Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/BHxtFQTcJdi-8Iz1wdi89QDOTgk.roa
File: BHxtFQTcJdi-8Iz1wdi89QDOTgk.roa (raw, json)
Hash identifier: ts2iYNkIIWXNZtzi+eb02440LxXN8tB6xwAQ89xqzrI=
Subject key identifier: 04:7C:6D:15:04:DC:25:D8:BE:F0:8C:F5:C1:D8:BC:F5:00:CE:4E:09
Certificate issuer: /CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Certificate serial: 0186BA91C79A24E291B05A73094829028785
Authority key identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/BHxtFQTcJdi-8Iz1wdi89QDOTgk.roa
Signing time: Tue 07 Mar 2023 05:36:01 +0000
ROA not before: Tue 07 Mar 2023 05:36:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48093
IP address blocks: 2a03:28e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ba:91:c7:9a:24:e2:91:b0:5a:73:09:48:29:02:87:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Validity
Not Before: Mar 7 05:36:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=047c6d1504dc25d8bef08cf5c1d8bcf500ce4e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:dc:59:3a:f3:37:91:98:f5:43:a2:49:fb:
c1:97:70:12:94:7d:60:33:84:2c:9a:ae:51:29:05:
30:9f:ab:c9:41:ac:66:75:4b:63:73:74:72:ee:bc:
4a:93:0c:ac:11:94:93:9c:1a:41:6c:99:be:44:ef:
ae:5c:cd:81:a8:0e:41:c1:23:e0:00:d0:e3:52:e3:
0c:f9:6d:51:10:2c:c4:91:e4:8f:b3:55:88:a5:64:
63:c2:42:0e:f2:ee:64:49:25:d9:7d:25:09:15:e5:
eb:2c:fa:8e:7a:70:a3:b1:d8:51:b4:d5:35:70:c8:
69:3c:96:18:ab:54:01:94:2e:7f:08:0e:eb:8d:0f:
ab:a6:cb:a3:aa:23:4b:52:75:f7:99:79:cb:c6:9d:
d4:0e:fd:06:fd:55:ef:ae:bc:d1:f3:7e:3d:ad:de:
08:f2:cf:95:c6:70:03:c7:6c:5b:41:76:5c:90:0e:
74:12:45:82:19:92:e4:cf:e8:8b:ce:87:6a:16:dd:
76:7a:54:bb:41:e1:a2:c1:74:01:79:b4:47:52:22:
b1:8d:5e:82:5c:b8:01:d3:c1:f9:93:c3:6b:10:19:
4c:43:72:9b:80:ec:73:e7:3c:ed:fa:db:f8:c7:d2:
52:db:bd:72:ff:95:c9:ef:a8:29:aa:04:29:fb:f5:
39:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7C:6D:15:04:DC:25:D8:BE:F0:8C:F5:C1:D8:BC:F5:00:CE:4E:09
X509v3 Authority Key Identifier:
keyid:CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/BHxtFQTcJdi-8Iz1wdi89QDOTgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:28e0::/32
Signature Algorithm: sha256WithRSAEncryption
38:55:11:84:d2:e9:c9:21:01:5a:04:83:ea:9f:7b:b4:c2:14:
d6:16:af:40:1a:80:80:58:c4:c6:e1:4e:ac:5d:f5:99:11:69:
26:0c:13:3b:66:26:15:4c:88:b7:91:f7:34:d8:8f:4f:aa:8d:
5a:b7:7a:8f:95:d0:b0:0d:76:63:c1:71:74:63:db:93:3d:c2:
e4:a3:8e:76:13:80:e2:59:51:82:2d:f7:bd:03:85:b7:e1:e4:
f4:02:ab:bd:24:e1:75:60:80:05:76:74:fc:ee:2f:70:c0:bb:
be:f7:c8:4b:9b:1d:f7:6d:5b:8c:30:9d:41:74:55:68:39:9c:
c5:cd:ec:2c:f1:8c:33:99:bc:46:a6:f7:ef:41:55:91:37:61:
12:d9:f5:41:6e:70:cb:84:76:34:50:13:16:06:7e:28:c4:74:
af:c1:e9:05:b3:6d:5e:6e:15:80:fa:f6:0c:f3:ea:52:57:9c:
79:70:bc:16:08:45:70:00:d2:0d:03:8e:83:3e:af:e6:96:17:
e5:cd:01:49:96:22:b2:91:ca:8b:da:58:66:87:27:e7:47:9d:
69:f4:31:72:ae:d3:61:d5:2a:bd:e0:86:89:7e:89:88:2f:59:
3a:e6:e0:db:3e:ce:7c:97:d9:3c:a3:0b:77:2b:ff:87:51:79:
e1:16:91:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:37:30 2025 by rpki-client