Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/lgtUmqcmsTJ-6AzEtVdItKPNu8o.roa
File: lgtUmqcmsTJ-6AzEtVdItKPNu8o.roa (raw, json)
Hash identifier: wpIGMkK2YY8IXusUbrHBu55FKMNwyUl64WQ3YB9FNPU=
Subject key identifier: 96:0B:54:9A:A7:26:B1:32:7E:E8:0C:C4:B5:57:48:B4:A3:CD:BB:CA
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 0789A694
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/lgtUmqcmsTJ-6AzEtVdItKPNu8o.roa
Signing time: Sat 01 Jan 2022 01:56:07 +0000
ROA not before: Sat 01 Jan 2022 01:56:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44558
IP address blocks: 46.106.192.0/24 maxlen: 24
46.106.196.0/24 maxlen: 24
46.106.193.0/24 maxlen: 24
46.106.197.0/24 maxlen: 24
46.106.194.0/24 maxlen: 24
46.106.198.0/24 maxlen: 24
46.106.195.0/24 maxlen: 24
46.106.199.0/24 maxlen: 24
46.106.200.0/24 maxlen: 24
46.106.201.0/24 maxlen: 24
46.106.203.0/24 maxlen: 24
46.106.202.0/24 maxlen: 24
46.106.209.0/24 maxlen: 24
46.106.213.0/24 maxlen: 24
46.106.208.0/24 maxlen: 24
46.106.212.0/24 maxlen: 24
46.106.211.0/24 maxlen: 24
46.106.210.0/24 maxlen: 24
46.106.217.0/24 maxlen: 24
46.106.216.0/24 maxlen: 24
46.106.215.0/24 maxlen: 24
46.106.219.0/24 maxlen: 24
46.106.214.0/24 maxlen: 24
46.106.218.0/24 maxlen: 24
46.106.221.0/24 maxlen: 24
46.106.220.0/24 maxlen: 24
46.106.223.0/24 maxlen: 24
46.106.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126461588 (0x789a694)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Jan 1 01:56:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=960b549aa726b1327ee80cc4b55748b4a3cdbbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:48:78:c4:2a:0e:24:52:be:a6:23:4b:df:
d9:eb:d4:43:92:64:9f:09:a1:b4:f8:ed:fa:a7:a9:
f8:f6:9d:42:22:d4:fc:d8:37:8f:b1:25:2c:ff:4d:
ef:20:43:5d:18:aa:ed:e4:0f:24:26:be:d3:05:19:
8c:89:3f:15:11:12:52:8f:4f:f0:5e:9b:1e:c3:2d:
57:dc:7f:a4:c4:be:37:80:8e:04:bb:11:32:dd:81:
d5:67:dc:b9:7d:4e:62:f8:34:7e:1c:38:4b:93:72:
aa:d6:63:d5:5d:2d:7a:0c:0e:15:49:87:e4:6a:b1:
b9:61:41:84:35:e6:d9:2d:da:64:cc:ad:c3:0c:ec:
ae:b1:56:0a:dc:cd:75:35:5d:05:b7:42:55:88:46:
24:25:a5:51:6e:0d:66:3b:3d:d8:6f:0c:74:ac:77:
4c:b5:05:b5:03:2b:a2:39:09:f8:00:3e:a0:7a:42:
07:e5:f4:b7:61:2e:ba:d8:78:0b:cc:32:fc:36:e4:
ba:9c:c8:ee:00:91:db:ca:70:c0:9a:37:0f:0f:1b:
62:67:e1:2b:e9:0c:9e:be:b0:85:8c:e8:a5:b9:a0:
8b:4a:f6:46:23:4c:ea:7f:6c:61:63:dc:c5:38:29:
4d:c4:a9:a2:55:34:61:03:a5:bf:1d:32:f0:92:03:
21:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0B:54:9A:A7:26:B1:32:7E:E8:0C:C4:B5:57:48:B4:A3:CD:BB:CA
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/lgtUmqcmsTJ-6AzEtVdItKPNu8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.106.192.0-46.106.203.255
46.106.208.0/20
Signature Algorithm: sha256WithRSAEncryption
28:0e:78:63:27:74:ec:87:1b:60:25:d8:3d:02:2a:2f:62:08:
eb:4b:6c:18:8e:c4:dd:52:1c:d6:e9:6a:04:02:6f:39:d3:f7:
52:93:93:e0:18:89:3d:b6:d4:06:e9:09:8a:c9:09:34:0d:f5:
1b:97:af:3f:b7:22:5f:5d:fb:59:8f:bc:ea:43:f2:45:bc:2d:
5b:ab:4f:ec:67:e2:ea:66:35:21:0d:c3:cb:79:ed:6f:45:dd:
86:5d:70:c0:09:c0:ee:67:e3:0e:24:b6:ac:d8:ae:67:6f:53:
8b:b6:10:a8:9d:e3:ab:4a:2f:61:c9:0a:3f:92:92:1b:0f:ae:
51:0c:87:0a:54:73:79:77:58:c5:f2:44:08:78:a9:b0:6d:32:
4f:27:c4:af:7f:76:8e:41:1c:f8:03:a6:74:8f:e0:f1:08:26:
19:0c:f9:9e:06:e8:73:47:b2:ff:9d:23:54:d8:47:83:61:16:
7d:3c:3a:9b:ca:38:62:19:cf:3a:7c:85:52:64:39:ec:3c:01:
d9:76:3a:3d:88:e7:c8:00:f0:7c:78:16:03:8c:00:39:e0:b8:
2f:db:99:87:fd:d1:09:a0:c9:89:a9:8a:75:27:75:b1:ec:ba:
08:6a:5f:e9:a1:15:7f:f1:14:b7:1f:1b:f2:9f:99:60:99:86:
ff:b6:94:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:32:52 2025 by rpki-client