Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/4R5YV-VftdP0ewtmYz54TRI930M.roa
File: 4R5YV-VftdP0ewtmYz54TRI930M.roa (raw, json)
Hash identifier: IR9KpJW5WKbbIX90C+Z8smeZamSGiV0JYtsXcfwuvBI=
Subject key identifier: E1:1E:58:57:E5:5F:B5:D3:F4:7B:0B:66:63:3E:78:4D:12:3D:DF:43
Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial: 018A553E0D55B764D96C069B6E202025D290
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/4R5YV-VftdP0ewtmYz54TRI930M.roa
Signing time: Sat 02 Sep 2023 09:34:04 +0000
ROA not before: Sat 02 Sep 2023 09:34:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60822
IP address blocks: 46.23.205.0/24 maxlen: 24
46.23.204.0/22 maxlen: 22
46.23.204.0/24 maxlen: 24
46.23.206.0/24 maxlen: 24
46.23.200.0/22 maxlen: 22
46.23.207.0/24 maxlen: 24
195.137.144.0/22 maxlen: 22
195.137.140.0/22 maxlen: 22
195.137.150.0/24 maxlen: 24
195.137.152.0/24 maxlen: 24
195.137.151.0/24 maxlen: 24
195.137.149.0/24 maxlen: 24
195.137.148.0/24 maxlen: 24
195.137.154.0/24 maxlen: 24
195.137.153.0/24 maxlen: 24
195.137.155.0/24 maxlen: 24
46.23.192.0/21 maxlen: 21
185.85.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:55:3e:0d:55:b7:64:d9:6c:06:9b:6e:20:20:25:d2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Validity
Not Before: Sep 2 09:34:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e11e5857e55fb5d3f47b0b66633e784d123ddf43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:39:8b:8d:cb:19:70:35:fb:07:4b:87:b8:ac:
39:2d:14:f4:48:a7:2a:49:49:5d:5c:50:c8:dc:c4:
b8:f8:74:95:1f:39:85:24:b7:35:a6:8e:53:0f:70:
43:e0:c1:5f:22:51:b6:a4:74:27:5e:42:76:53:41:
91:db:d1:e0:6c:eb:e0:1e:d5:52:b0:63:bf:42:19:
a9:47:ca:04:da:5c:0e:cb:24:57:d9:df:8c:a9:2d:
2b:fc:30:ea:e3:6f:45:fc:b0:8d:1e:3f:3c:de:69:
b0:2c:07:b6:27:f6:9f:94:3a:c9:5b:79:9b:3d:a3:
48:0b:72:b6:b6:2f:f3:8f:c8:ea:9a:c5:18:b2:89:
1a:f9:d2:b9:7e:1b:2b:e2:50:c0:d4:6a:d6:ce:88:
8c:50:3c:c5:d4:da:7f:58:3d:ff:a7:eb:1d:f9:16:
23:22:25:d3:42:36:10:c8:fd:3a:b3:1b:f5:96:ba:
e3:fa:13:52:84:f2:d2:45:d6:0c:bb:b4:8c:25:0b:
0e:17:4e:de:6b:25:e9:5c:2f:5a:5d:0a:66:7d:12:
cb:4e:bb:e1:03:f6:4f:ec:a0:37:75:f3:62:07:35:
a7:03:48:83:53:9b:d0:4b:5e:d1:62:34:c5:28:3b:
a1:1d:c0:6a:5b:7a:fe:32:62:4d:02:30:81:4a:b3:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1E:58:57:E5:5F:B5:D3:F4:7B:0B:66:63:3E:78:4D:12:3D:DF:43
X509v3 Authority Key Identifier:
keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/4R5YV-VftdP0ewtmYz54TRI930M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.192.0/20
185.85.212.0/22
195.137.140.0-195.137.155.255
Signature Algorithm: sha256WithRSAEncryption
32:ae:24:08:86:77:af:56:5d:72:48:75:6f:ef:f6:dc:96:3e:
0b:c2:c5:6e:8d:2f:38:f4:a2:08:87:c4:62:07:b8:5b:cd:3f:
83:e0:aa:8c:ae:cb:ec:9c:a8:0c:02:a8:4f:64:2e:9e:b9:54:
08:2d:5a:51:69:57:c3:3f:92:a9:fd:3c:c8:09:5d:92:44:36:
9f:cf:d5:da:4c:97:89:c9:c4:fa:c6:88:d5:c2:ee:3b:c0:d2:
04:00:f5:5d:6e:1f:63:db:2b:ec:3e:c1:fc:30:8f:c8:b3:63:
62:b7:96:21:92:26:9d:de:d7:cb:d9:c2:a7:04:6a:95:cb:12:
d9:b9:94:d8:a3:94:d2:5a:03:f4:d0:a3:f5:5c:fd:d3:f2:39:
10:c2:6d:88:2e:48:1c:1d:4e:b4:ec:17:63:51:bf:27:0f:51:
22:1c:02:4d:09:19:0c:1f:a3:f3:c2:d1:61:6f:2f:53:bb:fd:
67:78:16:94:5e:8c:6c:b4:c5:06:66:bc:9b:7b:be:8c:22:52:
bc:f3:9d:05:02:de:c3:a1:fe:1b:a0:31:38:60:44:46:71:f2:
90:16:5f:79:77:37:d9:e8:e4:c8:ca:56:7f:27:bc:4e:e1:19:
b2:1a:3b:dc:4e:e5:7a:93:08:6b:00:2e:e3:15:e5:be:52:47:
71:39:bd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:10 2025 by rpki-client