Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/vuzBmO_fWPsF9qemgk8eqN94YR4.roa
File: vuzBmO_fWPsF9qemgk8eqN94YR4.roa (raw, json)
Hash identifier: fJZmW71WdZMeM/4ZVQYVVx6bf/tydNsASeOrKo09Mtw=
Subject key identifier: BE:EC:C1:98:EF:DF:58:FB:05:F6:A7:A6:82:4F:1E:A8:DF:78:61:1E
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0181D48B9DCC08A6445667A0C51004FFB72C
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/vuzBmO_fWPsF9qemgk8eqN94YR4.roa
Signing time: Wed 06 Jul 2022 17:25:28 +0000
ROA not before: Wed 06 Jul 2022 17:25:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 996
IP address blocks: 46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.134.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
149.126.246.0/24 maxlen: 24
149.126.243.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
149.126.198.0/24 maxlen: 24
149.126.195.0/24 maxlen: 24
149.126.196.0/24 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.204.0/24 maxlen: 24
149.126.205.0/24 maxlen: 24
149.126.206.0/24 maxlen: 24
149.126.201.0/24 maxlen: 24
149.126.202.0/24 maxlen: 24
149.126.213.0/24 maxlen: 24
149.126.208.0/24 maxlen: 24
149.126.210.0/24 maxlen: 24
149.126.214.0/24 maxlen: 24
149.126.225.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.224.0/24 maxlen: 24
149.126.229.0/24 maxlen: 24
149.126.230.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d4:8b:9d:cc:08:a6:44:56:67:a0:c5:10:04:ff:b7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 6 17:25:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=beecc198efdf58fb05f6a7a6824f1ea8df78611e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7d:cb:cd:55:57:f9:c6:07:38:d4:ea:b6:b6:
fa:d0:a2:ef:c1:0d:bc:0c:82:2f:81:b2:82:89:3c:
44:eb:b7:96:8b:ad:5a:60:15:96:a9:1c:7f:ba:ba:
a9:2c:51:ef:b8:2f:3a:1b:11:68:98:d6:f1:5e:ba:
92:48:82:49:83:19:02:54:ef:cb:98:ba:b5:5e:67:
77:1f:d8:b6:24:bb:df:79:5c:14:b1:71:7d:3b:e3:
73:86:c8:19:7f:e2:8e:9f:e2:68:b6:ce:76:b4:cd:
b8:c5:73:b5:59:ea:60:7f:65:a3:75:80:54:76:79:
c9:4b:95:fd:af:0a:92:5c:51:2a:fa:80:0d:45:e6:
40:5b:0a:df:11:a7:bc:d3:d7:56:25:36:da:2c:8b:
8d:cb:56:bc:35:8d:8d:9d:67:e6:72:67:47:68:c3:
44:7e:7c:05:a6:53:86:29:71:b2:f4:4a:ec:12:ab:
e0:84:94:c7:b9:fc:a0:e3:1a:b3:ad:82:44:29:04:
b9:fe:16:70:7b:b6:30:d8:99:5b:22:5f:05:30:a0:
4b:20:5a:0b:b7:20:c0:24:4f:c9:58:ab:34:f7:ed:
ff:d8:f4:90:7d:2a:70:df:46:af:a9:70:f4:17:8e:
4a:1d:dc:8f:12:39:ec:4a:01:a0:cd:82:ad:51:33:
4b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EC:C1:98:EF:DF:58:FB:05:F6:A7:A6:82:4F:1E:A8:DF:78:61:1E
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/vuzBmO_fWPsF9qemgk8eqN94YR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.134.0/23
46.3.156.0/23
46.3.200.0/23
46.3.205.0/24
46.3.248.0/21
149.126.193.0/24
149.126.195.0-149.126.196.255
149.126.198.0/24
149.126.201.0-149.126.202.255
149.126.204.0-149.126.206.255
149.126.208.0/24
149.126.210.0/24
149.126.213.0-149.126.214.255
149.126.224.0-149.126.226.255
149.126.228.0/22
149.126.242.0-149.126.250.255
149.126.252.0/23
149.126.255.0/24
Signature Algorithm: sha256WithRSAEncryption
02:da:7c:93:a6:5c:ee:fd:db:a8:74:fe:c3:e6:da:cd:6e:56:
66:d6:70:e0:ab:89:c4:45:82:f0:f5:ab:22:dd:62:81:e6:eb:
b6:70:1d:c3:32:f7:0a:fe:aa:dc:4c:0a:a2:8c:ec:cd:c5:ff:
16:76:ac:47:13:8a:8d:06:e2:ac:16:a7:bf:ff:c7:c4:33:e5:
93:b6:59:c9:ff:c2:4b:47:d5:b3:56:80:b7:0c:99:46:8f:88:
98:8c:20:91:3d:19:7a:45:48:cd:c4:0a:54:91:9b:c2:e5:9e:
d7:42:05:b8:5c:bc:98:dc:7a:4d:d8:c3:6f:0b:4d:1c:3a:12:
d7:6e:e4:7f:2f:eb:c2:54:1d:d6:7f:62:ec:d2:ad:67:25:aa:
50:ea:38:a5:7c:ba:58:ca:28:2f:9e:1e:78:4c:84:09:0d:19:
5a:0b:69:91:ad:91:3c:26:a6:ec:73:c2:4e:d0:1f:03:55:92:
b2:f2:6e:64:ec:97:41:4f:f0:37:80:22:4e:27:fd:78:2f:a6:
87:75:f0:70:a2:bd:c4:0d:0d:f5:92:ad:2c:b6:c4:c4:c7:35:
56:1a:ef:8f:5b:6c:c5:3e:9b:46:f7:72:78:a9:7f:e8:f0:d1:
ae:72:cf:8f:f6:b0:71:42:0d:c7:43:9c:46:3f:a4:59:a9:95:
87:db:e9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org