Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/B7SqYMNwxUGE_SWUN5917TXPpDU.roa
File: B7SqYMNwxUGE_SWUN5917TXPpDU.roa (raw, json)
Hash identifier: LXdG8TLY1hyTaPsOkUaFKofrJGSWcMXGFKpHLxrztww=
Subject key identifier: 07:B4:AA:60:C3:70:C5:41:84:FD:25:94:37:9F:75:ED:35:CF:A4:35
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E3C60116F8AA14598ECC9FA83DC77
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/B7SqYMNwxUGE_SWUN5917TXPpDU.roa
Signing time: Mon 02 Jan 2023 06:14:45 +0000
ROA not before: Mon 02 Jan 2023 06:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43927
IP address blocks: 2a0c:b642:1a06::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:3c:60:11:6f:8a:a1:45:98:ec:c9:fa:83:dc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07b4aa60c370c54184fd2594379f75ed35cfa435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4c:fe:c4:b2:ce:f6:55:21:2d:b0:bc:64:9e:
43:c0:9d:a3:53:26:da:72:e4:7c:72:4e:35:56:11:
49:7a:c1:d4:07:54:4c:75:3c:ad:63:32:83:03:2e:
3e:b4:48:5c:c1:e3:dc:ae:bb:f5:c3:c4:70:a6:e1:
36:3d:95:e7:4f:b2:82:a3:3c:7b:fb:b8:67:41:49:
fe:23:65:a0:a7:30:78:b7:9f:16:14:d2:66:c4:6b:
af:c5:dd:16:6a:4f:91:5a:ab:3a:11:ee:e1:e5:df:
17:3a:7a:06:11:7d:fa:bb:95:8f:f9:6a:b2:fa:ed:
42:c4:e9:e7:fd:ef:88:e3:d9:f9:20:00:2f:bd:37:
1b:06:30:fc:fd:f7:4e:68:ef:83:35:be:ee:ca:c9:
bf:9f:b6:ca:86:1d:50:b7:bc:be:b9:ab:c0:6b:8c:
90:c3:dd:d5:aa:04:0c:33:fe:cd:ce:a4:3c:03:c8:
4a:f2:1b:a4:82:f8:ab:96:90:70:65:72:63:4c:b9:
23:f2:99:77:db:bf:30:d8:8e:34:1d:4e:f6:90:b0:
48:ad:da:84:eb:d5:48:80:1d:6b:2e:0c:63:70:08:
14:ec:51:64:bd:46:3f:9f:2c:e3:6c:00:a1:8b:6c:
c7:df:2e:4b:bd:79:d9:8f:d3:35:6e:16:f9:2c:2a:
91:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B4:AA:60:C3:70:C5:41:84:FD:25:94:37:9F:75:ED:35:CF:A4:35
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/B7SqYMNwxUGE_SWUN5917TXPpDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a06::/48
Signature Algorithm: sha256WithRSAEncryption
8c:7c:71:7e:e4:13:45:ac:9b:a9:c7:b1:e5:da:12:08:c4:8c:
58:b2:6d:d0:8a:03:dd:26:73:91:f5:4b:7c:a4:e7:fb:70:08:
5f:ea:2d:5c:f3:e7:62:c4:1b:f5:b2:1d:e8:7c:49:26:9f:13:
3d:ca:8b:a8:bf:6c:c7:ff:28:f0:53:b7:8d:19:29:af:13:fc:
40:1b:1f:3b:49:eb:69:a9:0f:d3:cf:60:42:d7:3b:87:0d:84:
fa:8f:6e:bb:16:66:e2:da:49:02:2d:28:04:1b:aa:72:c1:4c:
ed:87:33:6d:1a:bd:ab:5c:23:f7:24:79:f8:5e:01:75:53:12:
22:25:63:6f:a2:45:e8:55:35:c4:04:02:3b:a6:ce:b1:fd:af:
c3:b8:39:9e:61:ed:c7:1c:a5:89:31:07:26:94:8b:4f:73:2e:
8a:81:10:85:a4:d0:b7:0b:46:b7:63:9c:e8:1f:8c:5b:f9:24:
73:e8:1c:3b:c1:ab:dd:0e:5f:9f:e2:a4:25:32:8a:d7:ce:ff:
6e:47:43:4c:e7:a1:14:5e:a1:90:ee:25:aa:53:d9:b3:53:26:
9b:c2:a6:94:4d:da:3e:62:f3:df:03:cc:a8:f2:55:64:f4:85:
62:b6:dc:42:a4:7a:b6:21:bb:a2:5d:c6:23:ef:79:88:c5:58:
30:d9:e4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:44 2025 by rpki-client