Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/wGIZAxSpSxeI4g9pKSWtpTy93tY.roa
File: wGIZAxSpSxeI4g9pKSWtpTy93tY.roa (raw, json)
Hash identifier: apTC9Qz/gx62R7xpK+O5XKBHlwuYU36aYx6TcR1ISEw=
Subject key identifier: C0:62:19:03:14:A9:4B:17:88:E2:0F:69:29:25:AD:A5:3C:BD:DE:D6
Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial: 018A4A8CA000E88EA5B87B73282B67835113
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/wGIZAxSpSxeI4g9pKSWtpTy93tY.roa
Signing time: Thu 31 Aug 2023 07:44:04 +0000
ROA not before: Thu 31 Aug 2023 07:44:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60822
IP address blocks: 46.23.204.0/22 maxlen: 22
46.23.200.0/22 maxlen: 22
195.137.144.0/22 maxlen: 22
195.137.140.0/22 maxlen: 22
195.137.150.0/24 maxlen: 24
195.137.152.0/24 maxlen: 24
195.137.151.0/24 maxlen: 24
195.137.149.0/24 maxlen: 24
195.137.148.0/24 maxlen: 24
195.137.154.0/24 maxlen: 24
195.137.153.0/24 maxlen: 24
46.23.192.0/21 maxlen: 21
185.85.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:8c:a0:00:e8:8e:a5:b8:7b:73:28:2b:67:83:51:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Validity
Not Before: Aug 31 07:44:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c062190314a94b1788e20f692925ada53cbdded6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:a0:4e:ac:05:b2:51:2f:a2:c6:fc:31:7f:
1a:b1:57:ec:0a:ff:97:c9:22:83:16:8d:83:79:9b:
91:20:d9:b6:63:e7:74:c6:12:9e:3f:89:bb:25:b3:
82:56:d2:b2:0e:af:95:62:93:4d:87:cb:c9:4e:3d:
4c:9c:24:63:2e:8e:78:3f:7b:26:eb:90:0f:8d:ed:
16:f9:37:80:a7:75:a4:de:72:18:8e:c9:3a:61:6b:
57:f8:e7:18:b1:fd:de:e4:b6:6f:0a:4e:48:ef:c1:
3b:73:31:15:33:86:62:a8:73:99:87:01:e6:67:c8:
62:44:07:a7:f7:20:3a:a4:fb:2f:66:88:a5:3a:31:
ae:8a:01:6d:e8:59:4c:50:bc:82:90:3b:3a:8d:4b:
7b:5d:be:b1:db:b3:35:7a:91:05:e2:db:0b:ce:e0:
cd:07:2b:57:03:de:1b:c2:82:bf:b9:d4:59:6a:b2:
64:62:66:e3:76:6a:5a:28:b0:dd:3d:78:69:c4:b0:
35:88:ef:15:b2:80:f8:33:f2:e0:ef:09:cb:96:e3:
b8:37:52:5f:8a:c3:dc:47:36:db:b8:e7:f8:0b:91:
34:10:82:f9:4c:5f:65:63:24:bd:8d:06:e3:ea:af:
6d:dc:75:c3:6f:66:0f:3d:93:8d:29:53:02:d3:08:
3c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:62:19:03:14:A9:4B:17:88:E2:0F:69:29:25:AD:A5:3C:BD:DE:D6
X509v3 Authority Key Identifier:
keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/wGIZAxSpSxeI4g9pKSWtpTy93tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.192.0/20
185.85.212.0/22
195.137.140.0-195.137.154.255
Signature Algorithm: sha256WithRSAEncryption
2e:af:e6:5f:28:c7:4a:4e:df:9b:6d:99:68:ae:d4:4f:3a:dd:
b3:0b:64:76:7c:90:3c:d3:05:10:ea:f6:3a:87:b1:32:79:d1:
83:77:60:b2:d6:93:34:f5:87:4e:6e:5a:81:4b:ea:36:49:66:
89:b7:74:d2:a9:4d:e8:ea:82:a1:4a:93:0a:c8:68:ce:de:8f:
e0:8e:b1:48:23:3e:58:69:51:4c:65:ec:5b:48:a5:9d:76:10:
bb:1d:54:d9:10:49:fd:25:75:1d:60:81:ee:78:da:c8:c0:7d:
46:4f:68:80:b7:6d:d4:d5:dc:23:0e:dc:c2:c1:6a:5d:af:a7:
04:8d:15:a5:e6:31:bc:ea:35:b6:e5:34:69:a4:74:3a:f2:41:
62:2b:bd:9d:dd:f3:59:16:9c:71:20:f5:8a:4d:42:6e:9f:cb:
3a:95:c6:06:94:76:c1:b8:d2:69:62:fb:dc:61:b2:81:84:ff:
cf:ab:eb:8a:8f:16:4f:61:a1:b4:2b:32:f2:e2:99:34:ac:2e:
69:f2:bb:59:3d:a3:16:ed:6c:28:8a:48:3d:2a:fe:2d:c8:66:
76:c9:04:19:6c:7d:db:9c:5e:ce:5a:ed:2b:33:78:9d:e4:c2:
18:46:e3:a8:54:d1:1f:e6:4c:ce:6d:bf:a0:96:91:68:e3:2f:
63:94:04:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:52 2025 by rpki-client