Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/JlJDNGxbGoTT8newVh5FAW8iJfw.roa
File: JlJDNGxbGoTT8newVh5FAW8iJfw.roa (raw, json)
Hash identifier: a5KBuArOeDu1FKy2sECmumGz94sWFBYW3NOZHz1Wdcc=
Subject key identifier: 26:52:43:34:6C:5B:1A:84:D3:F2:77:B0:56:1E:45:01:6F:22:25:FC
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 17DFC574
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/JlJDNGxbGoTT8newVh5FAW8iJfw.roa
Signing time: Sat 01 Jan 2022 04:55:18 +0000
ROA not before: Sat 01 Jan 2022 04:55:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35588
IP address blocks: 46.33.48.0/22 maxlen: 22
46.33.48.0/21 maxlen: 24
46.33.52.0/22 maxlen: 24
46.33.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400541044 (0x17dfc574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Jan 1 04:55:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=265243346c5b1a84d3f277b0561e45016f2225fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:27:5d:6c:8e:2a:47:1b:d2:2a:d5:55:5e:b6:
6e:74:17:d8:d1:6a:32:c5:da:b1:de:a0:ac:c9:19:
d3:b7:2b:51:2a:26:7c:da:3f:4a:c9:19:fe:f7:f9:
6f:2c:32:89:77:f9:81:28:09:f5:67:c8:ee:c0:41:
32:8b:c3:54:e6:dd:6c:4f:48:26:25:d0:4e:5e:01:
63:7e:01:10:a5:fd:59:88:a0:4e:69:2e:57:63:a0:
53:27:e9:24:b0:f3:d6:0e:ac:94:e5:4f:50:16:56:
cb:c9:d9:d4:ec:0f:ff:24:00:84:6b:2f:37:32:1d:
9f:43:8d:00:57:7d:4e:9f:d3:9b:e6:9f:99:bf:30:
a9:85:3f:a9:20:87:53:84:a1:12:19:66:fc:8b:a3:
1b:ec:fa:7e:11:46:56:df:aa:30:49:8d:5f:4d:66:
62:53:1c:cd:47:b7:1c:54:f1:a2:df:ba:1c:16:d0:
63:f8:45:5b:31:93:5c:c0:8b:9d:5a:9f:88:5c:8d:
53:9e:6e:44:d5:2c:e3:19:92:0b:59:91:db:b1:9e:
bb:34:e5:74:c2:a0:dd:72:a6:9e:ef:45:c3:10:d9:
0f:78:3b:4d:ac:5e:7a:5d:41:0c:4f:c7:c4:fd:e5:
df:7f:46:c6:e1:8c:eb:8e:0b:04:3c:94:7e:3f:f5:
62:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:52:43:34:6C:5B:1A:84:D3:F2:77:B0:56:1E:45:01:6F:22:25:FC
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/JlJDNGxbGoTT8newVh5FAW8iJfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.48.0/21
Signature Algorithm: sha256WithRSAEncryption
75:19:df:96:68:71:c4:c1:23:3e:c0:52:0a:53:f2:9a:6e:f3:
7b:ae:d4:92:7a:ec:ca:d6:55:28:e3:36:ea:83:80:6a:fe:a2:
b2:ad:d0:3f:04:73:4e:16:b5:07:99:48:32:5e:49:b6:ad:cd:
ed:09:f4:91:87:7e:fa:40:fb:9d:68:4f:f8:11:d0:02:b6:a3:
a8:37:5f:77:4c:eb:a3:f8:2c:d4:c6:ac:aa:5d:5c:2a:04:f9:
ce:93:7a:d8:4f:82:25:0a:0a:99:c3:e5:f9:e8:18:eb:af:0e:
70:58:56:bc:a8:fc:2b:55:51:f4:d5:bd:11:d9:2c:6b:0a:61:
7d:01:31:db:07:3b:84:e9:58:e8:27:71:9a:97:08:95:4c:b4:
d6:c1:e8:c9:86:e6:0b:9e:98:02:a3:81:b4:52:9d:ea:48:68:
02:6f:22:36:8a:81:fb:89:18:fe:f6:b9:c5:36:3a:92:b5:21:
10:3f:ab:80:e7:35:8c:5a:7f:7f:c1:b0:83:2b:0f:5a:8a:9f:
00:74:cb:09:b2:00:07:2e:8f:73:3c:04:19:34:95:4d:1e:5c:
85:69:48:82:ca:70:9c:ba:40:d6:9d:1f:25:90:09:09:b0:3a:
b0:12:82:c6:93:e2:bf:2b:ec:d2:37:df:92:16:3b:4b:b5:a0:
d7:9e:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:42:53 2025 by rpki-client