:e9:f8:28:21:6e:be:92:9d:8f:bd:
17:08:bc:0c:b4:92:dd:68:63:47:d0:a6:97:88:6a:c2:c7:ba:
35:f6:70:6e:8c:e4:8e:b4:cb:f1:c6:47:34:97:39:9d:99:08:
17:c9:14:6c:6b:e9:20:2d:b7:b4:6e:1d:d6:cb:11:c9:6f:2e:
52:b0:f6:32:30:64:b5:66:66:67:37:b1:35:35:57:59:09:27:
d1:0b:8b:e1:5b:7d:e8:61:ba:c2:62:31:a7:48:ad:80:34:91:
e7:d6:36:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:42 2025 by rpki-client