Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/pAlZt63GJfNqbOSeyluqOCSSKsA.roa
File: pAlZt63GJfNqbOSeyluqOCSSKsA.roa (raw, json)
Hash identifier: 2BmXCuQ45v6M7hmqQ0uEJqDKr4QGob/PhMxTVgtX/8E=
Subject key identifier: A4:09:59:B7:AD:C6:25:F3:6A:6C:E4:9E:CA:5B:AA:38:24:92:2A:C0
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 018570DE5921D605C5BE91BE5F7AFE907180
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/pAlZt63GJfNqbOSeyluqOCSSKsA.roa
Signing time: Mon 02 Jan 2023 05:04:58 +0000
ROA not before: Mon 02 Jan 2023 05:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48082
IP address blocks: 46.33.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:59:21:d6:05:c5:be:91:be:5f:7a:fe:90:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Jan 2 05:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a40959b7adc625f36a6ce49eca5baa3824922ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:42:b5:2d:03:59:dd:67:4e:6b:6f:52:f7:b0:
c0:38:3f:08:8b:eb:22:74:9c:95:17:8e:41:02:ef:
3b:18:ca:6d:13:7f:c1:f1:27:b1:20:48:77:30:fa:
82:12:30:47:16:fb:f6:6d:02:8a:bb:8e:55:63:56:
c9:94:38:75:89:79:42:61:6b:d3:05:9d:8f:22:8a:
e2:ba:6e:ae:0d:bc:fa:66:03:44:c9:87:7c:12:5c:
31:2f:94:65:52:19:69:11:89:6c:44:9d:cc:bf:bc:
85:21:53:30:03:d8:ac:67:31:23:b8:0d:ab:08:7c:
6d:d1:99:77:30:36:13:25:70:a4:04:d5:94:67:c2:
c1:b3:57:40:b2:ac:02:54:b3:49:22:1b:c1:9d:e4:
0a:e0:a2:37:7e:36:d2:3e:e9:7f:cd:e5:fe:5f:89:
ee:bc:a8:72:4f:c9:33:6f:67:fd:0d:28:fe:1c:d1:
9d:c0:e9:f2:34:9a:77:41:27:d1:b2:40:ce:f0:76:
75:da:14:08:26:35:78:0d:a1:04:1d:95:e8:25:71:
9c:82:e7:53:08:c2:4d:6e:4a:a3:ee:3f:19:c1:bc:
46:34:88:45:36:84:ea:7e:a9:ef:50:a2:f3:f7:4e:
cb:33:7b:e6:7c:87:1e:d0:2d:41:b0:c8:30:31:da:
32:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:09:59:B7:AD:C6:25:F3:6A:6C:E4:9E:CA:5B:AA:38:24:92:2A:C0
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/pAlZt63GJfNqbOSeyluqOCSSKsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.60.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:49:cb:d1:15:0f:71:5b:e3:fe:2a:c3:01:56:30:88:6b:5b:
5c:3a:44:a6:45:29:5f:94:13:e0:37:b1:9d:4b:34:c0:db:c8:
47:19:2c:05:7e:52:8f:37:33:2d:3c:fd:52:a8:36:45:24:9d:
29:91:1e:bc:cf:ef:28:bb:01:d0:dc:85:a3:2c:fe:59:29:fd:
9b:16:9a:61:cb:55:20:ce:13:ec:80:24:e6:93:e5:7c:22:65:
bc:f0:72:dc:08:f6:bd:e5:33:c0:70:af:36:3c:53:31:a2:ce:
78:6b:db:1d:5e:0a:b1:f8:cb:7e:37:d8:ae:a2:31:62:76:2e:
13:9c:01:65:ba:ca:df:f4:9e:85:d7:4a:0a:a0:20:81:b0:43:
bc:ac:da:be:43:05:86:86:cb:4b:ab:64:6a:71:9e:05:e8:f9:
31:70:92:c2:66:49:a0:a1:d2:63:73:56:7c:ef:f9:9c:d2:32:
df:0d:5c:92:89:4c:c7:aa:be:d8:ea:1d:7a:e6:e0:bb:47:7f:
c0:eb:18:33:71:28:f5:e8:6f:e5:e3:3d:a8:af:72:f2:23:0d:
29:22:4f:a3:6c:3a:a4:05:1f:2d:e8:30:b1:55:ab:11:d9:b4:
87:be:50:f7:96:72:14:95:a4:c4:d2:3a:86:da:7a:2b:b1:7f:
c6:85:bf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:52:40 2025 by rpki-client