Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/bJsaOw-KluK54cplWuG10h3Js4A.roa
File: bJsaOw-KluK54cplWuG10h3Js4A.roa (raw, json)
Hash identifier: BjMkO7aXw5H/z8lDsqcZJFxfc2hSY29zV8pxwHSe7ig=
Subject key identifier: 6C:9B:1A:3B:0F:8A:96:E2:B9:E1:CA:65:5A:E1:B5:D2:1D:C9:B3:80
Certificate issuer: /CN=ea93edfc2aa748e4981050ec06e3a66920265e17
Certificate serial: 018751AD746C2BDA7936C1D3232111ED3824
Authority key identifier: EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/bJsaOw-KluK54cplWuG10h3Js4A.roa
Signing time: Wed 05 Apr 2023 13:48:54 +0000
ROA not before: Wed 05 Apr 2023 13:48:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 378
IP address blocks: 132.72.0.0/16 maxlen: 16
132.72.0.0/15 maxlen: 15
132.73.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:ad:74:6c:2b:da:79:36:c1:d3:23:21:11:ed:38:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea93edfc2aa748e4981050ec06e3a66920265e17
Validity
Not Before: Apr 5 13:48:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c9b1a3b0f8a96e2b9e1ca655ae1b5d21dc9b380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:50:f1:a5:3c:4d:e0:72:0d:89:09:ff:8d:
28:73:61:a2:1c:35:b5:05:51:3f:eb:13:09:80:f3:
f6:39:f4:85:39:b3:f1:67:48:28:6b:95:d3:fd:03:
5a:70:9e:94:a4:62:db:7c:0e:2a:79:e3:d6:8d:6f:
5c:7d:bc:3d:44:dc:3f:be:4a:cf:e5:67:27:79:ac:
ad:fb:7e:b0:84:b4:77:e4:4a:2e:d2:20:53:a7:c5:
48:51:1a:ae:29:e1:72:e5:8b:ff:84:59:62:c7:d5:
16:bf:9c:fa:4c:18:2c:54:6f:02:28:2c:b6:e8:ef:
1d:52:be:82:4d:72:f2:b3:60:22:15:7a:81:97:46:
ed:62:2e:0f:fa:6e:39:9e:f4:ec:89:f4:8f:8e:16:
43:04:22:84:89:56:3a:c4:b4:50:f8:61:ec:03:82:
2d:f8:fa:37:da:7a:78:cc:e1:8b:5b:c9:70:4c:eb:
73:32:e4:79:ac:93:13:d6:4f:a4:14:d7:39:07:9d:
37:ce:1b:08:a6:41:80:43:c9:81:b2:41:05:d1:6a:
59:1b:bb:24:69:b7:ca:aa:a1:a0:78:4c:1d:37:6d:
c8:32:a3:91:84:f7:46:f1:e2:62:69:bb:15:37:ff:
75:b8:69:23:62:e3:52:81:41:1b:00:83:88:2b:4f:
10:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9B:1A:3B:0F:8A:96:E2:B9:E1:CA:65:5A:E1:B5:D2:1D:C9:B3:80
X509v3 Authority Key Identifier:
keyid:EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/bJsaOw-KluK54cplWuG10h3Js4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.72.0.0/15
Signature Algorithm: sha256WithRSAEncryption
42:53:e8:51:4b:6a:02:82:78:69:15:5c:8f:1f:76:ba:5a:59:
4c:58:22:cf:a6:37:d1:c3:bd:6c:c6:c4:4b:73:77:37:52:c4:
5b:75:6f:00:b2:25:c3:41:a1:05:ef:53:f9:83:f2:c1:1f:bb:
cd:69:16:8c:2a:97:ff:2a:16:c2:29:27:80:c3:28:d5:8b:35:
37:44:6a:66:fe:7f:93:76:af:d9:3a:eb:00:2e:3f:4e:d1:32:
e7:e4:63:93:b3:87:ec:04:b9:3b:74:bf:49:68:6f:54:97:e7:
23:ce:9b:3d:ed:c9:3f:c0:f3:fd:60:dd:56:f4:98:47:48:af:
fb:35:ae:ce:38:46:4c:1b:fd:95:e8:f5:47:cb:84:3e:2f:1a:
22:4d:75:95:a5:85:8b:1f:50:ee:61:e0:8c:63:43:06:65:10:
3b:42:5d:4b:4d:d2:5a:1a:17:d4:a7:fb:a1:f5:be:12:16:16:
38:c0:ed:20:a4:cf:24:58:2f:01:9a:dd:a1:b1:f8:43:c0:07:
c7:d5:4d:ec:b3:3e:13:29:05:3c:04:9d:9b:d2:ee:68:b4:b1:
09:74:0a:56:f7:e0:45:1e:0f:31:e8:05:c7:46:57:b1:28:db:
90:81:fb:0a:c7:ca:d9:a7:a2:f1:a9:ce:84:ca:27:aa:2d:a9:
fd:07:62:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:56:41 2025 by rpki-client