Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/l4_JVieTBSwL7RV2csvg9jOfhQs.roa
File: l4_JVieTBSwL7RV2csvg9jOfhQs.roa (raw, json)
Hash identifier: Ez3hh8n2zNitVUbX0laVimRUmOq4wSOhwttwNRGf19E=
Subject key identifier: 97:8F:C9:56:27:93:05:2C:0B:ED:15:76:72:CB:E0:F6:33:9F:85:0B
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018946B060B76D34737C6461BECDE4DD270B
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/l4_JVieTBSwL7RV2csvg9jOfhQs.roa
Signing time: Tue 11 Jul 2023 20:41:51 +0000
ROA not before: Tue 11 Jul 2023 20:41:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 80.243.128.0/20 maxlen: 24
46.3.48.0/20 maxlen: 20
46.3.84.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.3.0.0/16 maxlen: 24
46.3.152.0/24 maxlen: 24
46.3.148.0/22 maxlen: 22
46.3.158.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.3.136.0/22 maxlen: 22
46.3.135.0/24 maxlen: 24
46.3.144.0/22 maxlen: 22
149.126.192.0/19 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.212.0/22 maxlen: 22
46.3.208.0/22 maxlen: 22
46.3.232.0/22 maxlen: 22
46.3.239.0/24 maxlen: 24
46.3.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:46:b0:60:b7:6d:34:73:7c:64:61:be:cd:e4:dd:27:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 11 20:41:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=978fc9562793052c0bed157672cbe0f6339f850b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f5:47:6c:84:8c:6e:b5:25:21:3f:f0:a9:b3:
93:e6:ee:8e:10:6c:64:fc:01:69:aa:5e:b4:12:55:
69:a6:d9:43:a2:dc:d1:91:0c:47:96:35:07:49:82:
ea:50:cd:ab:9d:b6:9b:cd:1a:d9:9d:b1:05:83:da:
ee:68:80:c8:9b:0b:4f:65:25:b0:40:ef:f6:62:7a:
22:15:a8:be:67:b2:d7:3b:f3:fa:8f:b9:b1:a1:e1:
eb:a1:2f:ff:38:ee:3a:8f:d8:0f:23:6f:55:0e:78:
7f:7f:30:29:cf:98:8f:76:3f:d5:74:33:59:71:de:
a6:4a:51:b2:e4:77:fd:34:48:82:4a:57:35:18:08:
cd:7e:fb:56:1f:88:9e:f1:0f:12:05:d8:26:32:e9:
e6:82:a1:a2:41:74:86:33:0c:ba:50:a4:30:aa:a2:
b2:b6:29:4d:80:c5:7c:ae:81:b8:08:74:9b:0e:5a:
c3:d5:33:75:9b:3b:93:29:a1:4d:f2:61:95:aa:c3:
4e:9b:cd:c0:8d:4a:f1:70:e8:e6:cf:b4:e6:54:5f:
2f:b5:d6:f9:b0:e4:9a:c6:07:f4:d8:fd:ca:d8:69:
c2:69:aa:7b:3f:55:e6:8e:95:ee:bf:01:1f:93:63:
df:25:d2:5b:14:03:0a:36:3f:0b:cc:17:cb:14:3f:
e8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8F:C9:56:27:93:05:2C:0B:ED:15:76:72:CB:E0:F6:33:9F:85:0B
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/l4_JVieTBSwL7RV2csvg9jOfhQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/16
46.232.0.0/17
80.243.128.0/20
149.126.192.0/19
Signature Algorithm: sha256WithRSAEncryption
09:9d:8d:b4:ea:10:ca:6e:ec:08:f6:c9:28:12:59:fb:ed:4e:
1c:0a:90:61:2d:bf:24:ac:c3:0f:60:59:7b:a0:ed:bb:ca:05:
c0:3d:08:53:b4:c8:da:c1:50:8f:db:13:dd:57:34:e1:ad:88:
84:26:da:b8:28:6d:24:f9:bf:84:7e:7f:5c:dc:49:00:c5:d6:
0a:d0:f1:fb:10:8e:53:6b:cf:a1:0b:41:91:f8:68:05:2e:13:
56:9a:45:a4:38:03:55:38:e9:a5:0c:50:c9:98:17:bc:d0:93:
06:d1:55:f2:47:4b:11:d8:e8:66:0c:9d:4d:30:c6:e2:eb:7f:
fd:9a:3c:8d:ca:d9:5d:0b:36:55:11:07:4c:53:c9:64:6b:ae:
19:61:af:ea:b7:5a:e7:56:e0:09:c4:65:71:0e:3a:fd:a6:50:
a2:06:96:30:53:ce:9b:08:04:60:70:bd:77:b4:9e:b7:06:4e:
7e:0a:9a:c6:e7:c7:be:c8:61:0c:b8:fb:eb:26:c9:ec:30:4a:
38:f0:ec:90:7d:d7:e7:43:cf:84:62:80:1d:c7:1b:d9:92:73:
09:2b:81:19:f5:77:41:d4:48:25:bf:6a:3a:b1:0a:87:7c:d5:
fb:27:ab:37:bc:3e:0c:62:53:9c:84:d6:cf:5e:06:1c:f5:58:
84:44:30:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:12:08 2025 by rpki-client