Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BfAw9OIg3lX-Yry_vABcLNv9CYg.roa
File: BfAw9OIg3lX-Yry_vABcLNv9CYg.roa (raw, json)
Hash identifier: DkKlIxNIDeg7ajh6chYH1ZVvYcFPMOrpMXY5hkZxAI0=
Subject key identifier: 05:F0:30:F4:E2:20:DE:55:FE:62:BC:BF:BC:00:5C:2C:DB:FD:09:88
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 184F5050
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BfAw9OIg3lX-Yry_vABcLNv9CYg.roa
Signing time: Sat 01 Jan 2022 14:56:52 +0000
ROA not before: Sat 01 Jan 2022 14:56:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25415
IP address blocks: 185.60.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407851088 (0x184f5050)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Jan 1 14:56:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05f030f4e220de55fe62bcbfbc005c2cdbfd0988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ea:d3:5c:31:e4:42:fb:02:66:0d:cf:48:d6:
3e:2d:1d:a9:78:5f:c4:4d:bf:91:ca:27:3f:df:41:
6d:c5:44:b3:87:0d:56:e7:d9:49:68:4a:97:2e:7d:
14:bc:3f:10:9d:c5:08:59:7f:39:dc:b2:9c:80:c4:
69:a8:4a:80:4c:4a:84:96:c7:93:15:97:93:e6:1c:
1e:dd:1e:cc:47:5f:22:ff:7c:7c:65:48:79:19:15:
05:52:d1:8f:b0:90:e6:7f:82:d1:1a:a1:15:f4:c2:
9d:37:77:4a:9c:da:f7:d6:9f:62:fb:3b:7a:2e:e5:
0b:ab:b3:22:dc:31:02:76:11:99:b5:29:51:a3:c3:
14:f8:89:09:b8:44:36:47:c0:c4:ea:ec:93:13:d8:
f0:61:d9:12:dc:c3:54:97:24:e7:9a:14:23:d0:b9:
7c:4f:06:a2:0a:45:31:c9:8d:9f:a8:26:43:cf:86:
1e:f7:70:6a:30:78:b9:5a:0b:1d:fd:d8:c5:45:67:
7b:21:61:95:df:3c:2d:66:c8:ce:45:e6:82:b5:55:
20:7f:f6:31:df:da:5d:aa:9c:53:57:7b:6b:fa:50:
57:72:ef:e1:70:1c:b1:f0:bd:39:eb:c2:b5:31:e7:
fc:d6:17:2e:5f:cf:12:dd:15:df:3a:cb:f2:0a:15:
3f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F0:30:F4:E2:20:DE:55:FE:62:BC:BF:BC:00:5C:2C:DB:FD:09:88
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BfAw9OIg3lX-Yry_vABcLNv9CYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:45:17:c7:f3:c0:05:70:03:df:31:0b:73:94:e4:20:cd:13:
b2:8e:fc:28:38:fe:32:9c:b4:db:c4:05:a8:21:a5:ef:99:4c:
f2:75:6c:25:bc:5d:72:b7:e6:a4:eb:4f:02:1c:9d:69:92:a7:
1b:c4:93:2b:2b:3c:23:00:8d:40:07:39:02:1c:ce:bc:38:fe:
cb:04:7f:05:82:95:2b:71:f5:fb:43:c2:f7:a6:58:46:a6:ef:
8f:69:b1:80:ca:f0:b5:74:68:c1:30:dd:88:9b:c0:ca:6a:0d:
0c:8f:5f:3c:53:d2:d8:c7:6b:65:f8:08:f7:4c:3b:34:6d:69:
d4:ef:a3:41:e9:33:d0:a3:6a:b4:33:89:79:01:be:98:85:27:
fe:52:72:7a:0d:9e:6b:29:6f:33:64:f2:e0:30:f2:90:7c:a7:
11:67:24:d0:fb:67:c7:22:28:98:f1:fa:9e:8e:d2:e6:5d:e7:
96:f7:86:b2:0d:18:49:7d:ed:bd:cb:6b:88:c6:bd:8f:2e:6d:
27:a6:c0:83:dc:1c:3a:12:9c:e9:b7:0d:45:61:79:c7:ed:f4:
2e:05:7f:0f:69:e2:5c:ce:8b:64:a8:98:24:65:fa:f4:83:b8:
a7:c0:08:63:8a:31:84:ee:88:5b:f7:87:e7:ee:4e:c7:48:95:
03:c7:dd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:33:05 2025 by rpki-client