Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/bc2m2ajB7PjAKyEfuwm93G0I4rI.roa
File: bc2m2ajB7PjAKyEfuwm93G0I4rI.roa (raw, json)
Hash identifier: O/yPJCLJm/kRJNpN0DDj7BTmGnjg0JDd1vypJe+zihw=
Subject key identifier: 6D:CD:A6:D9:A8:C1:EC:F8:C0:2B:21:1F:BB:09:BD:DC:6D:08:E2:B2
Certificate issuer: /CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Certificate serial: 0185F15FD6BFE105A9EA1F25BCAACF76C06A
Authority key identifier: 4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/bc2m2ajB7PjAKyEfuwm93G0I4rI.roa
Signing time: Fri 27 Jan 2023 03:57:47 +0000
ROA not before: Fri 27 Jan 2023 03:57:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51515
IP address blocks: 46.45.0.0/22 maxlen: 22
46.45.4.0/22 maxlen: 22
46.45.8.0/22 maxlen: 22
46.45.12.0/23 maxlen: 23
46.45.16.0/24 maxlen: 24
46.45.17.0/24 maxlen: 24
46.45.14.0/24 maxlen: 24
46.45.15.0/24 maxlen: 24
46.45.19.0/24 maxlen: 24
46.45.20.0/24 maxlen: 24
46.45.18.0/24 maxlen: 24
46.45.23.0/24 maxlen: 24
46.45.24.0/24 maxlen: 24
46.45.21.0/24 maxlen: 24
46.45.22.0/24 maxlen: 24
46.45.26.0/24 maxlen: 24
46.45.27.0/24 maxlen: 24
46.45.25.0/24 maxlen: 24
46.45.30.0/24 maxlen: 24
46.45.31.0/24 maxlen: 24
46.45.28.0/24 maxlen: 24
46.45.29.0/24 maxlen: 24
46.45.33.0/24 maxlen: 24
46.45.34.0/23 maxlen: 23
46.45.32.0/24 maxlen: 24
46.45.36.0/23 maxlen: 23
46.45.40.0/22 maxlen: 22
46.45.44.0/22 maxlen: 22
46.45.38.0/23 maxlen: 23
46.45.48.0/24 maxlen: 24
46.45.51.0/24 maxlen: 24
46.45.52.0/24 maxlen: 24
46.45.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f1:5f:d6:bf:e1:05:a9:ea:1f:25:bc:aa:cf:76:c0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Validity
Not Before: Jan 27 03:57:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dcda6d9a8c1ecf8c02b211fbb09bddc6d08e2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:3d:9d:c2:2b:dc:97:64:48:9f:a3:41:f6:
5a:dc:3b:cc:7f:57:18:28:3f:f2:13:dd:ce:b3:14:
1a:38:28:97:de:c3:28:6d:be:c8:bb:a8:4c:f9:59:
6a:a5:f8:25:d1:f7:f9:d5:5d:f5:15:12:ab:bb:90:
ef:0f:2e:b7:96:38:18:a3:56:87:c3:f0:0a:4f:dd:
28:f5:a7:64:f9:02:ff:81:29:32:68:14:b4:bc:e5:
32:26:2c:77:45:94:5b:f4:dd:9f:ba:a2:9b:f2:e0:
8f:2a:16:91:9d:0f:70:55:3f:20:ce:2c:26:3e:a7:
4e:f7:4e:0a:e9:14:dc:b7:9b:99:69:56:06:9a:5e:
df:7f:63:1e:04:00:a3:94:a0:0a:56:dd:15:9d:cb:
ec:f3:8f:78:eb:e8:9b:fd:99:fd:6e:40:d4:36:7d:
90:0a:18:90:9a:eb:ee:72:91:96:da:c1:b1:8e:f6:
53:d2:e0:8e:72:15:4d:fd:e0:87:95:66:b4:46:be:
ca:1b:74:46:a0:63:4f:bc:0e:76:43:e9:03:c3:68:
d4:8e:fd:0b:97:16:05:d7:e1:c2:07:3b:98:8e:4c:
08:06:30:6e:ab:40:19:b0:ee:cf:1d:f9:6c:23:7a:
f9:59:b3:42:76:d3:d8:02:cd:c3:05:2f:75:5f:d1:
e4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CD:A6:D9:A8:C1:EC:F8:C0:2B:21:1F:BB:09:BD:DC:6D:08:E2:B2
X509v3 Authority Key Identifier:
keyid:4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/bc2m2ajB7PjAKyEfuwm93G0I4rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.45.0.0-46.45.48.255
46.45.51.0-46.45.53.255
Signature Algorithm: sha256WithRSAEncryption
09:56:7e:57:89:26:4f:99:45:f8:7c:22:46:59:b3:97:f7:a2:
e6:03:a3:b7:b4:c3:31:23:72:a5:8d:10:b9:0c:3c:44:a9:8a:
9d:11:53:47:8f:e8:73:70:8c:26:cb:b6:8e:8c:c1:78:57:13:
0e:49:40:a4:7f:8f:8d:88:6b:76:6f:db:00:80:2c:32:69:d0:
fd:80:7c:b7:6a:5b:9d:0e:a6:d2:62:87:86:8e:2a:2e:0f:98:
5d:d2:63:0f:d9:b1:a0:b3:6b:03:b6:69:66:a2:56:b6:5d:40:
5e:18:01:ff:74:c9:b1:a6:01:71:ae:65:34:c3:d5:da:be:16:
32:48:f2:b3:eb:67:85:28:92:cf:9f:82:f5:d6:48:d6:3f:3e:
79:71:42:a6:29:93:4c:3b:08:e5:20:ad:f9:6b:7a:b8:09:1c:
13:7b:3e:12:68:9a:47:48:aa:fb:41:72:be:0d:3c:a5:00:1f:
3e:c2:58:6d:54:98:81:97:33:dd:b0:94:81:62:6a:bb:2d:81:
c2:de:c6:59:0f:7e:b8:75:c2:05:ea:d8:f9:f0:73:72:61:65:
62:04:36:d2:e9:c4:8b:b0:eb:af:5f:44:16:f0:90:53:a8:e4:
f1:2f:c9:0a:94:95:39:ff:c5:15:be:a5:79:b7:2a:c3:fa:66:
1b:e5:54:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:37:12 2025 by rpki-client