Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/bpoZwNz39sl476nl_43-BB_uIl4.roa
File: bpoZwNz39sl476nl_43-BB_uIl4.roa (raw, json)
Hash identifier: q1Z0ClioTl1wQZhzCij9f9hq+hHYIYKuoZoUQ6zuvKg=
Subject key identifier: 6E:9A:19:C0:DC:F7:F6:C9:78:EF:A9:E5:FF:8D:FE:04:1F:EE:22:5E
Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Certificate serial: 368583EC
Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/bpoZwNz39sl476nl_43-BB_uIl4.roa
Signing time: Sat 01 Jan 2022 12:56:48 +0000
ROA not before: Sat 01 Jan 2022 12:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43528
IP address blocks: 91.195.34.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 914719724 (0x368583ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Validity
Not Before: Jan 1 12:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e9a19c0dcf7f6c978efa9e5ff8dfe041fee225e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:32:ba:23:c3:f9:4d:01:39:fd:22:e0:0f:
16:90:7e:35:4c:e8:9e:c9:b4:4c:be:8e:5a:b6:ca:
89:5e:e6:28:ad:81:c4:e9:2f:e6:4d:e0:14:25:7f:
0c:bd:b6:11:84:a2:da:b3:de:32:f5:d5:f2:5f:14:
83:8e:8f:ab:45:96:ce:f9:76:3a:76:91:b6:8f:74:
89:c7:9a:c0:a0:5d:d9:4f:18:7f:cc:a2:3f:39:70:
b7:f3:bc:06:fa:77:75:08:e0:ad:c6:eb:d7:97:97:
28:95:d4:b3:84:1c:74:75:b3:27:88:3a:92:e5:4c:
c6:74:77:dc:da:f2:16:e2:10:56:ba:f3:19:b9:b0:
e5:da:90:38:c0:fc:4b:82:85:7d:61:52:cf:de:a9:
79:aa:5b:3d:37:b4:45:5f:75:6d:b3:c7:5e:c2:c7:
d8:d3:94:f4:68:1b:99:2e:4c:b0:b8:1e:98:b4:ca:
76:86:f2:e4:74:0c:f3:a9:59:64:c1:a6:2c:64:56:
c7:86:a9:46:23:7d:1c:41:b8:52:3a:ba:a9:dc:d4:
84:b7:d8:1e:3b:6d:31:bb:9f:97:7e:2d:f8:bf:7c:
f4:04:84:ed:cb:2a:40:1f:46:f9:73:0b:55:14:cd:
fc:19:a4:23:8d:21:f7:c6:c6:0c:b1:dc:61:08:3e:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9A:19:C0:DC:F7:F6:C9:78:EF:A9:E5:FF:8D:FE:04:1F:EE:22:5E
X509v3 Authority Key Identifier:
keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/bpoZwNz39sl476nl_43-BB_uIl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.34.0/23
Signature Algorithm: sha256WithRSAEncryption
10:52:6a:01:6b:22:75:ac:f6:84:03:92:f1:67:3b:1f:76:61:
19:6e:fd:12:32:c7:c2:9b:cb:47:0f:0a:3b:5c:fd:f2:42:50:
83:d2:fa:f8:14:28:9c:19:fb:bf:93:79:fa:70:10:82:4a:02:
8d:1f:d4:46:14:67:91:e4:96:d0:cc:db:3a:f3:d1:43:02:ad:
e1:7a:cf:58:0d:15:d4:6c:c4:c4:30:20:c6:f3:6d:7b:79:06:
13:70:1d:f7:2f:21:4d:57:47:7a:08:05:50:c9:43:03:73:c2:
13:f2:a0:6c:4d:d7:81:dd:df:57:6b:65:33:54:b5:db:a3:66:
65:d5:a4:c0:ff:7c:15:e4:94:e1:61:8f:6d:15:32:48:6c:77:
7c:10:50:a1:13:c3:dd:83:71:42:a9:52:db:17:ba:cc:c2:ff:
e6:21:01:75:be:12:9e:04:5d:89:8c:94:a9:1e:e3:7d:86:ef:
26:3d:c6:e4:2d:e4:08:96:c7:83:57:56:5e:3e:3a:6a:83:10:
e8:94:07:40:40:d7:88:74:71:7f:32:a5:da:4d:26:d1:bf:f2:
0e:ed:1f:d5:21:d8:b8:92:4c:19:3b:f8:7a:b3:4b:92:b6:a6:
c0:8f:9a:dc:17:7f:2f:7e:68:cd:7e:74:e8:ea:ec:88:c3:eb:
6e:0f:64:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:17 2025 by rpki-client