Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/wrTMkf-y06ZOzZWct5aHBoEp56o.roa
File: wrTMkf-y06ZOzZWct5aHBoEp56o.roa (raw, json)
Hash identifier: ciqwBUIDWW+X0wDcpvex4SqPqrC0Ol+PHMM5QOJESGY=
Subject key identifier: C2:B4:CC:91:FF:B2:D3:A6:4E:CD:95:9C:B7:96:87:06:81:29:E7:AA
Certificate issuer: /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial: 01856F024FB43371C56A4C07DFFB4109D4E2
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/wrTMkf-y06ZOzZWct5aHBoEp56o.roa
Signing time: Sun 01 Jan 2023 20:25:00 +0000
ROA not before: Sun 01 Jan 2023 20:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199875
IP address blocks: 2a00:ad44:3084::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:4f:b4:33:71:c5:6a:4c:07:df:fb:41:09:d4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Validity
Not Before: Jan 1 20:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2b4cc91ffb2d3a64ecd959cb79687068129e7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:a8:95:92:78:37:2d:d6:d4:88:a0:60:a5:
bc:69:04:1e:7d:f8:50:0e:25:df:96:7a:01:28:3c:
60:87:b2:8e:46:1a:30:85:04:9e:78:2d:74:df:c4:
b6:4c:45:e8:1e:78:7a:4e:2b:79:67:85:1d:ca:35:
bf:a4:d1:3a:a1:59:ac:1d:f8:d7:6b:d6:3b:6a:b7:
9c:73:25:a2:d6:8c:8d:3d:dc:a1:3e:8f:3f:b7:02:
37:45:e2:fd:79:b4:d9:ff:78:9d:90:97:78:6f:47:
26:ed:03:e8:06:88:a9:65:4c:21:f4:51:bd:51:ff:
82:68:2f:8c:92:f4:a1:db:fd:b3:68:b0:66:3d:d3:
72:8e:b5:a0:4a:6d:bd:02:bc:13:88:0f:67:af:fc:
45:bc:cf:12:4a:6c:97:45:9d:77:a2:57:d8:3b:e0:
bc:73:3f:19:be:40:b3:be:ce:e2:78:d6:d9:b6:20:
8f:9a:f7:35:2a:ca:ce:f7:22:10:7f:47:b6:34:75:
0b:be:30:19:55:16:b4:87:df:f3:66:af:9b:ac:19:
9c:b3:54:8b:a7:e7:08:e0:89:a0:c6:9a:af:0c:26:
53:e6:e8:4b:53:b8:13:84:41:c3:dd:50:2d:c3:b4:
ab:e3:d6:bb:87:af:0f:df:20:a8:db:1a:0e:cf:a7:
76:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B4:CC:91:FF:B2:D3:A6:4E:CD:95:9C:B7:96:87:06:81:29:E7:AA
X509v3 Authority Key Identifier:
keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/wrTMkf-y06ZOzZWct5aHBoEp56o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ad44:3084::/48
Signature Algorithm: sha256WithRSAEncryption
91:b0:20:ee:2c:36:8d:f0:e3:4c:23:18:48:1c:67:fc:f4:18:
e2:25:dc:6e:be:fe:3a:ee:f4:53:91:17:90:2f:36:e8:e3:22:
3e:78:f9:19:82:a7:3e:8e:76:bf:05:78:1d:51:3b:64:8d:a9:
e6:41:da:2f:aa:37:bd:6c:62:de:3a:92:a3:c9:db:9d:c2:97:
fd:0e:ea:17:15:8c:e9:e4:7f:e9:44:06:fa:ed:ae:46:db:2c:
1a:81:df:97:ce:10:59:5b:12:87:bf:10:6a:e3:42:4a:5f:22:
61:d0:48:aa:f8:ab:2b:af:a8:f3:d1:a2:ff:7e:8e:c3:83:4c:
75:b7:0a:01:fe:37:ec:9e:14:ca:b8:c4:45:dd:a4:c4:90:89:
09:8c:0c:03:33:cd:f4:09:8b:06:60:02:1c:9b:3b:f2:06:59:
e0:b6:cf:0e:63:9d:7b:14:c0:27:68:e9:fc:e6:b3:9e:7a:9a:
e6:86:a2:ba:7f:ad:c6:a1:e3:f8:12:d2:db:ef:8f:80:bb:cb:
3b:1f:06:6d:21:e2:4f:0c:b4:c5:56:4a:de:d4:80:58:3d:ce:
46:93:30:4e:8d:84:18:34:67:9f:2c:4c:b7:b3:a4:c8:e1:07:
73:ec:d2:d7:b8:b8:77:3d:83:af:ab:f0:31:0d:32:cc:f6:34:
62:63:eb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:20:54 2025 by rpki-client