Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/bw8GmKQ2xBmOldovIwoMY9YYZbk.roa
File: bw8GmKQ2xBmOldovIwoMY9YYZbk.roa (raw, json)
Hash identifier: hCSnaKx8Gt8tP18eQfjvNOiPf5dNW8QY/JreXXi+CXE=
Subject key identifier: 6F:0F:06:98:A4:36:C4:19:8E:95:DA:2F:23:0A:0C:63:D6:18:65:B9
Certificate issuer: /CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482
Certificate serial: 018452E991818BAA5E4D90306CEEB6F23088
Authority key identifier: 6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/bw8GmKQ2xBmOldovIwoMY9YYZbk.roa
Signing time: Mon 07 Nov 2022 16:25:49 +0000
ROA not before: Mon 07 Nov 2022 16:25:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35506
IP address blocks: 2a10:d000:3::/48 maxlen: 48
2a10:d001:3000::/36 maxlen: 36
2a10:d001:2000::/36 maxlen: 36
2a10:d001:1000::/36 maxlen: 36
2a10:d001::/36 maxlen: 36
2a10:d001:1800::/38 maxlen: 38
2a10:d001:2000::/38 maxlen: 38
2a10:d001:1000::/38 maxlen: 38
2a10:d001::/38 maxlen: 38
2a10:d000:14::/48 maxlen: 48
2a10:d000:1c::/48 maxlen: 48
2a10:d000::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:e9:91:81:8b:aa:5e:4d:90:30:6c:ee:b6:f2:30:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482
Validity
Not Before: Nov 7 16:25:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f0f0698a436c4198e95da2f230a0c63d61865b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:18:4c:68:4b:be:60:7b:9e:a9:7b:81:b1:cc:
a0:3f:db:c4:0a:91:b7:95:b2:9c:cd:d6:53:24:05:
53:b9:3e:1d:78:65:2c:98:25:24:20:64:6e:5e:9b:
aa:27:6e:04:9d:cf:e5:9b:2f:39:ef:ea:0d:50:b7:
41:15:b2:47:10:c3:d3:bf:45:2c:08:3c:63:56:2e:
b9:92:8b:88:be:90:9f:3b:8a:74:90:04:8c:a3:99:
52:04:a7:6c:4f:0f:24:d4:d9:91:94:48:af:e0:82:
7d:94:8e:52:90:00:f3:56:25:83:e2:6f:f0:36:63:
32:73:37:a4:5e:0b:10:e6:44:a5:4d:cf:25:95:24:
f2:74:e2:f7:ae:c6:ce:04:f5:84:1c:76:d1:82:f5:
bd:b8:24:a3:67:5a:d9:ee:44:76:98:11:69:d4:02:
8e:04:dd:36:55:61:ec:16:56:dc:b6:be:00:e8:06:
84:c8:57:7f:44:29:e0:22:4e:c1:9a:0f:90:2a:14:
30:16:e9:b2:b2:d4:09:f2:10:b6:45:32:76:63:0f:
f2:31:71:46:90:74:1e:0a:44:3c:03:ef:8e:e5:d7:
ca:cc:ff:4a:52:47:02:01:da:51:1d:4f:69:68:f4:
3b:fe:ce:fa:37:27:9f:22:2f:0c:a7:36:c4:8b:9a:
69:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0F:06:98:A4:36:C4:19:8E:95:DA:2F:23:0A:0C:63:D6:18:65:B9
X509v3 Authority Key Identifier:
keyid:6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/bw8GmKQ2xBmOldovIwoMY9YYZbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:d000::/29
Signature Algorithm: sha256WithRSAEncryption
3a:57:44:06:60:1a:d1:de:0c:04:4f:25:f2:3d:91:d1:db:80:
ef:8e:a8:4a:5b:e8:a3:ca:0e:ae:1b:4f:ba:bf:e5:d3:ed:cf:
7a:5e:b7:1d:85:42:da:44:5e:e8:8d:cf:81:2d:fa:89:0a:9c:
8b:9c:e2:00:24:90:01:6d:88:62:a7:3b:22:2d:02:8f:25:1f:
74:d6:45:70:eb:7d:58:72:5d:75:d5:13:df:11:73:d1:5f:88:
a1:ed:f6:08:8a:7d:10:ff:35:4b:9d:d9:cc:b7:91:dc:f0:a0:
92:f8:ba:5b:79:fb:0b:c7:84:16:1b:40:dd:6b:1f:ac:53:41:
a9:a9:3e:a7:5f:f1:71:ad:69:ba:b3:e5:e8:78:ac:0b:8f:74:
9a:e3:af:81:a1:f7:e5:5d:a2:3d:6b:74:62:62:23:d8:b4:e3:
66:5a:5e:aa:2a:e7:70:df:3d:d5:72:2c:6b:f2:c9:a1:df:24:
ee:53:b6:9a:b4:61:b4:68:e9:64:eb:32:1a:2f:16:1a:2b:8a:
63:f9:3a:70:6a:40:f0:da:95:b9:bf:dc:7e:e6:81:6d:a7:8c:
a8:77:76:d1:f5:c8:94:5e:38:15:d9:6d:f4:21:e4:fa:ab:73:
eb:9a:10:cc:eb:89:3b:68:a0:17:14:08:e3:22:d4:64:f6:f3:
5a:9b:ec:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:05 2025 by rpki-client