Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/3iLbrkLapuW_pzaZl8sPWLmuXW8.roa
File: 3iLbrkLapuW_pzaZl8sPWLmuXW8.roa (raw, json)
Hash identifier: SJgkUjbXmOkUx00altmaNY/ySECMgDoFA0oR5KUe8SE=
Subject key identifier: DE:22:DB:AE:42:DA:A6:E5:BF:A7:36:99:97:CB:0F:58:B9:AE:5D:6F
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018641E1952D2BDEB3BC16E60EC20499C18F
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/3iLbrkLapuW_pzaZl8sPWLmuXW8.roa
Signing time: Sat 11 Feb 2023 19:09:08 +0000
ROA not before: Sat 11 Feb 2023 19:09:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 149.126.246.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
46.3.116.0/22 maxlen: 24
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
46.3.120.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:41:e1:95:2d:2b:de:b3:bc:16:e6:0e:c2:04:99:c1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Feb 11 19:09:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de22dbae42daa6e5bfa7369997cb0f58b9ae5d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:6d:09:84:96:ca:f3:80:84:e4:28:a0:41:
f4:9e:38:11:9e:eb:39:d7:06:06:8c:50:84:32:a7:
fa:ed:a5:d1:9b:fb:77:3b:01:8d:aa:ec:04:3a:82:
76:77:d1:e9:70:29:23:fc:97:36:6e:57:7e:d7:d9:
fb:2a:08:70:5a:15:89:e7:76:d2:3a:92:12:b8:db:
27:97:57:a6:db:ee:5b:2c:8b:7a:9d:9c:69:26:b9:
99:bc:3a:9a:dd:55:03:b1:7b:84:c1:aa:9e:b5:b9:
fb:cd:ae:a1:0c:89:78:f7:9c:1a:06:ab:c8:6b:db:
72:44:67:b8:84:cc:7f:09:40:17:87:ca:18:28:45:
f5:bf:65:a4:c8:5e:54:2d:1b:61:73:63:cd:5c:d4:
8a:1e:6c:d3:98:6d:90:1f:23:cb:9b:43:6c:d7:bf:
4f:79:28:6e:ce:e3:5c:88:a3:59:40:2e:fb:59:b5:
4c:e0:3a:95:3c:da:ef:d5:fb:d5:0a:ba:22:66:ce:
79:5f:b7:7a:8e:17:65:6c:53:c4:1b:ff:c3:a5:9b:
bb:bb:46:a3:45:80:66:e2:ed:cd:50:b3:b3:65:c9:
de:ff:13:18:52:35:7e:5c:4f:52:22:9e:11:02:e9:
14:f1:91:8c:60:64:d2:e4:d7:5e:cf:a4:b8:f5:52:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:22:DB:AE:42:DA:A6:E5:BF:A7:36:99:97:CB:0F:58:B9:AE:5D:6F
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/3iLbrkLapuW_pzaZl8sPWLmuXW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.116.0-46.3.127.255
46.3.220.0/23
46.3.230.0/23
149.126.246.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ce:a4:75:c1:d4:71:1b:93:23:31:cc:e1:7b:91:f0:ec:f1:
e6:ad:6a:c7:46:b8:31:78:58:14:71:da:63:23:03:3c:ba:da:
b8:24:4f:df:2c:a9:64:c2:1f:13:d2:ce:ab:5e:e9:13:52:3c:
68:4d:48:de:48:a9:db:cd:d9:8b:88:3f:73:3b:44:f4:cc:82:
77:c4:f2:cd:c9:be:77:1b:56:46:e2:a6:5a:5f:12:79:e0:ee:
73:8e:a5:91:37:18:3e:90:36:f7:52:c0:c2:a1:9d:09:8a:2a:
4f:12:7b:ce:5f:1b:85:3a:74:54:e1:86:83:45:bc:cc:80:91:
ee:f1:03:c7:30:9d:54:18:81:23:2d:d2:7b:94:9d:e4:20:37:
04:58:9a:c7:df:3f:be:9c:f9:b5:02:72:6e:04:00:d9:78:a1:
86:ed:68:37:cb:1c:c8:52:e5:70:6b:f0:5e:ab:f0:69:f6:85:
4d:ff:d8:1d:73:9c:15:da:ab:b4:97:67:a1:c1:aa:60:ed:ee:
0b:d9:d9:85:19:18:26:ca:a9:f0:d5:9b:05:6a:59:28:c7:8a:
b5:05:e2:07:ea:c1:42:a6:8c:a1:d5:bc:39:51:4a:68:ba:8e:
b8:c3:43:a0:d9:dc:bb:b0:df:c5:ae:0f:21:25:39:4c:11:1b:
37:e4:f9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:11:44 2025 by rpki-client