Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/gLxmRnnycKI7MMSq07CZMrttEYA.roa
File: gLxmRnnycKI7MMSq07CZMrttEYA.roa (raw, json)
Hash identifier: RahzAA6LDYxs+J3qipk5K5GD5sXv2USArswpyaRAQ4s=
Subject key identifier: 80:BC:66:46:79:F2:70:A2:3B:30:C4:AA:D3:B0:99:32:BB:6D:11:80
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0188B3DBC1272D45FE52BF9BB5E84C18A661
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/gLxmRnnycKI7MMSq07CZMrttEYA.roa
Signing time: Tue 13 Jun 2023 08:25:03 +0000
ROA not before: Tue 13 Jun 2023 08:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 46.3.39.0/24 maxlen: 24
46.3.64.0/24 maxlen: 24
46.3.64.0/22 maxlen: 22
46.232.84.0/24 maxlen: 24
46.3.69.0/24 maxlen: 24
46.232.82.0/24 maxlen: 24
46.232.81.0/24 maxlen: 24
46.232.83.0/24 maxlen: 24
46.3.71.0/24 maxlen: 24
46.3.67.0/24 maxlen: 24
46.232.80.0/24 maxlen: 24
46.3.65.0/24 maxlen: 24
46.232.85.0/24 maxlen: 24
46.3.66.0/24 maxlen: 24
46.3.68.0/24 maxlen: 24
46.3.68.0/22 maxlen: 22
46.232.80.0/20 maxlen: 20
46.3.70.0/24 maxlen: 24
46.3.73.0/24 maxlen: 24
46.232.86.0/24 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.76.0/24 maxlen: 24
46.3.78.0/24 maxlen: 24
46.232.90.0/24 maxlen: 24
46.232.89.0/24 maxlen: 24
46.232.91.0/24 maxlen: 24
46.3.75.0/24 maxlen: 24
46.232.88.0/24 maxlen: 24
46.3.74.0/24 maxlen: 24
46.232.87.0/24 maxlen: 24
46.3.72.0/24 maxlen: 24
46.3.72.0/21 maxlen: 21
46.232.94.0/24 maxlen: 24
46.3.79.0/24 maxlen: 24
46.232.92.0/24 maxlen: 24
46.232.95.0/24 maxlen: 24
46.232.93.0/24 maxlen: 24
46.3.4.0/22 maxlen: 22
46.3.4.0/24 maxlen: 24
46.3.6.0/24 maxlen: 24
46.232.24.0/21 maxlen: 21
46.3.7.0/24 maxlen: 24
46.3.5.0/24 maxlen: 24
46.232.24.0/24 maxlen: 24
46.232.31.0/24 maxlen: 24
46.3.16.0/22 maxlen: 22
46.232.27.0/24 maxlen: 24
46.3.16.0/24 maxlen: 24
46.232.29.0/24 maxlen: 24
46.232.30.0/24 maxlen: 24
46.232.25.0/24 maxlen: 24
46.232.28.0/24 maxlen: 24
46.232.26.0/24 maxlen: 24
46.3.17.0/24 maxlen: 24
46.3.24.0/22 maxlen: 22
46.3.18.0/24 maxlen: 24
46.3.24.0/24 maxlen: 24
46.232.32.0/20 maxlen: 20
46.3.19.0/24 maxlen: 24
46.3.26.0/24 maxlen: 24
46.3.30.0/24 maxlen: 24
46.3.27.0/24 maxlen: 24
46.3.25.0/24 maxlen: 24
46.3.32.0/21 maxlen: 21
46.3.35.0/24 maxlen: 24
46.3.33.0/24 maxlen: 24
46.3.37.0/24 maxlen: 24
46.3.32.0/24 maxlen: 24
46.3.36.0/24 maxlen: 24
46.3.34.0/24 maxlen: 24
46.3.38.0/24 maxlen: 24
149.126.192.0/24 maxlen: 24
149.126.197.0/24 maxlen: 24
149.126.200.0/24 maxlen: 24
149.126.207.0/24 maxlen: 24
149.126.215.0/24 maxlen: 24
46.3.150.0/24 maxlen: 24
46.3.148.0/24 maxlen: 24
46.3.148.0/22 maxlen: 22
46.3.151.0/24 maxlen: 24
46.3.149.0/24 maxlen: 24
46.3.95.0/24 maxlen: 24
46.3.93.0/24 maxlen: 24
46.3.92.0/22 maxlen: 22
