Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/bBeUse3A4oTJbMs-hOCmOzKlDPA.roa
File: bBeUse3A4oTJbMs-hOCmOzKlDPA.roa (raw, json)
Hash identifier: hZb+171vJPWfI4TbrSyoB5qETNiC+RRNUiZbwJ98H94=
Subject key identifier: 6C:17:94:B1:ED:C0:E2:84:C9:6C:CB:3E:84:E0:A6:3B:32:A5:0C:F0
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E73531A3AC3170243796E56636474
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/bBeUse3A4oTJbMs-hOCmOzKlDPA.roa
Signing time: Mon 02 Jan 2023 06:14:59 +0000
ROA not before: Mon 02 Jan 2023 06:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210339
IP address blocks: 2a0c:b641:630::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:73:53:1a:3a:c3:17:02:43:79:6e:56:63:64:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c1794b1edc0e284c96ccb3e84e0a63b32a50cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:65:54:91:c9:47:c7:e9:49:bb:08:0f:6f:2b:
35:a8:d1:6d:23:a3:39:38:f1:10:91:58:86:06:b9:
bc:ad:5e:84:5a:49:50:e9:56:6c:04:c4:d0:2d:59:
3c:7a:55:72:4d:ac:35:fb:85:c3:92:36:7f:c1:ff:
77:54:00:97:13:2b:0b:a3:3d:0a:ba:c7:f1:36:f6:
cc:40:e1:a2:11:72:1d:c4:57:d5:61:67:d6:0c:5c:
e1:2c:91:ce:24:b7:41:7e:f7:14:0b:42:db:85:ee:
da:0f:33:8e:60:11:4e:ed:99:52:16:dc:98:d7:25:
2c:0e:5f:b6:05:26:d4:4f:ca:7f:dc:e6:dd:05:6b:
eb:94:9d:d7:04:b5:4c:28:e3:22:dd:1b:cb:89:1b:
ec:3c:e9:ac:16:35:a3:73:15:e5:63:47:df:e3:3e:
dd:cb:93:80:c3:83:19:ba:d1:bd:f7:cc:7b:d6:03:
90:c3:7f:ed:c2:d1:28:0a:29:2d:28:e9:74:d2:7e:
0f:ef:35:92:af:31:b6:4b:c6:7c:f7:43:61:7c:54:
04:dd:27:c7:b5:0a:46:50:79:b6:07:e6:25:d5:77:
98:50:b8:22:11:c9:1e:f0:5b:4c:62:bc:a2:b1:64:
a0:8b:36:01:33:e2:ac:71:9e:26:1d:19:77:83:4c:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:17:94:B1:ED:C0:E2:84:C9:6C:CB:3E:84:E0:A6:3B:32:A5:0C:F0
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/bBeUse3A4oTJbMs-hOCmOzKlDPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:630::/44
Signature Algorithm: sha256WithRSAEncryption
5c:f7:8e:80:d3:64:8c:66:15:b3:ca:f6:7d:6b:9e:08:93:8b:
17:7e:9b:7a:af:93:8c:41:ed:4e:5d:32:81:bd:2b:2c:8a:26:
c2:96:64:25:15:9a:07:3f:24:22:3e:38:fc:2d:54:d4:0c:ed:
34:ab:a8:5d:d0:a0:bd:97:6b:9b:1c:7e:99:67:d4:a4:c4:31:
96:20:f8:82:af:83:67:8a:e3:82:5d:40:13:46:6d:10:47:9e:
e2:09:b7:dd:6b:4a:9a:51:dc:50:47:d6:78:89:a4:da:19:95:
1c:3e:3f:a7:27:34:ec:36:22:28:21:8b:b8:43:2e:6c:31:7c:
ed:b5:ab:d2:71:3c:c5:d6:4f:14:b7:ec:4a:bc:b4:d5:8c:11:
1c:5e:99:d4:68:ba:fb:85:bc:a6:fb:97:4a:90:9a:59:43:bd:
f7:e8:b5:20:65:3b:3a:6b:ca:07:9e:2c:dd:ea:4d:a1:e3:30:
50:53:2a:ba:a5:39:19:66:f1:f3:30:a9:e8:73:fa:82:88:de:
18:44:f1:84:32:54:26:01:c3:37:a6:4e:bc:04:9d:61:47:05:
ac:59:63:14:5c:a5:14:42:55:bc:e9:65:67:d2:f2:f1:03:51:
0f:e6:72:c0:be:e2:8a:83:7d:ef:07:fb:25:16:a6:7f:92:44:
00:52:53:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:47 2025 by rpki-client