Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BfP2vbZgYQ5fChJ8-CZo1fEGbvY.roa
File: BfP2vbZgYQ5fChJ8-CZo1fEGbvY.roa (raw, json)
Hash identifier: z3yLR7enynbEEs5gadbPyLmRrduhRYLBEYE4xuZifOM=
Subject key identifier: 05:F3:F6:BD:B6:60:61:0E:5F:0A:12:7C:F8:26:68:D5:F1:06:6E:F6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01872835875AF74B2B9786D4863BF798CE0A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BfP2vbZgYQ5fChJ8-CZo1fEGbvY.roa
Signing time: Tue 28 Mar 2023 12:33:29 +0000
ROA not before: Tue 28 Mar 2023 12:33:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205544
IP address blocks: 2a0f:e440::/29 maxlen: 29
2a0f:e6c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:35:87:5a:f7:4b:2b:97:86:d4:86:3b:f7:98:ce:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 28 12:33:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05f3f6bdb660610e5f0a127cf82668d5f1066ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fe:4d:d5:ac:b5:31:2f:c4:2a:8d:74:e7:c2:
91:50:c5:92:1a:74:a2:d3:d2:a4:05:2f:fb:ca:4a:
02:f5:ed:cc:2a:6c:35:9a:6e:b0:a8:0c:67:4b:7c:
21:56:7d:98:e4:c4:5f:60:19:79:a4:26:a8:8d:bb:
65:e8:e6:f4:fe:17:49:c0:6f:e1:b8:57:32:14:93:
af:72:95:6b:9a:68:01:72:89:e0:92:09:38:c0:3e:
f5:9a:fe:ff:7f:e6:54:a3:43:12:9a:f2:e5:55:90:
b9:df:09:d1:e3:8b:61:e1:e9:5b:bc:cf:23:84:89:
4f:b4:50:37:d4:6c:5c:07:1d:e0:7a:c9:64:cc:13:
06:54:e9:9c:57:36:fc:10:60:5f:ab:a8:04:7f:5a:
ad:06:c2:16:37:75:2e:6d:15:75:01:ba:66:71:8f:
80:a0:d5:fa:e6:21:54:9a:88:bd:8c:ab:7e:4d:fb:
ed:29:5a:54:95:d4:44:0a:d1:9f:74:3d:23:ba:0a:
64:d8:7d:9f:ad:99:ab:a0:90:96:a7:5b:87:43:1a:
59:35:d4:7b:d7:6c:66:27:6b:ca:e6:54:de:2e:31:
d8:91:34:9e:32:af:47:a7:d0:62:5a:e1:9e:67:56:
54:1b:c7:e4:39:ae:43:29:fd:4d:2a:2c:c3:84:26:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F3:F6:BD:B6:60:61:0E:5F:0A:12:7C:F8:26:68:D5:F1:06:6E:F6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BfP2vbZgYQ5fChJ8-CZo1fEGbvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e440::/29
2a0f:e6c0::/32
Signature Algorithm: sha256WithRSAEncryption
63:e2:df:86:55:98:c4:cf:94:cc:5c:07:48:9f:86:85:08:35:
62:53:cb:64:92:d3:3d:05:dd:1f:ed:3a:b6:76:f8:30:6b:a2:
4e:fa:2e:5d:37:a6:07:a3:6c:03:36:03:87:2d:0c:9e:2d:46:
18:95:3f:8b:83:d1:e5:f5:4f:9d:0e:f5:06:1c:93:c0:40:2f:
fb:42:61:1a:50:18:45:30:19:13:0c:fc:f1:e0:d2:d9:0f:21:
3d:73:34:56:9c:d5:03:29:14:71:ec:5c:03:b6:ed:fd:18:64:
64:a0:43:14:cd:c8:a9:db:50:a8:20:64:32:4f:92:57:fc:7e:
1c:ef:39:9c:08:02:80:27:15:e0:09:62:fc:b3:8d:42:fd:bd:
cb:2c:8b:0d:0a:8b:9d:fe:4d:da:f6:0e:92:51:c1:68:25:c0:
44:c6:19:d7:cd:08:b9:24:94:a9:27:98:f6:a6:a8:ea:16:3a:
d7:99:43:e6:d4:ad:25:0b:e3:f7:0f:4a:1a:3f:34:89:09:94:
61:71:59:6d:9f:c3:e7:27:06:da:3f:db:ba:b1:a1:f9:6a:5a:
4c:d6:d6:1b:8e:52:ff:7c:97:92:2d:eb:2b:09:ea:37:dd:2c:
4f:81:fc:91:ce:b3:cf:d4:ca:89:cd:0c:d9:89:6a:97:d5:26:
74:e6:b5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:59:03 2025 by rpki-client