Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/BCmKJYTiAXAIW-XQPDM-G8QqE4E.roa
File: BCmKJYTiAXAIW-XQPDM-G8QqE4E.roa (raw, json)
Hash identifier: SsM/RbF8WuK5OXSAf6EU61TPgH7W4w5wORZFYenJlfI=
Subject key identifier: 04:29:8A:25:84:E2:01:70:08:5B:E5:D0:3C:33:3E:1B:C4:2A:13:81
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 01857203464029D0A0BFDF89BF87DB017D6C
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/BCmKJYTiAXAIW-XQPDM-G8QqE4E.roa
Signing time: Mon 02 Jan 2023 10:24:55 +0000
ROA not before: Mon 02 Jan 2023 10:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201735
IP address blocks: 213.162.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:46:40:29:d0:a0:bf:df:89:bf:87:db:01:7d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Jan 2 10:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04298a2584e20170085be5d03c333e1bc42a1381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:d7:83:83:c2:67:08:76:62:94:49:21:b3:
fb:25:08:74:40:ec:b3:e7:e6:ca:04:1f:30:ac:24:
fb:0c:66:f3:54:1c:1c:e6:61:c9:ca:b8:9d:62:4c:
df:21:78:b2:ae:57:b4:fe:b7:cc:b0:c2:59:be:ae:
88:41:da:21:b8:5f:fe:bf:a6:71:16:2f:1b:61:70:
76:e2:4d:d6:07:48:35:49:fe:ae:e1:78:3b:1e:09:
8f:0c:d3:bb:b5:ff:1b:99:29:d2:79:0b:df:46:b9:
8f:eb:73:92:b0:a5:a1:26:97:0a:5e:3b:94:0e:a0:
2c:a0:66:a2:40:be:38:93:17:83:52:08:37:69:aa:
99:bc:4c:bd:16:8d:63:b2:e1:20:74:d5:8f:59:fd:
a7:a7:01:a5:9b:ea:00:69:09:6e:d3:a2:72:a2:20:
06:b7:86:46:6b:2e:32:41:5c:f4:54:c9:64:78:6b:
80:99:6d:1c:06:bc:cd:74:dc:98:45:8a:ef:ec:7e:
db:9c:e7:41:e0:68:a1:43:9c:dc:3e:78:3c:f4:f4:
43:ce:bc:35:c8:70:d9:4f:dc:2b:c7:d5:c5:7a:02:
dd:f1:d1:c3:e9:2e:e8:71:c7:8e:31:54:6d:32:5c:
10:01:c4:0a:b5:16:c0:ac:46:67:8b:34:c9:db:29:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:29:8A:25:84:E2:01:70:08:5B:E5:D0:3C:33:3E:1B:C4:2A:13:81
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/BCmKJYTiAXAIW-XQPDM-G8QqE4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.162.220.0/24
Signature Algorithm: sha256WithRSAEncryption
11:5d:25:4c:9a:3d:92:cc:2e:0f:52:88:3c:f6:0d:17:f0:5a:
76:da:bc:9e:db:9c:55:ea:2d:69:6e:1f:fe:1a:2c:18:38:6a:
55:24:34:1c:fd:20:d0:95:5e:e2:9f:58:61:93:4b:24:8e:06:
a0:2f:32:0f:0c:5d:b6:69:15:ac:2e:d3:1b:e4:a9:0e:e9:4e:
eb:97:b1:29:40:02:40:bc:11:77:77:78:71:24:27:85:02:9e:
48:96:7f:37:61:5a:e9:e1:16:54:91:52:e6:f5:06:9f:3a:c4:
8a:85:76:ee:53:ab:8c:22:c4:26:ef:56:2f:08:33:f3:ca:34:
3f:70:bc:42:61:fa:e6:e3:f2:2d:a9:18:f7:9e:9c:66:30:26:
5a:1f:06:4d:d3:ef:5b:a5:2d:70:77:90:74:9c:a2:c9:10:8f:
d9:0a:c7:8e:62:d7:92:4c:16:ad:b6:a8:b5:df:d2:31:a0:43:
b9:de:86:d8:f7:5d:18:25:ea:d7:0c:0e:66:ce:ac:06:3b:06:
aa:80:c3:c5:e7:87:66:be:56:01:3d:8f:fc:fb:80:b5:a3:48:
64:aa:e5:06:52:7e:ac:8d:8f:56:7a:fa:f7:f2:60:2b:ca:12:
f8:5a:76:2f:45:e7:88:df:0e:0b:c4:bd:57:2e:c9:29:d8:eb:
a2:65:62:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:11 2025 by rpki-client