46.3.94.0/24 maxlen: 24
46.3.92.0/24 maxlen: 24
46.3.204.0/24 maxlen: 24
46.3.203.0/24 maxlen: 24
46.3.224.0/22 maxlen: 22
46.3.226.0/24 maxlen: 24
46.3.224.0/24 maxlen: 24
46.3.225.0/24 maxlen: 24
46.3.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:db:c1:27:2d:45:fe:52:bf:9b:b5:e8:4c:18:a6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 13 08:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80bc664679f270a23b30c4aad3b09932bb6d1180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ee:b1:29:27:2c:a5:e8:a0:1a:42:f8:d1:61:
64:e4:ae:b6:34:2d:fa:46:ec:30:6f:d5:38:2c:36:
c8:11:53:c2:89:af:57:06:e1:bf:ea:87:f1:dc:96:
5e:94:69:56:c6:ba:ce:55:80:29:79:69:98:2f:73:
2f:20:36:1e:6a:cb:c9:dc:3f:75:8d:4d:a3:dd:4c:
1c:59:e5:c7:90:67:83:d2:dc:20:9f:2f:9e:12:81:
1a:95:e7:1a:88:ed:44:39:cc:02:3f:31:c3:c3:8d:
d8:3c:5a:94:68:74:27:68:bb:a0:47:5b:db:91:cb:
55:21:ef:94:80:97:ce:be:7a:a2:17:54:4b:9a:14:
be:4d:e6:68:48:45:84:65:1e:59:74:ce:57:0d:00:
d2:32:89:2c:cc:37:f6:bc:e6:3d:de:a0:a8:c6:91:
78:5a:da:45:11:77:82:c6:8e:1b:12:eb:81:2a:f0:
1c:b6:a0:b8:9b:c5:6a:ac:b9:5d:45:7e:77:1c:36:
e4:21:fe:b4:62:d8:7e:98:c5:26:87:e4:22:f8:d2:
d6:85:49:3d:3a:6d:e9:e1:9b:48:2c:ae:cf:25:a8:
78:42:b3:a3:27:52:9a:ae:fb:a4:aa:c6:58:1f:50:
33:5c:6f:1a:bb:be:f2:a7:00:b2:06:7a:fc:f5:f3:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BC:66:46:79:F2:70:A2:3B:30:C4:AA:D3:B0:99:32:BB:6D:11:80
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/gLxmRnnycKI7MMSq07CZMrttEYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.4.0/22
46.3.16.0/22
46.3.24.0/22
46.3.30.0/24
46.3.32.0/21
46.3.64.0/20
46.3.92.0/22
46.3.148.0/22
46.3.203.0-46.3.204.255
46.3.224.0/22
46.232.24.0-46.232.47.255
46.232.80.0/20
149.126.192.0/24
149.126.197.0/24
149.126.200.0/24
149.126.207.0/24
149.126.215.0/24
Signature Algorithm: sha256WithRSAEncryption
79:22:ff:63:60:a8:e8:c4:a2:cf:43:76:11:46:16:ab:6f:3a:
57:5d:91:ff:33:a9:3b:cf:f7:24:ba:cd:e1:d4:a2:9d:84:41:
1b:a4:4e:ac:2c:da:39:a6:1d:2d:b6:05:7a:b6:00:0e:9a:7d:
a6:a0:bd:5f:5d:29:21:06:56:e0:f0:15:59:50:73:a3:ba:eb:
ff:b5:09:60:53:7b:3a:52:e4:b6:d2:a9:36:85:89:66:f2:25:
42:bb:fe:e7:6f:37:96:dd:84:c3:b9:7b:a9:42:6d:b4:95:1c:
4a:7c:27:09:ca:ee:af:ef:c0:29:17:cc:45:c6:77:1b:d3:5c:
22:41:73:8f:f5:60:bd:61:ae:6c:25:76:9c:5f:ba:3f:2e:e1:
d9:4e:11:d2:16:59:b0:ee:4b:56:b3:ea:b0:e9:20:51:99:b2:
0a:dc:70:58:01:6e:19:de:1f:ee:bc:e4:aa:ea:80:70:a0:a5:
d0:4b:28:fc:d6:d6:19:0d:d4:9e:ab:47:c5:d6:9e:31:c8:12:
70:08:44:a2:38:25:f0:3a:12:c8:79:8f:38:f9:59:70:cb:5e:
a9:5b:17:7d:e0:1a:fa:e6:e6:cc:33:7f:3c:cb:65:c0:54:97:
df:16:4b:be:dc:9d:5f:ff:2b:10:b0:5a:36:ae:35:dd:96:c9:
a9:9b:9b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:22:50 2025 by rpki-client