Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/BfVGGN_ZWLpGumFG3r0KeZTC4pk.roa
File: BfVGGN_ZWLpGumFG3r0KeZTC4pk.roa (raw, json)
Hash identifier: tcEYeb93Ugs1OG42LcR5c6AUMB0tcO3QFsVLOiVSmHg=
Subject key identifier: 05:F5:46:18:DF:D9:58:BA:46:BA:61:46:DE:BD:0A:79:94:C2:E2:99
Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial: 018573CCE0A5ACEB280F1702940E75307B73
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/BfVGGN_ZWLpGumFG3r0KeZTC4pk.roa
Signing time: Mon 02 Jan 2023 18:44:44 +0000
ROA not before: Mon 02 Jan 2023 18:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3330
IP address blocks: 195.43.149.0/24 maxlen: 24
2001:67c:2aa8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:cc:e0:a5:ac:eb:28:0f:17:02:94:0e:75:30:7b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Validity
Not Before: Jan 2 18:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05f54618dfd958ba46ba6146debd0a7994c2e299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:02:ef:e1:b3:60:04:5b:00:24:7a:90:91:
c0:b6:fc:ee:b3:26:b6:65:c0:35:e8:7e:a8:a3:bd:
dc:b9:50:be:b0:02:23:01:93:a4:a4:8c:4e:9b:6f:
aa:1d:c4:6a:d8:12:0b:f3:a1:7e:c9:dd:e4:86:e4:
07:d1:a2:af:97:98:27:82:35:53:7f:a6:06:45:45:
1d:36:24:16:0b:bf:ed:66:ae:75:1e:9b:f2:98:88:
ad:74:8e:b4:93:98:82:dd:15:e8:aa:c3:00:f9:13:
d7:55:d5:83:18:66:15:df:30:5c:12:51:d4:19:84:
30:b5:0a:6e:cf:c7:a0:7a:a2:85:94:46:16:bd:58:
af:53:04:90:68:96:3e:80:a9:9d:c3:cf:6c:b5:c2:
a8:ea:08:51:0f:ff:fa:34:08:e0:11:91:cd:a9:4d:
07:2a:0e:a3:91:cb:0a:cc:98:4c:b3:c7:ee:75:99:
ff:35:85:7b:28:8b:e5:2f:8b:10:37:fc:b9:c5:9b:
75:83:a0:2d:d0:8d:2c:02:2a:ed:3a:79:c3:53:d2:
73:89:b3:c3:fb:99:50:af:eb:4e:94:90:54:b0:3c:
f6:ae:d4:02:e7:74:90:16:5d:eb:b5:4b:d4:5d:34:
6e:b2:51:48:e9:d2:30:76:52:66:29:fe:85:73:73:
99:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F5:46:18:DF:D9:58:BA:46:BA:61:46:DE:BD:0A:79:94:C2:E2:99
X509v3 Authority Key Identifier:
keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/BfVGGN_ZWLpGumFG3r0KeZTC4pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.149.0/24
IPv6:
2001:67c:2aa8::/48
Signature Algorithm: sha256WithRSAEncryption
3a:f3:38:e0:fa:23:74:b1:30:ec:ef:d6:50:73:bf:7a:73:bd:
bd:23:d6:08:ec:99:5f:23:7a:7e:eb:e0:5a:72:be:3f:29:d9:
57:01:ee:b5:c2:b2:c1:c3:f0:ac:5e:fc:5e:70:38:23:ab:e5:
4a:23:2d:a1:06:81:14:bc:56:cf:78:1c:0f:47:8c:8e:04:9a:
2a:b4:aa:f5:8c:b5:5a:95:1e:f7:e4:09:49:f8:78:61:d7:94:
9f:41:3e:09:98:84:35:2d:ca:d8:80:bc:2f:1b:fb:f8:8a:f4:
23:96:b6:31:71:e6:13:e8:9e:df:e9:1c:76:65:31:cf:70:49:
04:d3:2d:a2:6b:e2:5e:41:bd:40:1a:7c:95:b5:e2:ef:6d:50:
6c:a1:47:02:36:62:9b:f4:ca:2c:17:76:c3:6f:5c:8a:56:41:
a4:e1:0e:03:59:47:9c:d7:2c:dd:a2:59:ad:96:33:a2:17:2b:
33:79:0d:0e:3f:07:cd:68:eb:82:86:af:9c:2b:c0:f4:28:23:
c1:78:7e:f0:7a:7c:f2:89:8b:eb:db:c9:a7:b4:fc:ba:05:77:
e8:a1:66:70:5d:5c:bb:0f:ea:bd:15:d7:c7:ea:42:79:32:ac:
27:96:0b:2d:35:40:de:9c:b9:9e:78:ee:79:47:51:18:a7:ae:
15:d4:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:26:48 2025 by rpki-client