Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/BwtkQiFz-9gCjbPokBITzFNWTOQ.roa
File: BwtkQiFz-9gCjbPokBITzFNWTOQ.roa (raw, json)
Hash identifier: wl/wsa8M95QL1ENNG143oVEr9aAanEtBeOiAjfv1U7o=
Subject key identifier: 07:0B:64:42:21:73:FB:D8:02:8D:B3:E8:90:12:13:CC:53:56:4C:E4
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50D00E3D
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/BwtkQiFz-9gCjbPokBITzFNWTOQ.roa
Signing time: Sat 01 Jan 2022 16:01:46 +0000
ROA not before: Sat 01 Jan 2022 16:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30862
IP address blocks: 194.6.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355812413 (0x50d00e3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=070b64422173fbd8028db3e8901213cc53564ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:34:29:7e:46:a7:2e:89:97:63:47:5b:27:
ac:ee:2d:b1:6e:22:6b:90:5c:46:72:4d:ff:d3:83:
96:03:69:7c:df:82:a2:93:b2:67:9d:fb:4d:92:23:
d3:7c:c0:0a:5c:58:30:6b:a6:00:cc:f0:e6:01:b5:
e3:b0:e0:d7:71:a3:a6:a3:45:56:44:a7:f1:b6:5a:
73:ef:eb:55:49:c7:1d:92:dd:57:9d:da:08:66:69:
b8:33:3e:4d:10:ae:00:d6:c1:b7:28:9b:f3:d0:58:
02:b7:8a:70:9c:25:5f:a4:ba:0d:25:41:1d:9b:8c:
b2:f8:b9:88:b6:9f:aa:cc:ae:34:5e:ba:c0:32:65:
72:5f:94:e4:cb:25:49:2f:6a:28:84:cb:c6:ca:75:
1c:30:2a:be:2c:94:7e:59:69:90:71:ce:d1:17:59:
ba:55:44:bd:90:04:2c:c3:1a:ac:12:ca:89:ff:2b:
42:89:de:41:9a:c3:9e:99:8f:26:6c:2b:4a:6c:e8:
27:48:4d:eb:78:b8:c2:06:39:86:5b:53:65:5a:89:
47:ad:03:35:90:64:84:1b:8d:5e:7d:8a:a5:41:1a:
5f:29:89:be:4d:d3:35:95:30:94:a7:82:e7:2d:9f:
16:90:4b:82:a2:9c:0b:b1:a4:2f:12:49:4f:ff:03:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0B:64:42:21:73:FB:D8:02:8D:B3:E8:90:12:13:CC:53:56:4C:E4
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/BwtkQiFz-9gCjbPokBITzFNWTOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.178.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f4:17:24:b4:97:2d:0f:6e:d4:d6:88:60:a5:96:29:99:c9:
9d:ef:bc:88:b3:b3:a5:9c:b3:e4:71:8e:8b:d2:0a:be:93:96:
32:2e:60:37:f3:93:5f:f0:72:4b:8d:ea:a8:42:f2:a8:56:9d:
2f:3d:04:71:35:e0:5e:73:a2:bd:70:48:ef:08:9a:4a:bb:11:
3a:01:cf:12:f9:58:d5:8e:0c:78:20:e7:c7:ca:73:28:6e:5a:
3c:82:17:85:5f:0f:1b:cd:b6:74:de:ed:4e:d2:e7:42:e5:2c:
7f:b3:24:54:5c:01:ba:80:e1:29:26:83:b3:be:e6:11:4b:23:
5c:d7:d5:a6:93:ec:d8:ef:20:c1:6f:bb:b0:f5:22:ae:14:9a:
5d:25:74:2d:4f:d5:25:4d:50:29:04:de:41:18:c1:7b:a4:46:
42:b9:d2:bd:3f:b2:b6:04:2a:69:7d:3f:68:cc:97:54:71:6e:
2b:5b:99:ce:01:1c:9e:4f:d5:e7:d7:ec:e9:9f:9d:52:1a:db:
ab:6b:ca:32:50:bd:63:66:32:7d:f8:b6:fc:ff:64:8f:72:7e:
c9:43:78:de:c1:90:77:13:61:16:d9:ca:bb:be:ef:74:64:4e:
ca:ac:96:84:c8:b4:3a:1e:bf:5a:71:40:28:91:22:16:7c:74:
6d:db:bc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:37:25 2025 by rpki-client