Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/3V4xm-3Kuc6csUZpXFhmXuUwPw0.roa
File: 3V4xm-3Kuc6csUZpXFhmXuUwPw0.roa (raw, json)
Hash identifier: wZv1cYuvdfeGsSogvLSnvNZs+uccJBEogYAsnpXwuOU=
Subject key identifier: DD:5E:31:9B:ED:CA:B9:CE:9C:B1:46:69:5C:58:66:5E:E5:30:3F:0D
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 01855CF9053BF7941090657C385655B8140A
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/3V4xm-3Kuc6csUZpXFhmXuUwPw0.roa
Signing time: Thu 29 Dec 2022 08:21:41 +0000
ROA not before: Thu 29 Dec 2022 08:21:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47394
IP address blocks: 46.255.144.0/24 maxlen: 24
46.255.144.0/22 maxlen: 22
46.255.144.0/21 maxlen: 21
46.255.145.0/24 maxlen: 24
95.107.150.0/24 maxlen: 24
95.107.146.0/23 maxlen: 23
95.107.157.0/24 maxlen: 24
95.107.159.0/24 maxlen: 24
95.107.156.0/24 maxlen: 24
95.107.162.0/24 maxlen: 24
95.107.164.0/24 maxlen: 24
95.107.165.0/24 maxlen: 24
95.107.166.0/24 maxlen: 24
95.107.160.0/22 maxlen: 22
95.107.160.0/21 maxlen: 21
95.107.160.0/24 maxlen: 24
95.107.162.0/23 maxlen: 23
95.107.164.0/22 maxlen: 22
95.107.172.0/23 maxlen: 23
95.107.168.0/22 maxlen: 22
95.107.167.0/24 maxlen: 24
95.107.168.0/23 maxlen: 23
95.107.170.0/23 maxlen: 23
95.107.176.0/21 maxlen: 21
95.107.174.0/24 maxlen: 24
95.107.177.0/24 maxlen: 24
95.107.184.0/22 maxlen: 22
95.107.182.0/24 maxlen: 24
95.107.184.0/21 maxlen: 21
95.107.192.0/24 maxlen: 24
95.107.188.0/22 maxlen: 22
95.107.188.0/24 maxlen: 24
95.107.192.0/22 maxlen: 22
95.107.196.0/22 maxlen: 22
95.107.195.0/24 maxlen: 24
95.107.196.0/23 maxlen: 23
95.107.196.0/24 maxlen: 24
95.107.198.0/23 maxlen: 23
95.107.193.0/24 maxlen: 24
95.107.194.0/24 maxlen: 24
95.107.194.0/23 maxlen: 23
46.255.148.0/24 maxlen: 24
46.255.149.0/24 maxlen: 24
46.255.150.0/24 maxlen: 24
46.255.151.0/24 maxlen: 24
46.255.146.0/24 maxlen: 24
46.255.147.0/24 maxlen: 24
46.255.148.0/22 maxlen: 22
95.107.128.0/21 maxlen: 21
95.107.129.0/24 maxlen: 24
95.107.132.0/24 maxlen: 24
95.107.136.0/24 maxlen: 24
95.107.135.0/24 maxlen: 24
95.107.136.0/21 maxlen: 21
95.107.144.0/23 maxlen: 23
95.107.141.0/24 maxlen: 24
185.118.150.0/23 maxlen: 23
185.118.148.0/22 maxlen: 22
185.118.148.0/23 maxlen: 23
141.8.200.0/21 maxlen: 21
185.122.228.0/24 maxlen: 24
185.122.228.0/23 maxlen: 23
185.122.228.0/22 maxlen: 22
95.107.254.0/23 maxlen: 23
95.107.200.0/24 maxlen: 24
95.107.201.0/24 maxlen: 24
95.107.200.0/21 maxlen: 21
95.107.204.0/22 maxlen: 22
95.107.202.0/23 maxlen: 23
95.107.212.0/23 maxlen: 23
95.107.212.0/24 maxlen: 24
95.107.209.0/24 maxlen: 24
95.107.212.0/22 maxlen: 22
95.107.208.0/23 maxlen: 23
95.107.208.0/21 maxlen: 21
95.107.208.0/22 maxlen: 22
95.107.208.0/20 maxlen: 20
95.107.216.0/21 maxlen: 21
95.107.216.0/22 maxlen: 22
95.107.216.0/23 maxlen: 23
95.107.218.0/23 maxlen: 23
95.107.224.0/20 maxlen: 20
95.107.224.0/22 maxlen: 22
95.107.220.0/23 maxlen: 23
