Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/Bt59g9NUE9G12IZ2OLjA2stTsRk.roa
File: Bt59g9NUE9G12IZ2OLjA2stTsRk.roa (raw, json)
Hash identifier: 6up/ITDYx2xvyHX3DZFSZI0y6wMpKM6M2VLOM+N5hzU=
Subject key identifier: 06:DE:7D:83:D3:54:13:D1:B5:D8:86:76:38:B8:C0:DA:CB:53:B1:19
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01856F14F294F88F686D04825BE9BEB5C7E9
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/Bt59g9NUE9G12IZ2OLjA2stTsRk.roa
Signing time: Sun 01 Jan 2023 20:45:21 +0000
ROA not before: Sun 01 Jan 2023 20:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203261
IP address blocks: 82.160.149.0/24 maxlen: 24
82.160.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:f2:94:f8:8f:68:6d:04:82:5b:e9:be:b5:c7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 20:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06de7d83d35413d1b5d8867638b8c0dacb53b119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:6c:aa:a4:4c:46:8b:90:36:a1:ce:e0:04:
00:ad:ab:a2:a3:8e:db:c3:ba:2d:23:00:0b:70:ec:
b0:1f:8e:e3:db:42:75:b1:02:51:8c:78:86:7a:03:
0a:68:33:ea:8b:fc:46:e0:e2:3e:65:6f:94:f1:d8:
af:48:a8:68:dd:d4:9a:aa:16:bf:95:c3:b6:08:a8:
17:0c:46:40:96:d0:68:c3:bb:75:74:b3:fd:43:c7:
5c:36:17:b2:7d:36:55:67:ce:6e:35:99:ed:35:92:
56:51:06:84:cc:f0:76:83:21:d2:f5:bf:3b:4d:f6:
7a:a4:02:04:91:06:bc:46:ff:bf:1d:2e:05:02:04:
99:61:17:a3:20:9d:94:ca:51:ca:71:90:98:c4:9e:
2f:e3:b1:6d:46:3f:87:ad:26:0d:0d:05:48:42:ac:
d3:9e:bb:f3:08:3a:e4:35:ef:be:55:09:25:2e:f4:
97:59:6b:3b:95:9c:42:fb:5c:fa:8a:af:e3:80:9a:
c2:69:90:e5:ed:e7:9e:76:7f:78:70:82:c3:ee:f2:
1c:fe:de:f6:97:f1:fe:a3:7c:da:0c:99:fc:20:86:
d8:8e:13:a4:ff:2b:ed:8a:81:76:d2:a4:b6:10:95:
fb:f5:62:1b:a4:49:62:9b:9d:de:ed:ff:0b:43:67:
9a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DE:7D:83:D3:54:13:D1:B5:D8:86:76:38:B8:C0:DA:CB:53:B1:19
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/Bt59g9NUE9G12IZ2OLjA2stTsRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.149.0-82.160.150.255
Signature Algorithm: sha256WithRSAEncryption
0c:17:74:4f:88:05:1a:5f:79:b1:8d:26:4e:76:eb:0c:fe:6e:
d5:68:3a:b3:4a:d8:44:4e:2b:2b:f6:15:02:97:43:48:46:00:
5c:3e:29:78:2c:1d:b9:49:1f:0e:14:04:d2:80:a1:ba:b5:ed:
1f:96:b4:43:34:3e:cb:e4:ac:64:3c:b3:37:4d:f1:b4:34:43:
fc:fc:87:9b:6d:40:84:69:f6:5f:f5:1d:f4:18:f1:ef:f9:fe:
ab:b0:52:96:78:11:ec:8e:7d:84:af:21:75:ce:87:05:9c:ff:
2d:4c:22:a2:43:0e:85:2b:3f:a5:8a:9a:cb:59:fe:ca:c9:3f:
b8:0b:5e:b5:71:88:ad:67:54:3d:ac:05:ed:0e:ec:4c:1e:08:
5e:0a:00:65:61:90:30:cc:ac:af:45:8f:80:f6:48:e2:76:13:
d1:94:22:26:19:64:e7:4c:3e:a9:ef:b0:6b:c6:db:88:e2:82:
0a:1b:95:d5:cb:31:af:5d:6c:39:38:c0:68:b5:cc:b2:ce:3a:
fd:76:3f:46:43:77:2c:29:4a:f6:ca:2c:a9:71:f5:0b:c7:9d:
48:09:39:03:a1:c9:57:f7:10:6c:b4:3a:f9:d0:fc:ec:62:81:
55:df:e3:74:20:92:bd:c7:0e:1e:19:02:59:30:be:33:bb:36:
d4:00:18:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:41 2025 by rpki-client