Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/L5IK0-GCwKqyj-JBpY9pCUFzfBw.roa
File: L5IK0-GCwKqyj-JBpY9pCUFzfBw.roa (raw, json)
Hash identifier: DPMAMM5+h1dSmctwj3TfbpiwmjyoCzKQ5wmcQlnTZtU=
Subject key identifier: 2F:92:0A:D3:E1:82:C0:AA:B2:8F:E2:41:A5:8F:69:09:41:73:7C:1C
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 17E2F6F4
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/L5IK0-GCwKqyj-JBpY9pCUFzfBw.roa
Signing time: Sat 01 Jan 2022 04:55:20 +0000
ROA not before: Sat 01 Jan 2022 04:55:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48082
IP address blocks: 46.33.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400750324 (0x17e2f6f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Jan 1 04:55:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f920ad3e182c0aab28fe241a58f690941737c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:57:40:bd:a4:57:c0:0e:cc:81:2a:37:b2:52:
f2:04:77:07:b0:7e:ca:dc:82:99:2e:ca:fe:fb:00:
92:40:1f:39:99:b6:f9:8b:29:b4:9f:d7:1a:50:96:
cb:f4:9b:4a:24:cb:bb:2a:aa:4a:a8:bc:5b:32:8d:
f6:5c:f3:12:44:95:c2:73:15:86:16:6d:11:9f:66:
66:e8:d9:c3:28:df:d1:78:18:a5:06:59:f7:ba:d8:
ff:f5:60:55:5e:d9:52:13:7a:a1:70:69:f5:75:86:
18:16:38:f6:37:75:7f:34:d5:d3:b0:7c:83:f8:61:
b7:74:fd:43:e3:48:62:b8:b1:82:1c:c0:f9:5b:aa:
d9:7c:66:0e:14:f7:75:99:fc:bd:cd:ce:97:70:60:
7a:0a:4a:ec:72:f7:fc:7c:a8:21:36:4f:0e:31:8e:
c0:f1:6a:ad:4a:d9:a4:3e:88:a6:a3:a4:80:f9:28:
ed:94:af:76:6a:02:cb:d6:8e:57:cf:da:4c:6e:ec:
59:28:29:f7:f6:d1:29:17:66:f7:d7:53:ee:4f:14:
27:4b:78:d1:ee:c2:2d:76:c0:c5:66:63:19:08:19:
39:33:a2:df:a5:bd:42:a2:cf:87:3f:7c:4d:32:67:
4f:d7:b7:24:db:e0:24:53:12:8d:3f:18:42:7d:6c:
6d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:92:0A:D3:E1:82:C0:AA:B2:8F:E2:41:A5:8F:69:09:41:73:7C:1C
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/L5IK0-GCwKqyj-JBpY9pCUFzfBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.60.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:65:1e:16:06:5c:1c:db:ae:be:e3:28:26:9f:23:9a:60:2d:
62:6c:43:6d:a3:5a:5a:d7:f3:93:0c:44:4b:b0:f1:2d:47:fb:
2b:aa:46:40:9a:70:e6:17:82:71:fd:75:0f:03:f0:1f:f8:a2:
68:49:34:2f:f3:a4:c3:77:08:0f:d4:0c:40:b7:cc:aa:a1:de:
ce:b2:f8:49:e1:66:b1:de:16:df:0d:f3:56:51:14:94:bb:74:
05:ae:5d:b5:fa:72:87:07:79:e1:a0:3c:eb:ad:00:b4:e2:a1:
e9:a0:8a:ac:bb:e2:0d:99:11:c2:cb:19:b3:96:e4:62:73:b8:
d2:4d:73:80:ed:20:ab:64:4f:fe:a8:d9:6f:04:9b:21:d9:6e:
dc:4c:94:9b:db:ec:76:3c:b8:76:99:d2:f3:c2:61:18:78:3a:
df:59:b3:31:75:03:19:2d:f3:bd:f5:b0:26:f1:97:a8:16:6f:
a8:59:63:6d:45:72:09:e9:24:18:ac:f4:ae:8d:a5:e5:52:e1:
78:2d:0a:d6:e9:95:71:44:c0:19:70:ae:80:13:2a:10:22:0b:
1e:bc:90:26:06:5d:d3:c2:03:08:5f:1c:3a:21:8f:8b:2a:98:
e1:aa:92:00:35:d3:6b:f7:ff:cf:14:b6:ec:19:bd:47:bb:62:
40:cc:2d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:42:44 2025 by rpki-client