Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/bMWA0i5fNk7V_qWHYAflPkYFNcc.roa
File: bMWA0i5fNk7V_qWHYAflPkYFNcc.roa (raw, json)
Hash identifier: Cd3gw4C26fWLSHsLFUzph7170omZSZvw2AhT0wJZuPE=
Subject key identifier: 6C:C5:80:D2:2E:5F:36:4E:D5:FE:A5:87:60:07:E5:3E:46:05:35:C7
Certificate issuer: /CN=ebdb225471f2d6e41060b34185725485481014b8
Certificate serial: 01856E2673827CCFCD6FFD1EE80768169415
Authority key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/bMWA0i5fNk7V_qWHYAflPkYFNcc.roa
Signing time: Sun 01 Jan 2023 16:24:51 +0000
ROA not before: Sun 01 Jan 2023 16:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208045
IP address blocks: 151.249.126.0/24 maxlen: 24
2a01:5b40:ac3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:73:82:7c:cf:cd:6f:fd:1e:e8:07:68:16:94:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdb225471f2d6e41060b34185725485481014b8
Validity
Not Before: Jan 1 16:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6cc580d22e5f364ed5fea5876007e53e460535c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3a:cd:63:23:c8:69:59:8f:49:b3:f0:ce:47:
d3:d0:41:ce:94:f3:dd:7b:0f:d7:34:81:cc:05:ac:
b6:4f:85:93:5d:ed:a5:8a:9b:ba:fd:50:37:71:c7:
a4:74:37:7c:af:ab:d2:94:f0:06:d9:46:6d:42:22:
a4:99:23:90:86:1d:2c:ba:88:f7:21:79:ee:23:6e:
40:18:16:59:90:6b:f5:dc:d4:ac:a1:31:ca:e2:d2:
01:18:f8:93:4e:29:8a:33:a1:29:53:4d:7d:b6:28:
bf:43:38:66:ba:e6:54:3d:ef:8d:57:89:ef:5f:d8:
92:0b:37:2c:96:70:ce:57:de:5f:bb:1d:65:af:c0:
e7:67:99:58:9d:0f:17:34:8e:7d:7a:f6:de:1c:73:
21:44:33:69:41:0f:c4:e1:a7:71:a9:64:81:2b:06:
77:c6:18:db:0b:4e:bf:23:6e:d6:b5:21:08:96:cf:
9a:a5:a4:b3:3a:84:fc:d4:2d:66:80:34:e4:9c:52:
b0:a8:de:de:ad:09:a0:09:51:8f:73:3c:11:fc:41:
b2:8f:77:7d:83:71:95:d7:72:20:a9:4c:46:bf:2c:
44:c8:13:99:32:61:3a:44:51:59:80:3c:75:99:73:
ec:7e:91:ff:42:28:60:9d:83:0f:71:15:ea:e1:2c:
7c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C5:80:D2:2E:5F:36:4E:D5:FE:A5:87:60:07:E5:3E:46:05:35:C7
X509v3 Authority Key Identifier:
keyid:EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/bMWA0i5fNk7V_qWHYAflPkYFNcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.249.126.0/24
IPv6:
2a01:5b40:ac3::/48
Signature Algorithm: sha256WithRSAEncryption
2c:66:ac:a8:15:67:b0:7c:a7:fc:f9:ed:b7:98:dc:e7:b9:3e:
68:52:ac:fa:a5:76:88:a7:3e:61:ab:fb:55:9e:f6:ca:21:41:
3c:6f:f3:ca:a5:03:30:ba:f2:9a:1a:38:84:41:d9:d6:43:69:
b6:4b:79:4c:49:d4:8c:9c:7f:3d:66:6c:06:fb:87:2e:e3:76:
10:f4:31:db:b5:74:4e:8c:29:c0:c0:5f:af:92:0e:01:ba:79:
97:1b:e5:b9:97:79:db:14:87:99:c9:b8:6f:4b:ba:be:fd:e8:
8e:cb:47:37:c6:14:44:7b:88:00:1c:d2:eb:16:02:b3:2d:96:
15:26:6a:2e:7d:86:f1:5c:bb:87:07:bd:5d:a2:d1:26:f1:fd:
3a:8e:ac:c1:34:74:1d:56:24:d2:fe:63:12:2d:36:c3:c4:03:
3c:2b:2f:c4:ff:7e:4f:74:b6:04:fb:b9:7a:ce:e8:13:cb:c0:
cd:ec:5b:a3:4e:ee:61:4d:1a:b9:a6:bd:6f:99:f3:7b:aa:74:
e0:05:e2:99:f7:82:1a:99:9a:b8:aa:7d:76:a7:87:46:74:9a:
c8:20:f2:77:45:33:dd:b7:21:0a:bd:65:99:70:01:e5:02:af:
a4:b6:b3:98:84:f3:ac:48:d3:87:06:c8:83:1c:9a:a9:82:e6:
9e:8f:17:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:27:55 2025 by rpki-client