95.107.222.0/23 maxlen: 23
95.107.220.0/22 maxlen: 22
95.107.228.0/24 maxlen: 24
95.107.228.0/22 maxlen: 22
95.107.232.0/22 maxlen: 22
95.107.240.0/23 maxlen: 23
95.107.238.0/23 maxlen: 23
95.107.240.0/22 maxlen: 22
95.107.234.0/23 maxlen: 23
95.107.236.0/22 maxlen: 22
95.107.240.0/20 maxlen: 20
95.107.244.0/22 maxlen: 22
95.107.252.0/22 maxlen: 22
95.107.248.0/24 maxlen: 24
95.107.248.0/23 maxlen: 23
95.107.248.0/22 maxlen: 22
2a03:8480::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5c:f9:05:3b:f7:94:10:90:65:7c:38:56:55:b8:14:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: Dec 29 08:21:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd5e319bedcab9ce9cb146695c58665ee5303f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8b:de:04:9d:d1:33:a3:be:d6:68:fe:10:78:
59:6c:8e:cd:ba:f9:64:cf:81:23:08:d9:50:c6:c1:
e2:1d:89:6b:11:5a:0b:5b:2d:97:1a:4e:ce:e0:1a:
30:12:a2:d8:af:56:45:52:09:7d:ef:52:72:69:06:
42:e8:58:92:62:cf:27:9f:4a:47:ec:68:a0:c1:81:
c8:a2:07:fa:66:42:9a:23:58:cd:6f:c9:85:40:ae:
cf:04:8d:52:42:8c:cc:8f:39:79:6c:e8:ca:90:1a:
51:2e:a3:10:39:b5:40:d4:f2:38:da:fc:32:35:44:
13:df:4b:8f:96:11:95:23:1b:48:c6:e9:5e:93:66:
fa:0a:db:33:bf:ab:23:e3:27:da:c2:16:87:c2:90:
6d:7c:e1:24:4b:b3:44:f8:71:4d:3d:98:be:bd:1e:
2f:d2:49:58:c0:52:d4:9f:4d:f9:78:85:2b:bf:e7:
63:42:2b:16:58:3a:bb:23:92:dc:04:08:82:bb:04:
56:dd:64:8e:3e:3e:8d:c7:40:a0:e4:c4:f0:59:3f:
5f:22:df:3c:79:9b:e4:52:45:6a:ac:b4:d8:45:b4:
6d:db:bb:9a:73:b4:86:77:b2:a7:28:f5:a6:bc:88:
75:90:91:ce:01:48:a2:61:36:61:db:3a:da:9f:b8:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5E:31:9B:ED:CA:B9:CE:9C:B1:46:69:5C:58:66:5E:E5:30:3F:0D
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/3V4xm-3Kuc6csUZpXFhmXuUwPw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.144.0/21
95.107.128.0-95.107.147.255
95.107.150.0/24
95.107.156.0/23
95.107.159.0-95.107.174.255
95.107.176.0-95.107.255.255
141.8.200.0/21
185.118.148.0/22
185.122.228.0/22
IPv6:
2a03:8480::/32
Signature Algorithm: sha256WithRSAEncryption
11:71:ca:18:73:63:17:a2:af:b1:2f:21:3a:32:1c:6d:f2:3c:
7b:7f:ec:6b:04:25:7e:94:fb:32:c3:c7:88:16:3e:d0:b7:1a:
46:8d:89:29:43:d7:fe:9e:5c:fe:3c:9c:ad:3c:41:a4:66:12:
fc:75:cf:e7:18:ce:6a:58:45:c8:b7:69:6d:f4:c3:59:82:94:
d9:e7:7f:4d:be:cf:05:a0:38:fb:a1:f1:ed:61:1a:d5:10:1a:
78:3c:f0:38:f6:52:72:79:d2:a8:6b:33:71:a5:4f:97:42:50:
8a:85:88:3d:a4:6e:04:e4:59:2b:fe:98:96:59:b0:b1:4a:fe:
58:c5:3b:1d:a4:dc:4e:f1:5a:3a:11:ab:9c:79:54:6f:0c:ba:
e6:cd:af:49:e7:c8:16:33:e5:f5:24:40:37:c5:e1:bc:3e:bd:
94:c7:0f:8c:f0:ae:82:17:82:7a:7a:7c:34:9f:a6:a9:7c:54:
03:b3:be:d4:8b:e5:65:d3:55:14:44:0a:49:e1:c4:fb:21:aa:
18:96:81:d6:2e:ac:e2:86:6f:4e:f5:61:ec:5b:5a:d3:e1:45:
16:fb:3a:7b:f2:a5:bf:a9:d9:86:e8:8e:a2:44:be:ce:ea:6d:
2f:eb:44:51:68:f5:6c:41:17:8d:b5:dd:97:2c:bf:e7:4c:e3:
95:55:0d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:29 2023 by rpki-client on console-fra.rpki-client.org