Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/BEXGFccI64rtBEZpcazAnURvQww.roa
File: BEXGFccI64rtBEZpcazAnURvQww.roa (raw, json)
Hash identifier: IseSsKpj1NlSmgd4HQqUBmyKSHhWaV2Wq6IQRK1u4t4=
Subject key identifier: 04:45:C6:15:C7:08:EB:8A:ED:04:46:69:71:AC:C0:9D:44:6F:43:0C
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 0188CF87EE8C55DF5B0EDB0378114482EC10
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/BEXGFccI64rtBEZpcazAnURvQww.roa
Signing time: Sun 18 Jun 2023 17:22:52 +0000
ROA not before: Sun 18 Jun 2023 17:22:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204010
IP address blocks: 2a05:906::/32 maxlen: 32
2a05:905::/32 maxlen: 32
2a05:907::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cf:87:ee:8c:55:df:5b:0e:db:03:78:11:44:82:ec:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Jun 18 17:22:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0445c615c708eb8aed04466971acc09d446f430c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:d4:05:4d:62:e5:29:cc:38:b4:6b:45:89:
9c:dd:8c:63:0f:e6:25:b9:2e:71:01:1c:53:f0:01:
2b:6d:64:af:38:c4:5f:ea:1f:f4:bf:9e:5c:76:09:
b9:c1:65:a4:df:f0:9f:75:e9:6e:a0:75:56:c7:c1:
4c:07:27:43:dc:d7:dd:08:30:c4:ce:14:8a:24:19:
27:e2:65:e0:4a:fe:43:88:49:2f:a6:9e:56:f3:2d:
38:a6:83:ad:62:50:34:ee:a6:7b:71:da:82:20:d3:
d3:17:2b:db:b9:62:bd:d4:08:db:2f:61:11:83:1c:
15:1e:b0:ad:c2:ce:78:2c:ba:92:c4:bf:3d:05:e2:
07:5a:5c:63:ec:c3:c0:24:21:d1:9b:f0:18:40:0d:
b1:29:fe:9d:be:c5:d1:e6:56:32:d4:83:e8:d3:af:
40:96:68:2a:43:4d:8c:77:3a:1d:bb:3b:81:f9:4d:
23:c0:08:20:24:60:5f:50:26:fe:09:58:14:cb:54:
b2:a0:0a:08:34:f0:aa:44:0f:f3:df:b7:4d:de:d9:
78:45:0e:84:61:4d:c3:54:0b:84:70:fb:c1:a1:d8:
a8:2d:20:a3:ab:29:f0:5c:8e:3c:e9:e1:ab:10:46:
42:0f:87:05:84:42:ae:d8:a8:55:f5:1c:f5:b7:d1:
da:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:45:C6:15:C7:08:EB:8A:ED:04:46:69:71:AC:C0:9D:44:6F:43:0C
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/BEXGFccI64rtBEZpcazAnURvQww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:905::-2a05:907:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ab:3d:e8:c2:5a:0d:56:02:4d:4b:6d:f1:5b:d7:9b:cc:c9:6c:
17:df:6c:e5:1c:96:06:f2:2f:e5:16:37:b0:36:fd:01:f6:35:
04:1e:3e:d5:48:ac:7a:93:42:fd:a0:95:62:c3:df:18:2f:7a:
ec:89:a7:4e:1c:60:a6:90:aa:30:6f:7a:1a:10:cb:ed:ba:fc:
2f:59:4e:3b:69:c3:d0:68:77:02:0f:b2:4e:cd:eb:20:33:5f:
78:59:6a:99:8c:bc:d6:54:53:8d:84:f4:ab:70:c2:51:99:ee:
fc:ca:2f:f5:4b:63:63:ec:7f:fc:7a:44:4c:54:78:41:86:9b:
66:c1:32:88:82:ea:d3:6e:a1:00:65:a8:f9:31:e5:41:22:c3:
58:ed:8c:14:c0:0d:36:7b:91:85:90:dd:74:fa:e5:ea:ec:55:
81:5f:99:1a:21:dc:71:69:a8:84:3d:d6:8e:f8:7d:50:95:42:
3e:b1:cd:09:dd:99:07:b7:df:f7:0b:a2:c6:18:9a:14:eb:cb:
48:f3:c1:8e:6b:37:5c:57:c0:2e:ee:ac:b5:4d:4d:db:e2:eb:
06:65:9d:61:fd:14:57:a4:63:9d:c1:66:0b:0b:b6:3d:2f:2c:
56:b1:8b:b0:af:ac:4d:c0:5b:a9:b1:1c:71:2c:c7:ee:6a:e3:
69:d6:a4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:12:32 2025 by rpki-client