Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/BtMck0lllUr_BvVO9x2Sq5cn4pc.roa
File: BtMck0lllUr_BvVO9x2Sq5cn4pc.roa (raw, json)
Hash identifier: l6/qahWbczpTQLJacmYV2kb8ddiwdW23uv9tRgQnxVc=
Subject key identifier: 06:D3:1C:93:49:65:95:4A:FF:06:F5:4E:F7:1D:92:AB:97:27:E2:97
Certificate issuer: /CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Certificate serial: 0188067CE9DE6A8E70784FD8A6AAAD8DD855
Authority key identifier: 0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/BtMck0lllUr_BvVO9x2Sq5cn4pc.roa
Signing time: Wed 10 May 2023 16:27:09 +0000
ROA not before: Wed 10 May 2023 16:27:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17158
IP address blocks: 139.28.145.0/24 maxlen: 24
139.28.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:06:7c:e9:de:6a:8e:70:78:4f:d8:a6:aa:ad:8d:d8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Validity
Not Before: May 10 16:27:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06d31c934965954aff06f54ef71d92ab9727e297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5c:87:a8:cc:06:81:05:ce:6f:da:bd:93:23:
ff:32:1f:9e:be:bb:c7:e8:be:ab:6d:24:c9:4d:ca:
e8:1b:26:2a:52:54:a7:4b:2a:ca:f7:66:db:2c:15:
da:82:8e:d2:34:a9:20:d3:64:dd:05:f7:e7:88:0c:
b5:f5:53:a1:92:25:a4:db:39:ec:9f:85:82:8e:e1:
2d:e2:f1:15:71:de:df:4a:02:1f:a9:60:4d:42:6e:
91:7a:2f:e4:ed:2a:5c:19:8c:d2:f5:6b:ae:ea:51:
01:b1:13:28:0b:6b:a5:89:d8:12:da:53:a8:3a:46:
6a:67:cf:fc:60:c8:02:63:1c:c8:ce:b9:30:9c:ce:
dc:90:ad:5e:74:e6:b2:9b:dc:7d:52:6c:17:cd:1d:
7c:04:b3:72:a2:1b:ce:11:f2:bd:a5:87:2a:52:ee:
fe:bf:25:8d:42:16:f5:5d:27:d2:5a:1a:35:34:41:
b1:2d:a1:c2:8a:a1:58:58:69:20:14:9b:4f:94:94:
f6:77:06:aa:81:db:a4:e3:d4:8b:32:f3:76:d3:43:
5c:cb:51:22:00:e2:4b:af:72:db:8e:b9:a1:b2:86:
fd:22:1f:75:ab:08:1f:53:74:52:2b:0b:ab:b8:99:
fb:4c:1a:f3:3d:96:d7:72:e1:59:aa:02:35:a6:bd:
88:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D3:1C:93:49:65:95:4A:FF:06:F5:4E:F7:1D:92:AB:97:27:E2:97
X509v3 Authority Key Identifier:
keyid:0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/BtMck0lllUr_BvVO9x2Sq5cn4pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.145.0-139.28.146.255
Signature Algorithm: sha256WithRSAEncryption
20:1e:ae:13:21:e2:1c:46:16:38:42:c6:f5:0d:dc:cc:5c:30:
0e:82:f5:3f:1c:df:e4:4f:7f:b0:15:8e:00:c4:24:84:38:e2:
08:e8:6f:07:54:cc:b0:c0:11:17:89:fd:5e:88:6b:b4:e7:7d:
c3:f5:b7:d3:0f:e5:34:53:da:61:aa:ab:8c:67:af:2d:87:45:
aa:61:8a:c6:46:7d:39:4f:87:bc:cc:8b:2c:04:19:54:98:ad:
ac:ed:cf:cd:2c:a6:2b:06:53:01:ea:0b:24:e9:eb:84:e4:fd:
92:73:3f:0f:99:75:06:65:aa:8d:66:7c:6b:3c:48:24:f1:71:
9a:d7:69:97:62:02:28:f2:f6:9a:d1:3a:c7:0a:75:e6:e3:0b:
44:0b:f2:a2:74:96:a4:cf:d5:08:34:17:f4:99:5d:b0:96:4b:
a4:b8:6e:42:53:3d:e0:ce:fb:a6:62:23:ed:f5:ad:a6:fd:45:
68:79:e8:fc:2e:93:33:a3:3f:90:60:2d:44:cf:a5:23:28:7e:
70:72:fc:a0:b2:80:24:26:b0:fb:c1:b5:bd:35:e4:30:48:30:
ea:f6:e9:89:63:b4:3e:db:ed:84:f9:49:5d:98:2f:78:2f:e2:
b3:44:90:a7:e7:64:4d:80:72:6a:d8:f7:cd:4c:08:52:b3:b3:
f4:f6:7f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:47 2025 by rpki-client