Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BiPL2_0SJkJR-WgbzoIRVPjFDKY.roa
File: BiPL2_0SJkJR-WgbzoIRVPjFDKY.roa (raw, json)
Hash identifier: a4EtCml3GaAT2YGjoqLMHZ8sSvgFDRicHN0LvTxH3gY=
Subject key identifier: 06:23:CB:DB:FD:12:26:42:51:F9:68:1B:CE:82:11:54:F8:C5:0C:A6
Certificate issuer: /CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
Certificate serial: 018570397303C7018EC92AA3A5F29337CE19
Authority key identifier: 04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BiPL2_0SJkJR-WgbzoIRVPjFDKY.roa
Signing time: Mon 02 Jan 2023 02:04:51 +0000
ROA not before: Mon 02 Jan 2023 02:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 192.124.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:73:03:c7:01:8e:c9:2a:a3:a5:f2:93:37:ce:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
Validity
Not Before: Jan 2 02:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0623cbdbfd12264251f9681bce821154f8c50ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:b8:bc:94:8c:d4:a2:c4:58:20:c1:af:51:
ea:01:31:2c:7b:fe:ea:d4:2a:5b:5f:db:31:e6:80:
9f:d6:c8:e2:94:92:55:2d:6b:a2:db:dc:81:36:0f:
e4:d9:e8:06:b3:38:0f:36:ce:81:f2:00:0b:d8:cf:
99:db:8d:cc:46:5d:f0:43:0a:96:5b:1d:db:c3:37:
8d:2b:ad:e4:5e:76:28:96:e7:e5:5c:79:f7:f2:c2:
48:de:73:16:6a:75:c9:0e:3e:51:c4:83:f1:43:fc:
f3:79:73:c4:05:7c:0c:1f:3c:6e:44:8a:c7:8b:eb:
fc:a5:2b:7e:ed:76:6f:fc:0c:58:e6:a8:3c:78:24:
4a:23:61:48:4d:11:94:9e:bf:57:6e:16:5a:2d:69:
26:5a:28:42:ab:47:68:d6:1c:7b:f0:f1:a9:93:f3:
f2:aa:ab:4d:57:49:27:af:b8:6b:10:bd:95:7d:e7:
e8:e7:29:07:b4:dd:15:90:ab:9f:1c:02:c0:43:0e:
22:b6:51:96:92:f6:1b:a8:19:16:cc:3e:8f:d9:f4:
78:89:4f:81:5b:95:c0:62:2e:4b:47:e9:3c:d4:78:
19:86:d7:a0:c3:74:30:0c:08:b8:87:a2:0c:8a:cb:
e1:94:dd:51:e2:12:b1:ed:99:e3:cc:52:31:5f:fb:
2e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:23:CB:DB:FD:12:26:42:51:F9:68:1B:CE:82:11:54:F8:C5:0C:A6
X509v3 Authority Key Identifier:
keyid:04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BiPL2_0SJkJR-WgbzoIRVPjFDKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.245.0/24
Signature Algorithm: sha256WithRSAEncryption
28:1d:7f:c2:8c:db:ce:6b:5b:19:2e:62:eb:93:69:c8:cd:a5:
77:9a:61:5e:3a:51:b5:91:97:91:1c:d4:f6:50:3c:00:7c:4b:
5e:e3:29:8e:b5:2e:f9:48:7f:92:70:f3:92:af:0c:08:27:4b:
b0:4f:2e:5a:59:1e:d4:e1:55:52:a2:33:f7:73:84:af:ad:e8:
30:8e:fc:8b:b1:6d:fe:f6:09:8e:88:df:13:7e:78:75:8e:50:
0f:ca:f3:ec:fe:18:22:1c:86:99:dd:54:d5:c0:7c:8d:c2:fe:
96:39:24:f6:35:cf:45:b2:46:5d:7b:d7:61:87:4b:ac:99:cd:
36:67:28:02:52:96:6d:43:71:87:99:f7:a7:91:96:b5:f4:6d:
79:87:8d:8a:b7:ab:cb:17:01:70:95:2d:72:d5:82:4c:2e:17:
1d:5f:7b:90:d0:91:6c:13:c2:c9:03:fa:39:21:d8:bd:bb:1d:
ac:84:07:bd:61:be:69:8f:b2:60:1b:2a:d3:ee:bd:21:a7:9c:
20:94:f7:9f:0a:65:ca:5e:3d:b8:96:c5:e3:9c:af:11:a4:bf:
3d:06:5b:db:1b:d0:12:e4:a6:7d:16:c0:6f:61:c2:f6:f8:1d:
b2:de:fe:b5:4d:d2:e1:84:58:53:79:46:d0:4b:ee:1f:7b:a7:
73:4e:29:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:07 2025 by rpki-client