Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/LIUpR5uv22GVjdpG1HnpSrLuKWM.roa
File: LIUpR5uv22GVjdpG1HnpSrLuKWM.roa (raw, json)
Hash identifier: KfIxV3VQVfdK3JB1GZ8fPJbwFQSk+qYqHyaEZvSTyt4=
Subject key identifier: 2C:85:29:47:9B:AF:DB:61:95:8D:DA:46:D4:79:E9:4A:B2:EE:29:63
Certificate issuer: /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial: 01856F4B620843EBA4246FF39869718E613E
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/LIUpR5uv22GVjdpG1HnpSrLuKWM.roa
Signing time: Sun 01 Jan 2023 21:44:49 +0000
ROA not before: Sun 01 Jan 2023 21:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207758
IP address blocks: 185.158.4.0/22 maxlen: 22
46.182.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:62:08:43:eb:a4:24:6f:f3:98:69:71:8e:61:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Validity
Not Before: Jan 1 21:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c8529479bafdb61958dda46d479e94ab2ee2963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0b:9e:6e:07:09:a2:ef:c2:03:6e:2a:25:6f:
32:27:bd:a9:5d:2c:b4:e6:5e:a3:88:8b:a2:1a:4b:
59:2f:1b:35:39:3a:36:a6:6a:bf:35:de:5a:42:8a:
53:e0:4c:ec:c6:19:d6:93:f5:8c:04:05:c6:63:f3:
58:9c:70:3d:ad:d1:0a:de:34:3c:b6:23:5e:d8:d6:
63:de:5e:60:a7:22:f8:1b:c7:67:ec:f2:9f:94:ff:
13:f7:be:58:a4:44:3c:3c:55:38:24:5d:f1:2b:c7:
58:73:7e:d7:c9:0e:57:0e:3c:34:33:e2:bc:59:c2:
1f:b8:d1:cf:ae:4d:24:2c:aa:37:ef:fd:46:98:e6:
d1:7b:16:15:78:5e:5d:d0:09:9b:05:6b:2d:1b:48:
8f:4d:66:15:1c:34:eb:31:1b:46:1b:31:a0:67:c7:
0e:75:34:5e:cb:62:c1:90:5b:57:c4:2a:17:ad:91:
26:7e:3c:1c:4b:7f:bb:52:50:15:a5:11:bf:c8:03:
40:11:92:53:a4:36:f4:0a:18:3f:39:af:4a:1f:9a:
ee:fb:90:e5:96:3d:7a:80:b1:57:99:a1:89:0d:1a:
0e:86:36:81:75:c8:96:a8:1e:59:6f:e2:20:24:f5:
6f:2d:ec:00:de:af:b0:66:78:76:8a:2a:e9:86:49:
29:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:85:29:47:9B:AF:DB:61:95:8D:DA:46:D4:79:E9:4A:B2:EE:29:63
X509v3 Authority Key Identifier:
keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/LIUpR5uv22GVjdpG1HnpSrLuKWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.0.0/22
185.158.4.0/22
Signature Algorithm: sha256WithRSAEncryption
55:ee:87:63:c2:ea:25:7d:03:36:ca:99:b4:8f:32:cf:2c:c5:
29:e0:5d:7e:5f:1b:06:c6:46:8d:2a:9d:d7:eb:de:94:30:e9:
b0:1f:f9:0d:29:5f:48:cb:98:0d:5a:59:bf:85:ad:9b:1c:a3:
74:e8:23:bb:d5:59:ba:35:69:3c:de:0a:e2:f5:fe:74:a1:0a:
c1:88:2c:52:64:64:4f:4b:a0:3b:a7:89:b6:3f:f5:67:40:27:
ce:43:7e:53:6e:62:12:2d:27:74:c0:e6:c5:e7:ff:0f:3c:d1:
3b:c0:2e:10:2d:27:6f:47:7b:80:fb:d1:af:dc:f9:d5:f8:43:
46:1f:42:26:6b:05:e7:c8:2c:5a:d7:09:1e:f1:27:50:bc:b8:
07:7c:12:f7:72:f7:75:bf:74:a4:fa:1d:1a:5b:93:de:9a:00:
07:cc:1e:8b:b6:40:3a:a9:b3:68:2d:42:21:5c:3b:f7:48:96:
3a:fe:09:18:06:cb:03:8e:c6:95:ad:93:c2:24:ef:90:33:18:
55:31:3b:5d:08:3b:00:02:42:c3:fa:65:e2:63:88:cf:1b:71:
79:46:65:36:84:54:0c:e5:7d:3c:6e:85:96:fc:0c:9a:12:41:
b7:34:e2:55:64:27:02:c3:82:58:88:1b:1e:f3:e1:44:95:3f:
5a:74:6f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:14:22 2025 by rpki-client