Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/bieIx01-TpFCsmup86eaI8-eBK0.roa
File: bieIx01-TpFCsmup86eaI8-eBK0.roa (raw, json)
Hash identifier: Jc0a5+Ci+KRTBflqIhGJDMGM6FWzPESfyLA17RFm03w=
Subject key identifier: 6E:27:88:C7:4D:7E:4E:91:42:B2:6B:A9:F3:A7:9A:23:CF:9E:04:AD
Certificate issuer: /CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Certificate serial: 01856C1C980B6BEFD42A7E98537A83FEADDD
Authority key identifier: 41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/bieIx01-TpFCsmup86eaI8-eBK0.roa
Signing time: Sun 01 Jan 2023 06:54:51 +0000
ROA not before: Sun 01 Jan 2023 06:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58180
IP address blocks: 195.206.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:98:0b:6b:ef:d4:2a:7e:98:53:7a:83:fe:ad:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Validity
Not Before: Jan 1 06:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e2788c74d7e4e9142b26ba9f3a79a23cf9e04ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:8d:59:95:4e:b2:3b:6c:1f:9b:8e:e6:bd:
f5:16:30:6a:63:2b:78:ff:b9:51:40:a6:a9:69:5f:
8e:41:d2:49:3b:d8:32:6c:0f:7c:09:bc:3e:3f:c4:
0f:80:0e:7f:02:e7:62:8a:c6:ea:9c:c3:e0:3f:91:
51:d0:47:1d:95:a7:f2:f4:92:e0:cf:cb:50:85:23:
7b:af:ae:70:a6:a1:0a:71:e4:c2:2b:71:52:b7:01:
e6:37:f6:f3:d6:6f:14:4b:27:80:ca:56:ef:96:40:
0a:3c:60:9d:f5:b1:06:80:c9:6d:1c:87:0e:8d:bb:
ba:42:44:ef:1e:af:c3:28:cb:d5:9f:97:95:09:66:
4a:c6:ec:9a:06:f1:18:16:2b:b7:44:69:f6:85:2b:
d1:a5:10:a2:dd:98:30:80:17:86:5f:09:9d:a4:31:
e3:7a:10:a4:df:d7:ba:02:e8:dc:c3:21:87:0c:81:
aa:e0:db:1b:64:5f:9f:78:78:6e:9e:15:36:69:28:
db:f1:45:e3:30:a9:72:57:61:34:1e:5b:6a:65:9b:
14:b6:30:48:71:0e:75:48:fd:09:48:55:ac:af:10:
b4:f6:2d:2c:73:aa:84:f7:f0:62:ab:f1:a9:75:b3:
33:46:1a:60:a8:11:12:a1:e6:0a:39:8c:3f:4b:53:
73:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:27:88:C7:4D:7E:4E:91:42:B2:6B:A9:F3:A7:9A:23:CF:9E:04:AD
X509v3 Authority Key Identifier:
keyid:41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/bieIx01-TpFCsmup86eaI8-eBK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.120.0/24
Signature Algorithm: sha256WithRSAEncryption
37:db:b8:56:53:81:fa:1b:b2:61:61:f0:03:7c:3d:07:a4:11:
4d:21:15:75:64:1d:71:f5:e3:7f:b0:94:76:e8:4e:4e:3c:c8:
97:06:18:d1:66:46:ff:90:ea:87:3f:85:e3:45:e5:c2:1b:14:
82:20:04:2f:c9:ab:b2:fd:f8:92:f1:df:b6:22:9c:66:ff:dc:
b3:fc:36:be:ac:f8:6c:28:0a:cb:cf:3b:67:1b:a7:f7:8d:a6:
c2:df:f0:60:ba:4e:23:b9:70:48:0b:78:bb:c5:a5:b7:a0:7e:
25:3c:0e:cd:07:7b:ec:84:91:88:c2:87:3f:39:50:b7:c9:37:
05:0a:8a:06:21:08:55:e6:14:df:a4:ad:dc:79:c3:8f:96:a7:
32:4e:a6:8d:c5:85:ff:f9:ca:22:4e:5b:27:4a:4a:d4:b0:49:
79:6f:f4:67:54:9d:da:43:67:a8:82:01:9d:0d:ba:d5:eb:fb:
1e:ad:65:0b:ad:d1:a4:bc:72:f6:ba:08:54:6f:4d:9d:ad:44:
27:da:17:a5:3c:e7:d1:c0:7d:55:5e:8e:e4:ee:92:53:4e:c7:
6f:25:0e:10:d1:bb:f5:4b:72:c7:05:3b:fb:06:68:92:e8:7c:
01:ea:34:03:45:ef:0c:54:fc:39:ae:fa:df:d0:9b:e1:00:2c:
0e:41:97:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:34 2025 by rpki-client