Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/zeZie8uQGoerVocDl1U-yyQeJfQ.roa
File: zeZie8uQGoerVocDl1U-yyQeJfQ.roa (raw, json)
Hash identifier: HdNA6HOnGrshSsjaSGAZOvgsyY/kMlf3i2zxVFYrGzg=
Subject key identifier: CD:E6:62:7B:CB:90:1A:87:AB:56:87:03:97:55:3E:CB:24:1E:25:F4
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0186CD9A6512BCBFB1381946D567AD9851F5
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/zeZie8uQGoerVocDl1U-yyQeJfQ.roa
Signing time: Fri 10 Mar 2023 22:18:13 +0000
ROA not before: Fri 10 Mar 2023 22:18:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 46.232.72.0/21 maxlen: 24
46.232.80.0/20 maxlen: 22
46.232.96.0/20 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.185.0/24 maxlen: 24
46.3.184.0/24 maxlen: 24
46.3.186.0/24 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.187.0/24 maxlen: 24
46.3.189.0/24 maxlen: 24
46.232.112.0/20 maxlen: 22
46.3.101.0/24 maxlen: 24
46.3.116.0/22 maxlen: 24
46.3.120.0/21 maxlen: 21
46.3.134.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.246.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
46.3.208.0/21 maxlen: 21
149.126.192.0/18 maxlen: 22
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
149.126.226.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cd:9a:65:12:bc:bf:b1:38:19:46:d5:67:ad:98:51:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 10 22:18:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cde6627bcb901a87ab56870397553ecb241e25f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:ef:b9:f5:a2:28:b0:c0:a5:d4:ad:3a:0c:
c9:5b:35:03:53:d7:9e:39:2f:e1:fa:d2:22:35:ab:
68:eb:04:f1:b8:af:34:a6:fb:0c:9c:82:4f:03:aa:
69:3f:4b:cd:d7:07:50:b6:7a:cc:2f:61:b7:01:46:
91:07:0d:95:43:09:bc:7d:10:54:6e:41:ef:c4:17:
26:71:bd:a7:a9:e0:29:b0:25:8b:9b:03:c5:06:c6:
9d:ae:d9:54:34:b6:5d:eb:ed:2b:40:6d:35:08:54:
48:d3:36:52:e9:fb:80:64:78:39:3b:58:c1:a0:27:
ed:d9:f9:9e:f6:af:f5:17:c4:20:fb:42:96:65:d5:
e3:7b:d7:18:11:8c:51:4f:0d:b7:72:89:0b:ac:d8:
94:6c:6a:ad:7a:d3:41:b8:b6:1e:ae:c1:5d:5c:1f:
79:d2:ae:96:24:f0:5a:b8:5d:bf:c3:89:ae:40:34:
f8:39:38:7e:e0:b7:e0:6a:5a:38:f7:1c:f6:77:ac:
e8:95:66:74:36:14:9d:4e:86:28:4b:e0:79:89:99:
94:68:81:b7:4d:70:5c:9c:93:57:41:ed:6d:1e:75:
24:25:70:b6:8a:78:b9:61:2e:14:7d:ca:44:d5:de:
de:0a:a9:4a:5e:7e:71:ae:31:47:9a:21:c0:da:c8:
6d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E6:62:7B:CB:90:1A:87:AB:56:87:03:97:55:3E:CB:24:1E:25:F4
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/zeZie8uQGoerVocDl1U-yyQeJfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.88.0/22
46.3.101.0/24
46.3.116.0-46.3.127.255
46.3.134.0/24
46.3.160.0/22
46.3.184.0-46.3.189.255
46.3.201.0/24
46.3.208.0/21
46.3.220.0/23
46.3.230.0/23
46.3.248.0/23
46.3.251.0/24
46.3.253.0-46.3.255.255
46.232.72.0-46.232.127.255
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
92:f4:ba:49:24:47:12:99:cb:d0:2d:77:d9:4a:ac:ba:7a:83:
cf:47:45:01:27:b1:7d:e9:48:b9:4d:cd:8f:86:36:ad:56:b3:
f5:3f:9c:a9:a4:7c:9f:84:ad:d0:34:c0:be:51:35:d1:f3:69:
76:c3:09:f2:f6:3c:1c:9f:ea:03:ad:f9:9b:2c:0d:98:f3:04:
f2:d7:9e:12:6b:d8:f4:db:bd:61:d1:79:65:76:0d:f6:62:47:
2c:cf:ba:4c:4c:2d:43:be:71:52:9b:8c:80:08:38:6b:1f:6c:
2f:e2:0d:6d:84:98:e4:b8:6b:21:98:8b:fe:5f:14:d3:21:5a:
b2:17:d3:cc:d2:78:e3:46:2d:3c:59:5a:98:c3:bd:17:0a:ec:
da:b5:d2:9d:ca:57:43:dd:5c:20:d6:30:f0:17:d7:d4:aa:fe:
82:97:99:b6:5a:64:4f:66:ea:92:14:a7:6f:ad:39:1b:d3:4f:
99:45:bd:cc:dd:47:f9:ba:dd:f4:5a:50:b9:24:8e:4b:67:b6:
92:cc:79:6f:12:70:6d:11:5a:80:aa:be:a7:8c:be:65:9a:05:
a3:40:59:59:a4:c7:b8:da:8c:0a:23:e4:19:44:10:ec:37:c8:
fa:ce:9c:18:28:0a:2f:34:14:7d:65:f8:3f:15:2d:45:2b:45:
5e:e9:df:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:20:21 2025 by rpki-client