Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/BJGiiby2AFRudaHuKaB3qR4oSLk.roa
File: BJGiiby2AFRudaHuKaB3qR4oSLk.roa (raw, json)
Hash identifier: ZzNzn3YS9O9TBM1XFtSuahJVKHeM9hYwsSjdZz+tu2w=
Subject key identifier: 04:91:A2:89:BC:B6:00:54:6E:75:A1:EE:29:A0:77:A9:1E:28:48:B9
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 01856F9DB6C09EC35BFA749AA3DE807F8392
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/BJGiiby2AFRudaHuKaB3qR4oSLk.roa
Signing time: Sun 01 Jan 2023 23:14:44 +0000
ROA not before: Sun 01 Jan 2023 23:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 559
IP address blocks: 155.105.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:b6:c0:9e:c3:5b:fa:74:9a:a3:de:80:7f:83:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Jan 1 23:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0491a289bcb600546e75a1ee29a077a91e2848b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:27:e6:80:79:fd:5f:0f:c2:30:c1:b5:87:2a:
ca:2e:ad:c6:92:de:9b:2f:6c:ba:41:b2:11:03:45:
52:0f:95:50:a0:4a:f2:35:ae:94:97:b8:fe:33:96:
42:8b:c4:49:18:03:7b:26:8c:01:6c:58:97:89:88:
c4:4a:25:b3:b4:a4:b3:75:4a:98:8a:00:0c:82:3d:
ff:cd:35:d2:1a:1c:48:24:03:c4:c7:57:3f:7e:f8:
70:fa:7f:7a:5d:da:6e:1a:b0:f3:94:fc:bb:de:31:
67:67:d6:19:31:17:e1:ab:7c:f0:9d:e0:47:09:88:
d0:50:0b:5d:e0:37:1e:df:c5:2b:1f:79:32:00:a3:
4b:b9:b7:44:b1:1a:d8:fd:cc:57:1f:8f:b8:87:2f:
e6:fa:67:09:bd:d0:b9:37:2c:f8:48:38:4d:74:45:
28:3b:85:02:6d:8d:2d:42:05:07:f0:07:39:65:55:
4f:9b:f2:1f:3e:99:7e:2a:44:92:ea:ee:dc:12:27:
64:97:a1:bf:8b:1b:50:3f:38:b3:53:a9:52:2b:a9:
b2:61:12:86:1a:b0:53:37:7e:67:d5:3b:36:f1:e8:
c9:db:5d:32:a8:9f:dd:82:50:ca:25:4e:cb:f9:d4:
ad:09:e1:0e:8f:40:40:a9:6d:e3:03:21:a7:e2:88:
2a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:91:A2:89:BC:B6:00:54:6E:75:A1:EE:29:A0:77:A9:1E:28:48:B9
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/BJGiiby2AFRudaHuKaB3qR4oSLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.105.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:f2:fe:00:23:16:75:10:21:7f:e9:64:87:56:c6:13:52:70:
3a:ec:45:56:0c:89:31:35:67:64:5e:0f:aa:37:a6:07:92:7f:
c5:3c:0f:fa:a6:0b:85:0f:38:27:31:3d:7f:b8:4b:59:e2:3c:
5e:0a:0e:a3:88:6c:2b:e3:18:a8:95:11:de:c9:74:1b:26:78:
03:38:12:d7:a2:97:0d:39:28:13:93:19:3e:b7:50:52:1b:cc:
b7:a0:6e:d7:22:b0:81:c9:41:b4:89:54:cb:f2:d4:6d:11:a5:
d2:bd:f6:9b:87:24:03:c0:95:14:14:b8:88:ee:a1:9f:8f:ac:
15:9c:c1:65:53:ee:bf:37:b7:4d:f6:29:b2:46:d7:06:b1:eb:
18:f1:de:47:a1:be:bc:18:9b:0c:5b:13:32:5b:1b:16:29:21:
2f:53:aa:90:6d:07:bc:d3:7e:50:87:6f:f1:3f:8d:30:a5:7f:
7b:ad:ce:df:32:71:a2:b0:56:06:9e:9e:7a:a3:07:55:a1:89:
13:e3:d4:91:f4:23:ba:4f:1d:eb:d0:68:14:47:f9:af:5f:6b:
ed:2c:bb:98:ec:86:a6:13:b1:13:61:a2:0c:20:55:f5:a1:fd:
4f:d4:e8:8e:9c:42:32:7b:fe:95:77:92:ab:32:fd:2a:65:4c:
ed:f2:8d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:53 2025 by rpki-client