![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/WC-y3ABgsCHOESk5EBzP3DIX2Qw.roa
File: WC-y3ABgsCHOESk5EBzP3DIX2Qw.roa (raw, json)
Hash identifier: L2WZNjwVsB8/SawE0e2i9eZ4CBpBjDaHLthxYCjbW04=
Subject key identifier: 58:2F:B2:DC:00:60:B0:21:CE:11:29:39:10:1C:CF:DC:32:17:D9:0C
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 380C43B7
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/WC-y3ABgsCHOESk5EBzP3DIX2Qw.roa
Signing time: Wed 19 Jan 2022 10:14:10 +0000
ROA not before: Wed 19 Jan 2022 10:14:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210050
IP address blocks: 46.229.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940327863 (0x380c43b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 19 10:14:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=582fb2dc0060b021ce112939101ccfdc3217d90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:41:f0:64:e5:ac:8f:bd:8d:4d:d1:cb:6b:
ad:b9:19:29:87:c4:10:dc:2a:be:36:ea:30:d9:46:
25:c7:da:ad:3e:56:f6:83:2a:3e:a9:48:f0:cb:83:
38:db:66:9e:63:1e:f0:a3:01:8d:72:ef:20:de:bc:
7a:12:9a:f4:4c:96:f1:fe:83:48:a1:c2:0a:a5:8d:
a5:72:a6:bc:82:d9:70:65:fe:99:a2:ac:42:1a:d7:
22:8c:64:1a:64:e8:45:32:fe:c8:2b:33:b7:01:d2:
ba:aa:2c:62:e5:0b:c7:fa:f5:f9:8a:37:0d:7d:c2:
cb:34:c7:ae:f0:2c:e1:2e:ff:fe:46:cd:c1:80:b9:
f1:d3:1d:d0:d9:08:19:28:93:f3:9a:3d:cc:b0:ca:
ec:8c:91:52:ca:cf:7e:2d:6f:15:5e:8c:93:17:46:
2c:25:a4:35:0e:3c:4b:6e:ed:c6:8a:15:8e:4a:fe:
0a:6f:a8:cb:0f:a3:92:87:9c:87:19:2c:12:b9:d8:
71:5e:bb:2f:31:94:3f:7a:a5:c9:05:98:51:76:ff:
b3:f9:0f:00:9d:e8:1d:58:8e:24:ae:5f:b3:fd:31:
1d:e0:74:16:6d:92:2b:fa:11:e8:26:39:bd:5c:c4:
2e:1b:88:93:35:dd:e8:28:ca:71:5c:82:b0:bf:7b:
53:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2F:B2:DC:00:60:B0:21:CE:11:29:39:10:1C:CF:DC:32:17:D9:0C
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/WC-y3ABgsCHOESk5EBzP3DIX2Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.52.0/24
Signature Algorithm: sha256WithRSAEncryption
49:af:b7:f3:a1:e1:2c:40:6b:34:0e:f7:c9:90:2b:d5:1b:f7:
5b:75:b1:6f:40:cc:ea:de:9e:b1:9a:d5:60:d6:74:f4:4f:46:
7c:ca:8b:9d:d7:73:dc:c0:5a:13:16:70:44:2f:55:e0:56:ec:
a8:b0:26:91:31:03:43:50:9c:fb:3d:b2:33:5b:98:e8:cd:82:
1a:c3:7f:34:8c:1f:c2:10:0c:8a:2b:c3:55:28:2f:8f:88:31:
d4:08:72:b6:10:24:e7:91:23:25:52:13:bf:12:ff:9e:01:eb:
42:f9:fa:72:5f:59:38:a7:de:c4:09:79:c0:c8:c9:0c:f3:a0:
50:da:66:f9:c5:a3:b4:56:6b:ca:83:ee:53:b6:ca:4e:f9:87:
9d:31:4c:e4:be:58:4b:84:c8:ae:92:a5:5c:c7:30:e3:b5:64:
67:c6:e0:80:83:27:ee:63:24:5b:be:04:45:4c:0e:68:2e:0a:
d0:00:0e:49:cd:2a:98:b7:15:09:fc:c9:ae:3c:f4:83:20:d0:
c9:2d:8d:b4:41:78:18:d0:15:e5:c9:bc:08:0b:ff:8b:5a:15:
46:87:d8:24:2c:6a:30:e0:e9:a5:f5:c8:ca:0b:f7:e6:bd:4b:
4e:7e:16:21:ed:1e:b2:8b:4a:c0:be:d8:ef:73:d4:eb:65:3e:
f8:7f:58:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:10 2025 by rpki-client