Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/BCnTMlg2pR0N-qIDfLMRzTle5io.roa
File: BCnTMlg2pR0N-qIDfLMRzTle5io.roa (raw, json)
Hash identifier: Bs1qSW4h5VrSqZXLZTNhvfJTt4U9MzYuudjlgBZIlsk=
Subject key identifier: 04:29:D3:32:58:36:A5:1D:0D:FA:A2:03:7C:B3:11:CD:39:5E:E6:2A
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F0249D92329AA46BC58939A732827AF
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/BCnTMlg2pR0N-qIDfLMRzTle5io.roa
Signing time: Sun 01 Jan 2023 20:24:58 +0000
ROA not before: Sun 01 Jan 2023 20:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60066
IP address blocks: 159.148.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:49:d9:23:29:aa:46:bc:58:93:9a:73:28:27:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0429d3325836a51d0dfaa2037cb311cd395ee62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:2f:0d:bb:43:91:3c:dd:d2:a5:95:39:74:
3d:91:14:c1:ba:56:11:4f:98:57:ec:2b:ae:32:b4:
92:a8:9e:13:07:bc:e7:1b:ae:aa:ba:eb:0d:b5:29:
6a:28:20:64:3d:cd:ae:87:1c:8c:43:11:f5:1c:85:
1f:7c:85:58:ab:9d:43:77:c9:3d:62:22:45:9d:92:
aa:53:3a:4f:46:72:ea:26:ca:c8:b4:8c:19:16:87:
4a:f9:d0:e4:26:2e:f7:e5:0e:1b:e7:db:cc:0c:85:
21:3a:21:c7:54:cc:dd:8a:31:eb:27:42:71:d8:2a:
1f:1e:8d:fd:cd:b1:13:5c:4c:f7:ee:1a:bf:00:2f:
0c:04:57:c8:4b:fc:b6:71:f1:ba:d2:c6:5e:24:2b:
b9:18:1b:93:a4:2d:51:eb:56:ba:29:73:6b:66:18:
e6:64:0e:93:65:73:aa:52:04:11:4d:75:84:0a:f0:
1a:37:b0:b5:de:0d:fe:bf:9d:cf:5c:bb:2a:dd:ac:
2d:af:f9:ac:cf:56:49:d3:65:31:1d:02:34:cd:ef:
c8:3e:fc:93:26:71:9a:23:df:d2:1f:66:8d:70:36:
73:7f:45:6a:a0:9f:20:26:26:02:cc:5d:e6:cf:6d:
05:e5:46:1c:55:27:be:6d:f0:af:3f:05:3b:59:ef:
fc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:29:D3:32:58:36:A5:1D:0D:FA:A2:03:7C:B3:11:CD:39:5E:E6:2A
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/BCnTMlg2pR0N-qIDfLMRzTle5io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.119.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:56:18:21:8a:d6:9d:61:7d:7f:78:28:ee:79:a4:f4:8c:70:
62:fd:cf:ea:7a:0d:8d:a8:7a:1e:7b:27:23:d4:2c:a5:81:a2:
d1:50:4c:bf:82:b5:ab:bd:c0:dc:11:c2:20:0e:ca:55:c5:62:
06:25:63:2f:b8:46:0b:0a:e5:fc:4b:8c:15:90:5f:de:68:be:
07:fe:8e:19:b4:58:fd:28:78:6d:4e:3f:39:24:6a:be:72:96:
41:5f:6f:68:75:19:9a:1c:08:4f:7c:6b:7b:0d:5f:f6:48:c6:
4d:c4:54:32:71:76:49:47:f0:ba:16:1d:82:74:57:2e:74:a7:
ea:dc:40:8b:07:a6:60:a6:a3:09:e4:51:59:10:69:ff:5a:12:
15:fa:f8:4d:d4:42:7a:a1:04:57:04:33:59:0c:4d:a8:39:f0:
21:76:7f:40:b8:01:be:b6:7d:9c:a5:b2:43:8c:47:f4:18:97:
fd:e1:d8:8d:5f:0d:44:b4:62:d4:8f:8c:1e:b7:ac:3d:ea:42:
f8:8b:3c:99:2c:e3:c1:ab:81:29:71:50:83:62:68:66:3e:06:
d3:c2:56:82:97:0d:9b:5f:a3:a8:c9:52:3b:3e:41:5a:2f:77:
31:5e:04:9e:1c:d7:69:a7:99:98:f7:e5:ca:77:18:2e:f6:d4:
1d:b7:ae:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvAknZIymqRrxYk5pzKCevMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjMwMTAxMjAyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDI5ZDMzMjU4MzZhNTFkMGRmYWEyMDM3Y2IzMTFjZDM5NWVlNjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxUvDbtDkTzd0qWVOXQ9kRTBulYR
T5hX7CuuMrSSqJ4TB7znG66quusNtSlqKCBkPc2uhxyMQxH1HIUffIVYq51Dd8k9
YiJFnZKqUzpPRnLqJsrItIwZFodK+dDkJi735Q4b59vMDIUhOiHHVMzdijHrJ0Jx
2CofHo39zbETXEz37hq/AC8MBFfIS/y2cfG60sZeJCu5GBuTpC1R61a6KXNrZhjm
ZA6TZXOqUgQRTXWECvAaN7C13g3+v53PXLsq3awtr/msz1ZJ02UxHQI0ze/IPvyT
JnGaI9/SH2aNcDZzf0VqoJ8gJiYCzF3mz20F5UYcVSe+bfCvPwU7We/8VQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAQp0zJYNqUdDfqiA3yzEc05XuYqMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvQkNuVE1sZzJwUjBOLXFJRGZMTVJ6VGxlNWlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5R3MA0G
CSqGSIb3DQEBCwUAA4IBAQCyVhghitadYX1/eCjueaT0jHBi/c/qeg2NqHoeeycj
1CylgaLRUEy/grWrvcDcEcIgDspVxWIGJWMvuEYLCuX8S4wVkF/eaL4H/o4ZtFj9
KHhtTj85JGq+cpZBX29odRmaHAhPfGt7DV/2SMZNxFQycXZJR/C6Fh2CdFcudKfq
3ECLB6ZgpqMJ5FFZEGn/WhIV+vhN1EJ6oQRXBDNZDE2oOfAhdn9AuAG+tn2cpbJD
jEf0GJf94diNXw1EtGLUj4wet6w96kL4izyZLOPBq4EpcVCDYmhmPgbTwlaClw2b
X6OoyVI7PkFaL3cxXgSeHNdpp5mY9+XKdxgu9tQdt673
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:50 2025 by rpki-client