Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/BEtaTxWigOPe41TmJtTvHfrz4LA.roa
File: BEtaTxWigOPe41TmJtTvHfrz4LA.roa (raw, json)
Hash identifier: hxqjO1wQ1umJw3Gu7aUzgHqzh2tXx/aSrGww2aQPZiI=
Subject key identifier: 04:4B:5A:4F:15:A2:80:E3:DE:E3:54:E6:26:D4:EF:1D:FA:F3:E0:B0
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 0185708CF0E3151808471E829F60E2A42F71
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/BEtaTxWigOPe41TmJtTvHfrz4LA.roa
Signing time: Mon 02 Jan 2023 03:36:02 +0000
ROA not before: Mon 02 Jan 2023 03:36:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137
IP address blocks: 155.185.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:f0:e3:15:18:08:47:1e:82:9f:60:e2:a4:2f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: Jan 2 03:36:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=044b5a4f15a280e3dee354e626d4ef1dfaf3e0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5a:9d:13:6c:d2:73:7d:49:42:36:ad:a9:9c:
e5:3d:4c:37:a2:ac:bb:11:d0:ae:d4:d2:4c:d3:74:
f2:03:ee:34:36:b0:4a:10:2d:32:de:fb:b9:84:38:
35:b0:5f:69:a9:4e:6e:ad:d2:13:a4:43:9e:02:77:
46:c0:7f:cb:58:57:45:fd:4c:54:47:b1:4e:65:91:
90:3e:81:a6:48:3a:2a:56:63:7f:21:47:01:17:5c:
7d:20:e3:7c:ae:42:f6:10:4d:8e:a9:fc:b9:6f:9b:
a3:ea:f3:97:97:11:42:a2:7e:dd:81:88:fb:6b:43:
ca:4b:29:bb:35:de:84:33:f4:e2:20:47:ad:06:f6:
d4:a6:83:11:c1:5b:9a:2f:86:3b:10:59:64:ad:d1:
78:dc:23:00:81:48:cd:b0:0c:68:0e:74:81:3c:31:
aa:10:7b:79:4b:85:c2:88:8b:df:78:81:08:a4:d7:
32:5c:d4:f1:f9:1e:54:19:6d:e7:07:f6:a0:05:cd:
74:8d:fe:2f:70:ac:b5:e7:45:e2:4c:05:9f:f8:f0:
25:01:66:18:e1:9f:0c:5e:7f:7a:a5:da:7c:74:c7:
61:8b:e1:6c:3f:56:30:33:87:92:30:3c:65:a0:30:
e7:64:4e:62:eb:82:03:60:9e:4d:27:50:f3:00:05:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4B:5A:4F:15:A2:80:E3:DE:E3:54:E6:26:D4:EF:1D:FA:F3:E0:B0
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/BEtaTxWigOPe41TmJtTvHfrz4LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.185.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:d3:f2:f1:4f:45:2d:29:04:df:b1:6f:69:87:bc:21:dd:4f:
eb:a8:07:34:36:74:77:06:39:81:4e:d0:93:59:f9:07:a2:b8:
67:4a:c9:8e:09:0e:9c:0a:61:23:39:ee:20:2c:58:6f:a0:eb:
3b:90:54:95:d0:cd:a2:fa:67:4a:5f:8f:5e:67:88:3c:0a:58:
76:05:06:47:9c:c5:48:45:e1:d3:59:ec:84:73:d5:86:52:47:
c1:8c:be:25:53:2f:95:63:3e:e8:5f:1c:2c:7f:9f:64:81:8e:
ad:81:e6:4d:64:42:28:cd:f2:08:20:e9:5e:00:65:b5:58:3d:
21:b7:0f:91:65:79:4d:a5:f9:9f:7e:2d:2d:28:bd:74:5f:b3:
58:f2:21:a3:c2:65:dc:3b:60:d8:0f:51:4a:2c:97:a7:84:31:
97:6e:ad:6d:fa:ae:58:d6:62:8e:87:25:6d:9e:e3:55:8b:55:
04:3f:ba:2b:98:77:9f:30:e2:18:51:2e:79:61:bd:e7:e8:9a:
16:b4:7c:9d:23:88:60:cf:08:cd:c9:19:a0:ea:58:ab:56:0d:
17:36:fa:14:c5:8a:13:8e:98:b0:8a:20:98:13:29:7d:36:ce:
ed:e8:6e:9c:9b:54:91:0f:03:ad:b7:28:0a:da:86:3c:85:6b:
f0:91:08:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:01:19 2025 by rpki-client