Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/BmpOfdQyJeipExnN3JqiGilkkkQ.roa
File: BmpOfdQyJeipExnN3JqiGilkkkQ.roa (raw, json)
Hash identifier: LgKRztXI2li5kmubpVHrhLcgDGDXV2NZSzwsxwJUxy0=
Subject key identifier: 06:6A:4E:7D:D4:32:25:E8:A9:13:19:CD:DC:9A:A2:1A:29:64:92:44
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 01857102BC768FD5612C799544FD414A42AD
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/BmpOfdQyJeipExnN3JqiGilkkkQ.roa
Signing time: Mon 02 Jan 2023 05:44:42 +0000
ROA not before: Mon 02 Jan 2023 05:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28878
IP address blocks: 2a07:cb84::/32 maxlen: 32
2a07:cb82::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:bc:76:8f:d5:61:2c:79:95:44:fd:41:4a:42:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Jan 2 05:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=066a4e7dd43225e8a91319cddc9aa21a29649244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d6:d8:58:33:e3:90:51:69:5e:5a:cc:5c:78:
fb:d1:24:bd:fc:10:b6:18:e1:a4:9d:a3:f1:b1:72:
70:07:62:5e:a5:f1:ac:80:c0:37:80:23:f3:32:49:
32:24:19:9d:d4:7f:af:4e:34:73:96:28:e1:89:ee:
aa:32:35:f3:1e:f5:8e:fd:58:14:6a:19:a0:72:41:
9f:ae:51:62:d0:9e:25:90:45:9c:80:02:56:8a:8d:
e7:02:8f:cd:28:24:51:47:44:a5:89:d7:4b:18:fc:
4e:1c:e3:e2:28:64:e3:3e:74:78:ae:77:84:60:24:
9a:3c:3b:b2:17:0e:9c:5b:1d:ae:bf:4e:3c:f8:a3:
0f:03:9a:78:f0:59:f2:5d:a2:aa:5d:05:06:46:a7:
7d:b6:3a:7f:66:87:2f:db:6f:a5:75:03:7c:f9:b4:
13:b5:64:da:73:5e:9f:b1:21:2e:d0:e7:e9:9c:11:
74:17:44:d3:15:71:23:a8:a5:b1:2d:68:16:41:4d:
21:dc:49:df:ba:52:7b:93:14:a7:84:0b:51:40:75:
7d:f2:2e:43:fb:63:5c:88:9b:fd:8b:57:a3:c6:39:
94:18:01:67:ad:28:5e:ff:eb:bd:8f:0c:f1:67:74:
e0:d7:a2:49:5d:7a:ee:67:55:09:6e:11:1b:1c:7d:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6A:4E:7D:D4:32:25:E8:A9:13:19:CD:DC:9A:A2:1A:29:64:92:44
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/BmpOfdQyJeipExnN3JqiGilkkkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:cb82::/32
2a07:cb84::/32
Signature Algorithm: sha256WithRSAEncryption
65:e4:9d:3a:b9:dd:aa:8d:d7:0b:44:5c:60:a5:07:51:75:de:
fd:b1:f7:1e:81:c5:7a:4a:39:ae:c2:2a:55:45:f6:73:d2:44:
c3:07:8e:63:cb:94:02:c1:24:8c:ff:de:d1:2b:ac:e9:f8:66:
1f:79:a3:32:b2:ff:26:17:62:c5:41:5c:7b:23:4e:38:74:90:
eb:cd:77:ec:bc:17:bf:7a:94:0e:8d:6a:38:03:8a:4a:65:7c:
c7:8f:71:91:a7:3b:e6:30:ad:dc:57:5a:d6:c6:fa:73:ff:eb:
bc:ce:86:1c:7e:fa:72:d4:58:bc:32:5a:80:8f:9e:1e:94:5e:
b4:a3:c2:0f:25:98:87:41:99:7b:6b:1c:2f:dd:8a:d8:e7:5b:
7a:7f:8c:7f:7c:e4:fd:2d:cc:88:8b:57:83:1d:90:1e:8f:2d:
19:7d:ef:28:2b:19:b8:84:6f:ed:5c:8f:06:36:be:1c:38:36:
1f:3d:50:70:51:f4:d1:aa:88:e3:7a:9b:27:e7:5e:3d:f6:8c:
5a:ab:e3:3b:d3:26:b1:89:31:61:b6:8e:6c:8a:bd:78:9e:45:
79:81:91:af:ce:be:63:90:2f:09:92:66:79:43:3a:d1:4b:c4:
9e:db:95:4b:71:41:54:1b:2b:c3:7d:29:f5:3e:f9:69:bb:c6:
77:ad:af:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:32 2025 by rpki-client