Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/BbVu1EsipUPsV54jCuQfztV_TCE.roa
File: BbVu1EsipUPsV54jCuQfztV_TCE.roa (raw, json)
Hash identifier: crsJUNjO3OJM6tLBpeWkOqAx0kkfxxr3C51lDpXvlkw=
Subject key identifier: 05:B5:6E:D4:4B:22:A5:43:EC:57:9E:23:0A:E4:1F:CE:D5:7F:4C:21
Certificate issuer: /CN=5f673d2f621ae31407001748bbde638acbd86050
Certificate serial: 018BD7DD39318DB1355766C8079C07130CBE
Authority key identifier: 5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/BbVu1EsipUPsV54jCuQfztV_TCE.roa
Signing time: Thu 16 Nov 2023 11:21:21 +0000
ROA not before: Thu 16 Nov 2023 11:21:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12650
IP address blocks: 212.45.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:dd:39:31:8d:b1:35:57:66:c8:07:9c:07:13:0c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f673d2f621ae31407001748bbde638acbd86050
Validity
Not Before: Nov 16 11:21:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05b56ed44b22a543ec579e230ae41fced57f4c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:78:bc:17:71:f8:da:db:b5:40:a6:88:46:fa:
ab:d6:b8:96:97:56:fb:9b:b6:f2:15:70:a8:cc:c4:
88:4e:fa:ba:5e:be:52:50:02:f6:d3:87:9c:f5:86:
f0:a2:56:58:2b:08:df:c1:01:88:5d:81:c8:0d:92:
78:de:bc:07:3c:55:d6:96:df:16:2f:8e:71:d2:a3:
5d:33:10:df:14:17:ef:ed:da:98:3d:d6:84:b0:db:
10:7e:be:eb:48:b0:c0:94:34:62:ec:66:fe:9f:cc:
1a:9a:b7:af:d3:dc:d5:f6:59:a6:36:0f:ba:ef:da:
89:cb:02:81:c4:f9:9c:f3:01:a2:e6:5e:40:d0:cc:
da:23:aa:63:e5:3b:7c:da:b1:48:a4:1f:9a:fa:ff:
5d:7b:8e:d3:cf:15:d2:ac:46:70:40:3f:12:f0:6a:
4f:9e:65:78:6c:28:cb:17:d2:bb:0d:4d:99:7a:11:
55:66:b8:53:d9:53:0f:bb:2a:dd:26:ae:f5:ee:14:
2b:8a:42:1f:6f:ce:6f:78:cb:84:a4:89:e1:b3:d7:
2e:49:a7:4a:64:1f:ab:c6:4e:7a:6c:28:7d:49:64:
8b:a7:8f:e8:00:d6:45:d4:6c:01:bd:d8:a1:be:d9:
f6:0f:c8:36:72:86:47:f2:79:3e:1f:78:16:c9:a8:
aa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B5:6E:D4:4B:22:A5:43:EC:57:9E:23:0A:E4:1F:CE:D5:7F:4C:21
X509v3 Authority Key Identifier:
keyid:5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/BbVu1EsipUPsV54jCuQfztV_TCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.45.96.0/21
Signature Algorithm: sha256WithRSAEncryption
02:19:a6:f2:d5:dd:5b:3c:d6:3d:2d:7c:b5:fd:28:f4:a0:83:
20:29:a3:2d:b8:b9:c9:c3:01:f6:36:cb:87:9e:f2:08:60:d8:
06:ef:d0:89:e4:c2:a5:87:97:8c:46:84:89:f5:39:d8:8c:48:
21:cd:56:73:1e:2a:0e:fc:10:b4:e7:a4:53:e6:e9:00:04:25:
61:a8:3e:9a:cd:7e:89:51:47:27:1c:30:25:73:d2:19:13:ee:
b5:06:96:39:5e:1d:f4:5d:b5:8c:a2:05:0a:1e:45:95:cd:85:
51:0f:74:f8:70:25:ad:97:a6:7d:8b:70:15:8b:a9:9c:2d:8e:
4d:ad:1f:64:0d:e7:31:85:7e:91:57:56:c6:ff:87:58:3b:95:
f4:9b:c2:f0:84:67:e8:0f:7f:2c:0f:10:cb:23:24:09:1d:bc:
97:d8:17:8e:69:2f:66:ed:92:61:55:a7:4d:d9:41:3c:b0:73:
34:d5:a1:e2:a9:27:0e:1f:70:7e:ab:c2:6e:f2:82:82:04:1c:
b3:b4:4c:99:4a:bb:26:24:59:0f:c3:93:d3:53:97:25:db:0f:
95:e3:64:43:b8:4a:1a:8b:36:7a:e8:7a:d8:6e:1c:c9:7c:de:
68:9f:95:ad:88:65:97:77:76:c0:25:28:56:c9:a7:31:ed:7d:
34:7f:ab:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:10:56 2025 by rpki-client