Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/pRSWMWpTBKVSu6NEHrtPFf8Pidw.roa
File: pRSWMWpTBKVSu6NEHrtPFf8Pidw.roa (raw, json)
Hash identifier: tUap9x8fVaM5ETzrKSBUn03Qu3mzi4Jdkd3ddyDUDlw=
Subject key identifier: A5:14:96:31:6A:53:04:A5:52:BB:A3:44:1E:BB:4F:15:FF:0F:89:DC
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0184B8C0775CED0F6A1434CC229448F9D824
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/pRSWMWpTBKVSu6NEHrtPFf8Pidw.roa
Signing time: Sun 27 Nov 2022 11:02:11 +0000
ROA not before: Sun 27 Nov 2022 11:02:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.232.64.0/21 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
46.232.80.0/20 maxlen: 24
46.3.200.0/24 maxlen: 24
149.126.192.0/18 maxlen: 24
46.3.0.0/16 maxlen: 24
46.232.24.0/21 maxlen: 24
46.232.32.0/20 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b8:c0:77:5c:ed:0f:6a:14:34:cc:22:94:48:f9:d8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Nov 27 11:02:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a51496316a5304a552bba3441ebb4f15ff0f89dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:90:22:72:fb:ef:ec:52:ad:23:28:9f:cf:01:
b7:87:69:99:b8:6f:7b:5f:18:49:b1:36:23:04:64:
79:48:44:22:da:b9:76:48:4f:50:92:c1:4c:b3:d2:
42:c3:86:0c:93:9d:32:f4:f5:06:ac:68:b8:36:17:
49:0d:71:57:4f:99:2e:b2:70:db:43:e2:5a:7c:c0:
99:f8:83:57:03:55:f2:d2:e4:6c:9f:3c:ae:06:6a:
6d:0e:17:19:60:70:04:41:4a:34:c7:2a:e0:d4:6d:
3f:ff:b2:7a:b6:54:cf:59:c8:f9:06:b9:63:3b:c2:
be:9f:e6:96:1b:b7:7a:e3:a3:cc:74:16:95:9f:f2:
dd:74:7a:5c:eb:ad:3a:a3:c4:89:69:89:3a:2c:2c:
62:29:a7:40:49:7a:20:b3:43:5e:38:35:6c:bd:df:
22:47:d9:2b:8f:44:0e:b6:c4:bf:9e:05:b7:68:21:
9e:ab:cc:3b:37:13:09:58:69:35:95:61:40:41:85:
f5:95:c0:d1:4c:89:58:8c:ef:00:5b:29:7a:65:98:
69:22:cc:b5:1c:ac:fe:11:ce:dc:72:0b:bf:ce:66:
16:40:98:d2:d2:f7:e8:23:92:49:29:50:cd:bd:cc:
fb:83:bc:78:9e:5a:6b:45:b7:f2:ca:0d:b4:e9:ee:
e0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:14:96:31:6A:53:04:A5:52:BB:A3:44:1E:BB:4F:15:FF:0F:89:DC
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/pRSWMWpTBKVSu6NEHrtPFf8Pidw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/16
46.232.24.0-46.232.47.255
46.232.64.0/21
46.232.80.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
01:ef:4e:c4:57:68:83:89:bf:39:37:18:0f:51:a1:32:7d:87:
bd:fc:60:40:45:ca:33:79:84:c9:ba:e6:03:b7:1a:e4:20:44:
71:a2:54:02:ec:4a:12:a4:07:95:b0:80:3c:c0:68:d1:f0:48:
9b:8d:97:89:74:a7:25:e9:a6:d0:ce:be:0c:fc:8c:a9:ce:37:
50:7a:8f:43:63:79:69:51:0d:91:a0:43:c9:9d:88:77:55:2f:
48:1a:f8:37:3a:a9:5f:a5:ab:91:a5:c2:da:02:6c:4d:98:60:
9b:5d:2f:fc:78:d1:87:bc:0a:84:d5:c8:4f:fb:51:6a:93:dd:
45:34:66:27:ec:39:27:93:9a:ab:7b:99:5a:5c:16:6e:0b:a7:
78:2e:c3:3e:8c:0a:2e:10:c9:24:1e:da:17:7a:0a:5c:6f:79:
b7:5a:5c:f1:1d:12:e4:bf:3a:0e:a5:e8:87:90:98:73:3d:11:
3a:4f:de:25:78:15:ea:d1:ec:fc:f1:2d:68:bd:ed:fe:49:b7:
54:a4:f5:fa:7b:96:43:4f:f7:51:4f:1d:5f:4f:05:e8:06:01:
2f:30:77:a9:ba:3c:ae:c4:6c:f9:6f:62:c8:5c:be:06:65:02:
41:94:bd:b9:c6:d6:69:29:93:b4:52:23:3e:30:93:ef:7b:6b:
e8:15:e2:f4
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAYS4wHdc7Q9qFDTMIpRI+dgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjIxMTI3MTEwMjExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTE0OTYzMTZhNTMwNGE1NTJiYmEzNDQxZWJiNGYxNWZmMGY4OWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5Aicvvv7FKtIyifzwG3h2mZuG97
XxhJsTYjBGR5SEQi2rl2SE9QksFMs9JCw4YMk50y9PUGrGi4NhdJDXFXT5kusnDb
Q+JafMCZ+INXA1Xy0uRsnzyuBmptDhcZYHAEQUo0xyrg1G0//7J6tlTPWcj5Brlj
O8K+n+aWG7d646PMdBaVn/LddHpc6606o8SJaYk6LCxiKadASXogs0NeODVsvd8i
R9krj0QOtsS/ngW3aCGeq8w7NxMJWGk1lWFAQYX1lcDRTIlYjO8AWyl6ZZhpIsy1
HKz+Ec7ccgu/zmYWQJjS0vfoI5JJKVDNvcz7g7x4nlprRbfyyg206e7gJQIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFKUUljFqUwSlUrujRB67TxX/D4ncMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvcFJTV01XcFRCS1ZTdTZORUhydFBGZjhQaWR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTArBAIAATAlAwMALgMwDAME
Ay7oGAMEBC7oIAMEAy7oQAMEBC7oUAMEBpV+wDANBgkqhkiG9w0BAQsFAAOCAQEA
Ae9OxFdog4m/OTcYD1GhMn2HvfxgQEXKM3mEybrmA7ca5CBEcaJUAuxKEqQHlbCA
PMBo0fBIm42XiXSnJemm0M6+DPyMqc43UHqPQ2N5aVENkaBDyZ2Id1UvSBr4Nzqp
X6WrkaXC2gJsTZhgm10v/HjRh7wKhNXIT/tRapPdRTRmJ+w5J5Oaq3uZWlwWbgun
eC7DPowKLhDJJB7aF3oKXG95t1pc8R0S5L86DqXoh5CYcz0ROk/eJXgV6tHs/PEt
aL3t/km3VKT1+nuWQ0/3UU8dX08F6AYBLzB3qbo8rsRs+W9iyFy+BmUCQZS9ucbW
aSmTtFIjPjCT73tr6BXi9A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org