Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/bv_btb7WPLD9cc1zLX1EkjhUe2Q.roa
File: bv_btb7WPLD9cc1zLX1EkjhUe2Q.roa (raw, json)
Hash identifier: EkkwKMdCBxhKWCeM/uEO1Ez+4z545y+sqAVZZXgXNA4=
Subject key identifier: 6E:FF:DB:B5:BE:D6:3C:B0:FD:71:CD:73:2D:7D:44:92:38:54:7B:64
Certificate issuer: /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Certificate serial: 53C11A
Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/bv_btb7WPLD9cc1zLX1EkjhUe2Q.roa
Signing time: Thu 26 May 2022 21:15:34 +0000
ROA not before: Thu 26 May 2022 21:15:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209243
IP address blocks: 2a09:7cc7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5488922 (0x53c11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Validity
Not Before: May 26 21:15:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6effdbb5bed63cb0fd71cd732d7d449238547b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:4b:dd:06:74:6a:4b:33:61:ba:e6:ce:6d:
1e:ef:16:d6:07:2b:fe:56:26:a7:43:c4:e8:a8:91:
8c:92:93:5f:01:48:4b:88:22:f6:2c:4a:fc:90:bc:
d3:ed:66:21:91:cc:87:b8:22:c4:b8:03:2c:08:f0:
be:70:4c:4d:df:01:f0:38:4a:07:89:aa:47:f4:55:
69:16:b5:ca:b3:04:58:10:6f:b9:35:11:ec:53:d6:
b1:96:10:b0:4e:f9:80:09:a3:8d:be:a5:ab:fe:a1:
c5:13:ee:50:96:2d:6c:72:d5:7b:c3:35:14:c4:78:
fb:fa:c2:ad:38:48:af:b3:24:8b:0b:ce:32:97:05:
56:fb:20:98:f3:5e:85:a3:ac:c1:d7:ef:b7:49:c8:
7f:03:a9:46:2d:53:82:c2:27:b3:42:87:d9:61:d3:
9e:dd:98:ba:94:5a:02:1d:1b:38:d3:70:02:f0:59:
af:de:f8:b6:d8:4a:2f:fb:6e:5d:97:82:d9:93:66:
7e:e5:8b:aa:ed:7b:3f:f5:2c:1f:a0:e8:57:c9:cc:
fa:c0:4f:f7:cc:b4:95:ff:4c:7d:fd:13:90:c6:09:
3a:89:82:2a:c1:7e:2b:a3:c2:f4:ac:35:3a:c2:44:
a8:95:30:32:cc:6f:71:1f:19:b2:49:f1:c8:a7:00:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FF:DB:B5:BE:D6:3C:B0:FD:71:CD:73:2D:7D:44:92:38:54:7B:64
X509v3 Authority Key Identifier:
keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/bv_btb7WPLD9cc1zLX1EkjhUe2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7cc7::/32
Signature Algorithm: sha256WithRSAEncryption
6b:ce:64:bb:8a:d2:9e:af:dd:c6:ad:5a:4c:56:51:f0:be:b2:
cc:fd:8d:fa:b3:29:ce:57:81:64:3b:3d:5f:02:a0:6b:7c:34:
73:df:b6:6b:a5:5a:30:f3:c1:7f:9d:94:65:46:dc:7f:30:74:
32:55:39:f7:d4:38:30:eb:b1:e7:ef:b0:3d:73:5f:04:d0:14:
2e:6c:bb:09:77:12:ba:b6:32:58:bc:a7:ee:1b:77:ee:47:ef:
cc:56:31:c0:a8:46:f6:4b:e1:40:d4:9d:2f:fe:b0:55:dc:e8:
e4:01:4d:bb:65:9e:1c:64:c1:ed:3c:95:38:3f:9f:e4:fc:ad:
13:f7:bc:85:1d:3c:e9:7e:a5:b6:8f:76:c0:31:87:f7:be:ca:
c5:72:f0:61:85:65:3a:53:93:b3:19:fd:3b:80:34:b5:90:d2:
29:aa:cf:ca:f7:6d:8f:ac:0b:30:6d:23:74:4c:72:95:55:e0:
bc:f7:0a:b5:af:03:77:64:4d:d5:bf:dc:fa:14:ef:6c:76:d2:
a0:c4:58:12:e2:ae:a3:d8:15:a4:37:50:2c:b8:55:cc:70:61:
f4:09:9b:c8:83:db:a1:4a:1e:d0:57:9e:99:29:11:31:c5:86:
b1:26:ea:7d:c4:4b:2c:5a:fb:09:a6:1f:ba:55:14:78:9d:cf:
ba:c0:29:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:45 2025 by rpki-client