Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/Bbwx-_bRMlQxDU7arm_fTZX6o4U.roa
File: Bbwx-_bRMlQxDU7arm_fTZX6o4U.roa (raw, json)
Hash identifier: pK8PbgX+aQIogQ1CcBBTPq8qcUbM7WNkGuoOakV9wAU=
Subject key identifier: 05:BC:31:FB:F6:D1:32:54:31:0D:4E:DA:AE:6F:DF:4D:95:FA:A3:85
Certificate issuer: /CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Certificate serial: 03C59263
Authority key identifier: 6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/Bbwx-_bRMlQxDU7arm_fTZX6o4U.roa
Signing time: Sat 01 Jan 2022 04:56:09 +0000
ROA not before: Sat 01 Jan 2022 04:56:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197991
IP address blocks: 89.150.47.0/24 maxlen: 24
89.150.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63279715 (0x3c59263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Validity
Not Before: Jan 1 04:56:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05bc31fbf6d13254310d4edaae6fdf4d95faa385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a8:26:a8:66:ac:98:4f:78:7f:bb:d8:46:96:
63:be:98:a5:ef:c3:df:af:e9:38:2e:17:2c:5a:43:
9e:88:dc:af:3d:72:8c:90:47:ea:8e:2f:a5:f7:0a:
56:14:e8:d6:72:4b:7c:9f:aa:26:9b:4d:89:91:35:
bf:b0:7c:27:6c:77:75:ef:b6:8d:1d:a8:ac:2d:41:
31:96:6b:0c:9a:63:9e:49:f7:5c:c0:14:77:1e:74:
dc:fa:74:2d:70:c5:0e:17:60:09:94:0a:a3:ae:01:
a8:fb:26:8d:b5:53:df:27:83:7c:5c:b3:8d:c3:50:
73:06:15:fe:1b:f2:4b:55:ec:ce:de:b0:4c:5e:dd:
6a:fa:cc:d8:5c:06:32:46:38:90:23:23:30:c0:90:
0b:61:81:9a:3b:6c:35:b8:8f:de:06:17:95:75:dc:
e5:02:19:d2:0d:b4:9e:b5:78:c8:27:b4:9a:f2:41:
e6:96:30:68:de:70:00:dd:37:21:6f:57:45:b2:99:
f3:cf:af:11:3f:b5:a9:4a:52:b3:01:70:da:4c:74:
80:51:ee:3e:4c:36:5c:e1:d1:05:aa:bd:47:d4:ab:
b4:a4:29:29:ab:6c:52:f0:4f:8d:42:71:0e:8b:46:
93:3d:b7:a2:31:c8:45:57:92:68:1d:b2:c2:ee:ee:
25:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BC:31:FB:F6:D1:32:54:31:0D:4E:DA:AE:6F:DF:4D:95:FA:A3:85
X509v3 Authority Key Identifier:
keyid:6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/Bbwx-_bRMlQxDU7arm_fTZX6o4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.46.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:a6:f6:54:81:6e:4f:2b:85:2e:cc:e1:8b:6f:3f:83:b5:58:
f4:f1:d2:5d:0e:a3:a6:5f:0e:75:51:9b:6e:92:fc:7e:e1:0d:
62:34:85:b4:ee:00:3f:13:7c:63:36:ac:44:1b:1b:2c:f2:c6:
e3:22:e4:20:5c:98:8e:ad:64:a5:46:9f:7a:85:95:8b:26:27:
44:85:b6:e7:ee:c9:89:2f:4a:e7:4e:7f:47:15:4b:ba:ee:75:
79:40:a5:de:ab:7b:ff:77:99:9b:1a:8c:8a:4e:92:4d:cd:fa:
bb:d2:9b:2a:ca:3c:24:d4:f9:11:85:e1:72:ed:54:a7:05:ad:
c2:21:a7:3c:f6:b3:01:b9:58:a2:61:a1:15:2b:e7:aa:06:61:
e3:79:c8:1c:d9:cd:75:66:e0:b3:14:1d:68:de:46:2d:e7:64:
06:46:f2:fd:9d:08:81:9a:58:91:f4:45:e4:4c:9f:99:b7:22:
9f:2a:c6:20:74:52:bb:ad:bf:6f:a2:7e:fd:c1:12:7c:e6:91:
14:65:15:9b:19:4c:63:e4:ba:a5:1b:d3:52:74:db:6a:6b:af:
29:55:6d:e2:74:e7:c2:4d:76:5f:57:37:87:61:63:6d:fb:dd:
2c:ce:88:bb:ff:87:97:98:d7:d3:37:69:20:dd:1e:91:90:a6:
62:e8:83:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:03 2025 by rpki-client