Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/Iov6gMwcJyMLVrXLi_LKW4Dgpp0.roa
File: Iov6gMwcJyMLVrXLi_LKW4Dgpp0.roa (raw, json)
Hash identifier: xmiZ282MkVcI++DUDRWzoMc/3DPM0FmsTmWF4XB9h3g=
Subject key identifier: 22:8B:FA:80:CC:1C:27:23:0B:56:B5:CB:8B:F2:CA:5B:80:E0:A6:9D
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 38D3EAC0
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/Iov6gMwcJyMLVrXLi_LKW4Dgpp0.roa
Signing time: Wed 13 Apr 2022 18:42:57 +0000
ROA not before: Wed 13 Apr 2022 18:42:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210490
IP address blocks: 46.229.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953412288 (0x38d3eac0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Apr 13 18:42:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=228bfa80cc1c27230b56b5cb8bf2ca5b80e0a69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:d1:36:43:1f:11:ac:ea:57:32:b6:46:02:
04:4c:90:00:83:bc:b0:99:0a:b7:4d:14:2b:0f:d0:
0a:df:13:d6:31:74:6f:ba:c1:f0:36:62:01:08:17:
51:db:92:90:bc:0a:3b:e4:cb:49:27:f2:89:0f:12:
57:d6:20:c2:79:e4:80:fa:38:0d:26:73:62:4e:c3:
cf:7c:6f:eb:e0:13:a6:27:9f:95:89:30:c1:06:9f:
76:9a:7b:0f:60:92:7d:42:67:8f:2e:6d:ac:08:1e:
78:da:bc:5e:2f:de:fb:ef:3f:7e:65:26:a4:45:1a:
1d:f1:b1:d5:23:65:ef:a7:27:cc:fb:77:7b:04:08:
ff:aa:32:1b:eb:c2:a0:1d:03:de:fd:20:16:0c:c2:
6e:4d:72:a8:97:42:df:81:b9:f3:62:ea:f3:03:24:
0b:c7:89:1c:fe:0e:c8:98:c7:0e:58:e0:0a:d4:74:
05:5b:f6:be:87:f2:60:97:93:a5:77:7b:2d:6b:5d:
9e:ad:f8:4c:7e:ce:85:04:f0:a7:b8:88:ca:b5:e4:
7b:2c:23:9f:c0:eb:96:f6:30:9b:a0:61:8a:d6:f0:
04:c9:25:08:d3:19:75:c0:fd:dc:7b:eb:d5:99:f1:
07:82:39:c7:0b:d1:7c:fc:70:e4:ab:55:57:e2:47:
43:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8B:FA:80:CC:1C:27:23:0B:56:B5:CB:8B:F2:CA:5B:80:E0:A6:9D
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/Iov6gMwcJyMLVrXLi_LKW4Dgpp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.54.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:2d:84:f4:ec:f9:01:45:e2:79:2d:3f:e6:18:1f:ff:91:03:
94:d1:d4:5d:27:4e:19:72:bd:96:ce:c6:14:b9:91:e4:93:cd:
dc:27:31:e3:4e:84:b6:7d:28:a4:b6:77:bf:cf:bc:00:10:34:
68:bc:9e:dd:1c:01:ad:46:c2:2c:a3:9a:24:b6:91:30:c2:54:
2f:dc:b5:35:31:93:09:0c:9f:f2:bc:cf:32:6b:84:d8:4e:c1:
0a:37:49:22:3a:1f:b7:6b:f5:5f:ff:a6:b0:71:35:d3:ac:a0:
a3:cb:c6:9f:1e:70:ce:ae:f5:72:39:bd:ac:c9:00:24:41:1c:
36:24:dd:52:eb:5f:e4:e0:bf:34:bc:35:7c:50:6f:cd:79:ab:
2a:e9:5f:e3:90:07:3e:05:b0:5c:3f:5b:81:1e:8f:29:f7:5c:
ce:61:d4:01:76:74:31:31:c4:6d:c0:91:51:07:26:9f:63:3c:
c0:17:37:bf:e7:b7:51:53:b0:c0:a4:22:c2:c9:13:55:c4:8d:
4f:77:61:4c:2f:2d:97:22:41:17:31:a9:26:17:17:63:f2:2b:
76:76:91:c2:39:e3:dd:d7:e3:a9:66:e2:d2:e5:09:c2:73:0f:
73:3a:dc:62:26:ea:59:d5:ef:21:8c:b6:1b:f3:5f:cb:ee:a4:
ed:91:30:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:49 2025 by rpki-client