Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/t5eZaLiRyGM64zrp6GnZiR8vewk.roa
File: t5eZaLiRyGM64zrp6GnZiR8vewk.roa (raw, json)
Hash identifier: VdCjgVrtpFR7Ey7+OMTSWdtWZ0ZXPPuRrocgV6bFvdk=
Subject key identifier: B7:97:99:68:B8:91:C8:63:3A:E3:3A:E9:E8:69:D9:89:1F:2F:7B:09
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01850A2E70496871727FCBCC7A66D72D90E2
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/t5eZaLiRyGM64zrp6GnZiR8vewk.roa
Signing time: Tue 13 Dec 2022 06:31:33 +0000
ROA not before: Tue 13 Dec 2022 06:31:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59729
IP address blocks: 46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
149.126.192.0/24 maxlen: 24
46.3.202.0/24 maxlen: 24
46.3.203.0/24 maxlen: 24
46.3.204.0/24 maxlen: 24
149.126.197.0/24 maxlen: 24
149.126.203.0/24 maxlen: 24
46.3.224.0/24 maxlen: 24
46.3.225.0/24 maxlen: 24
46.3.226.0/24 maxlen: 24
46.3.227.0/24 maxlen: 24
46.3.238.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0a:2e:70:49:68:71:72:7f:cb:cc:7a:66:d7:2d:90:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Dec 13 06:31:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7979968b891c8633ae33ae9e869d9891f2f7b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:98:ec:f2:e7:68:8e:6c:41:c2:f4:09:71:52:
8a:91:83:6a:6b:2a:6e:2b:95:c9:a4:19:37:17:6d:
42:7f:45:82:47:c6:09:6f:0c:df:05:63:4b:78:be:
f0:e8:f4:54:63:c9:34:90:b8:c7:7b:86:e7:c0:72:
9d:b3:4d:e8:82:c0:42:8d:51:17:be:14:5b:24:2d:
eb:ac:34:cc:50:e8:d7:5c:28:cd:4d:c7:7a:2e:ce:
4a:40:5e:bf:26:4a:18:a2:3e:e3:d9:2d:1c:cb:c6:
8e:aa:20:94:fb:95:e1:24:8a:71:8e:ff:6a:37:df:
bf:59:ca:7a:7e:13:c8:83:cc:0f:c8:7a:0f:33:51:
4e:e4:c1:33:00:36:9c:05:13:d3:bc:d2:c7:a3:01:
01:6e:ee:90:ca:0a:00:c7:56:76:2b:cc:53:36:c4:
18:ba:59:32:7c:30:3f:f2:ee:16:3b:5b:21:4d:01:
c3:1b:3a:93:30:47:78:c5:a4:2d:70:d2:c6:a4:b2:
1f:d7:fb:fc:ee:49:a4:b3:f1:ca:8d:33:7a:d1:c1:
e9:75:3a:2d:ac:24:42:3e:18:cb:82:c1:7d:f8:35:
d8:a8:d4:2a:c1:fb:b8:4e:a0:b5:9e:18:d0:3c:06:
8d:f3:a1:16:a5:bf:7e:8a:12:50:de:06:81:4a:14:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:97:99:68:B8:91:C8:63:3A:E3:3A:E9:E8:69:D9:89:1F:2F:7B:09
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/t5eZaLiRyGM64zrp6GnZiR8vewk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.152.0/22
46.3.202.0-46.3.204.255
46.3.224.0/22
46.3.238.0/23
149.126.192.0/24
149.126.197.0/24
149.126.203.0/24
Signature Algorithm: sha256WithRSAEncryption
39:62:cf:d0:a5:f5:bf:62:f0:71:75:9d:41:9d:52:c9:e2:94:
2f:1e:2d:c6:4e:ca:6a:5b:29:4b:48:ab:20:77:04:c4:96:ce:
fe:0c:7a:1c:a3:d9:2a:9c:a1:fa:cb:41:42:fc:44:d5:36:f1:
db:fe:fe:42:9c:a2:78:5a:d6:72:82:fe:2d:5e:06:c2:58:83:
00:d9:17:8e:cb:56:a1:13:3a:44:ba:d3:bf:c1:07:10:0a:bf:
95:14:01:50:10:74:98:7c:24:84:bd:34:1b:a2:4a:9c:c3:55:
24:85:ae:43:8e:f3:ad:9d:99:b7:01:ba:c0:b2:e1:d5:f5:88:
02:c9:b7:2d:75:36:dd:22:a9:7b:ef:6d:ad:d4:17:a7:4e:1c:
ac:40:f5:3c:e3:32:8b:ce:ce:13:e2:4c:88:0b:df:84:95:de:
26:ee:46:6a:90:22:38:68:19:a1:d5:a4:8e:f0:23:56:ec:fa:
e9:c0:a9:ef:4e:7a:42:e3:90:9e:0f:28:62:f4:26:d2:43:68:
c2:00:f9:76:e3:32:3a:23:10:e7:05:55:a4:31:8e:2b:4d:26:
10:e1:6e:b2:2e:14:ea:e0:ec:46:51:a3:b4:9a:cc:16:d2:9e:
9a:3d:9c:78:43:e4:ae:73:94:60:c8:35:18:ff:c6:6d:01:61:
8e:62:68:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org