Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/BCG7-k-vIyQnYKNbSOIcKsdwrvI.roa
File: BCG7-k-vIyQnYKNbSOIcKsdwrvI.roa (raw, json)
Hash identifier: QfJUbKRyEDoD1yTyVbTKilg5tHmU9JZDkllc1VPU7Xw=
Subject key identifier: 04:21:BB:FA:4F:AF:23:24:27:60:A3:5B:48:E2:1C:2A:C7:70:AE:F2
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 096BB3F3
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/BCG7-k-vIyQnYKNbSOIcKsdwrvI.roa
Signing time: Fri 04 Mar 2022 10:24:26 +0000
ROA not before: Fri 04 Mar 2022 10:24:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207898
IP address blocks: 2a0e:8f02:f03e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158053363 (0x96bb3f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Mar 4 10:24:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0421bbfa4faf23242760a35b48e21c2ac770aef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:b7:cb:2f:39:09:c6:54:b4:c5:d1:05:86:
b2:a6:83:b6:b3:66:ca:a6:7d:14:8c:c3:3d:6a:66:
5c:ac:00:5c:21:c7:4b:d7:b0:db:d6:58:a1:d6:e2:
42:31:00:f5:9b:42:0e:8c:e9:67:c2:dd:f0:2c:3f:
43:50:2d:26:45:cc:bc:b9:3d:5c:0d:65:3b:15:ab:
34:43:8f:35:b7:39:d3:ed:44:71:f0:f0:45:ab:b9:
b7:d4:ec:d5:18:06:05:b9:e1:b9:d7:62:7d:fb:0b:
1e:70:bf:8b:ae:6e:40:70:eb:28:85:1f:e7:cb:2d:
b4:95:c4:db:4d:5a:48:c0:f7:dc:23:be:17:ff:af:
83:fc:c0:47:0b:75:62:33:47:62:51:70:2d:e7:62:
6e:4a:c5:85:96:b3:b5:bc:ea:de:bf:97:3c:0f:6a:
4b:72:9e:2e:de:50:bc:76:06:d7:7d:37:11:7e:b2:
27:6f:e0:12:8f:68:d8:7b:ad:b5:ea:f3:99:08:94:
8c:e1:d5:16:de:86:a6:c6:40:1f:27:1a:96:98:d6:
f5:bc:94:16:d7:06:f2:ac:c1:2a:b0:33:85:5d:a5:
17:6c:0d:1d:19:ef:50:9e:60:a2:ff:0c:dc:66:c2:
56:ca:40:09:70:71:dd:ca:12:be:2c:1c:a7:12:ee:
cf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:21:BB:FA:4F:AF:23:24:27:60:A3:5B:48:E2:1C:2A:C7:70:AE:F2
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/BCG7-k-vIyQnYKNbSOIcKsdwrvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f03e::/48
Signature Algorithm: sha256WithRSAEncryption
8a:28:f3:cc:6b:21:00:33:0e:32:eb:42:ca:58:c8:9e:60:b1:
bd:78:92:48:0d:5d:25:1b:2a:53:7f:01:81:de:b7:b5:3c:bf:
27:11:1f:20:d9:83:88:8c:6f:cc:f6:bc:1a:70:82:0c:4e:03:
2f:50:1c:ac:9d:82:fa:e1:a7:0a:21:af:d3:3e:fd:9f:55:f6:
2a:8d:fd:dd:e5:0f:d8:eb:6d:9f:64:64:85:e8:6d:21:c8:6f:
a0:7f:10:2b:ee:2b:2d:f2:17:36:44:c2:82:9b:1b:0e:4b:dc:
99:65:72:3f:82:99:5d:55:5d:af:49:dd:19:75:01:7e:69:fe:
a3:93:37:40:bb:96:32:8e:36:fe:5d:f0:40:8f:23:1a:cb:dc:
3f:90:c6:33:be:16:fb:86:d0:b8:c9:84:ba:eb:53:4f:7c:49:
41:41:0f:55:fd:bf:58:6b:88:30:fc:0c:9b:9e:d3:3c:dd:08:
3b:5d:63:c5:0d:74:0b:e5:91:fa:eb:fb:05:ad:e8:b2:8c:71:
88:fa:0d:e7:64:58:6c:f5:56:8e:56:c9:dc:76:39:fb:8f:ff:
7f:b1:36:e9:86:5a:98:d2:9e:13:0e:b9:ca:26:ee:f8:e6:ad:
e1:14:05:8f:1b:0f:23:73:72:b7:d3:94:05:88:83:54:c5:b8:
ee:02:61:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:35 2024 by rpki-client on console-ams.rpki-client.org