Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/bg6-HxKtuTXkohQqKj73-QaleV8.roa
File: bg6-HxKtuTXkohQqKj73-QaleV8.roa (raw, json)
Hash identifier: aaMuVAoZfY7swOrMo3bipY7u0iwgblp3yvM3aGymEWU=
Subject key identifier: 6E:0E:BE:1F:12:AD:B9:35:E4:A2:14:2A:2A:3E:F7:F9:06:A5:79:5F
Certificate issuer: /CN=b691d00bdb626ae57307d5cd4e8addd9475680b3
Certificate serial: 01856C138BBE0D2AF1E596EA73EA1886CF6B
Authority key identifier: B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/bg6-HxKtuTXkohQqKj73-QaleV8.roa
Signing time: Sun 01 Jan 2023 06:44:58 +0000
ROA not before: Sun 01 Jan 2023 06:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207583
IP address blocks: 2001:67c:2d34::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:8b:be:0d:2a:f1:e5:96:ea:73:ea:18:86:cf:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b691d00bdb626ae57307d5cd4e8addd9475680b3
Validity
Not Before: Jan 1 06:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e0ebe1f12adb935e4a2142a2a3ef7f906a5795f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:58:e1:64:82:ac:d8:d3:13:96:7b:a7:75:cb:
9c:2e:8c:a1:b7:05:5e:5b:2e:7c:6f:3c:a5:4f:ef:
4d:46:5b:af:83:07:db:15:ea:0e:b7:bf:87:7b:43:
96:fe:d9:d3:79:4f:03:f8:da:5b:c8:cb:05:94:e4:
47:8c:dc:6f:66:a4:97:74:6c:6b:99:6b:fd:e8:d0:
7f:36:5a:34:cc:b9:db:03:8d:90:ec:ec:17:ce:33:
8d:c0:7a:57:85:07:7e:22:a4:b7:9c:f0:8b:9c:5f:
a5:d0:3d:ca:65:fc:7f:5d:d5:b6:32:16:d6:13:ab:
a9:b2:8f:e1:27:18:64:73:dd:db:5a:c4:f2:11:73:
9b:45:a7:89:bc:24:89:17:d7:29:f7:86:92:6b:46:
94:da:04:3b:78:d2:21:10:d6:95:12:d5:ac:94:f2:
0f:c1:78:b2:f1:de:61:f7:7d:07:8a:85:83:97:f0:
85:5b:c1:c5:87:98:28:1b:6c:1f:9d:52:fa:d4:99:
bc:b6:0d:71:fe:9e:30:9a:22:c5:7c:dd:11:d3:a1:
a5:d5:00:35:75:7c:fb:f4:9c:cc:30:86:e4:4b:1c:
14:f7:d4:b9:7f:e5:1c:c8:41:2c:bd:10:f0:88:8f:
ed:c3:f4:18:ea:3f:92:f1:47:b9:54:ca:31:34:31:
a3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0E:BE:1F:12:AD:B9:35:E4:A2:14:2A:2A:3E:F7:F9:06:A5:79:5F
X509v3 Authority Key Identifier:
keyid:B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/bg6-HxKtuTXkohQqKj73-QaleV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2d34::/48
Signature Algorithm: sha256WithRSAEncryption
16:b4:78:2c:43:5f:77:d7:2a:9d:f4:b1:17:33:9d:f4:90:54:
a6:e3:1f:20:29:c2:6d:c2:28:45:d9:00:bf:a8:8d:ab:d3:4f:
dc:d2:27:72:2a:48:96:7c:90:ff:0b:28:28:52:d4:0e:0a:d0:
e7:86:20:5d:6b:82:92:b0:32:a9:a2:3d:d1:42:1c:3c:61:e1:
6e:c8:10:b5:7c:29:26:b1:61:23:e1:20:5e:c4:47:a4:42:90:
c8:d3:8d:0f:43:87:84:17:33:d3:da:4e:4f:d5:8a:7f:8b:59:
24:9b:5e:1e:3e:8b:24:dc:ab:2d:17:cc:c9:35:40:c1:a6:24:
08:4a:ec:94:f1:96:8b:73:3f:b8:ee:fa:37:dd:ab:34:7f:15:
61:1c:a2:c9:a8:d3:71:ea:b3:49:40:07:e0:ec:bb:8f:ef:3a:
74:c4:f1:20:cb:e5:55:73:a6:af:9a:fd:f5:e9:e7:c7:21:40:
76:fb:93:68:bc:4e:ce:26:6f:d6:ab:af:bd:db:3e:00:65:40:
ab:83:95:f5:c2:cc:b0:79:b2:53:73:b7:b9:0b:ee:4d:3b:95:
26:73:c1:7e:d0:c2:44:ca:07:bb:5b:24:0b:cd:83:95:8c:a8:
19:0a:b7:63:4d:5d:a8:6e:44:d0:4a:e6:04:86:18:41:94:98:
6c:a7:62:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:34 2025 by rpki-client