Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/BBSSmfN2LK4NQ7SeAa7uH53Xo1Y.roa
File: BBSSmfN2LK4NQ7SeAa7uH53Xo1Y.roa (raw, json)
Hash identifier: 7ohllwoJ3lTq05L9qjETjNGL9fbw7OszgBbSe4YsYAs=
Subject key identifier: 04:14:92:99:F3:76:2C:AE:0D:43:B4:9E:01:AE:EE:1F:9D:D7:A3:56
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 018B858609A3C03CD471104DF26FF52178D4
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/BBSSmfN2LK4NQ7SeAa7uH53Xo1Y.roa
Signing time: Tue 31 Oct 2023 11:37:15 +0000
ROA not before: Tue 31 Oct 2023 11:37:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50607
IP address blocks: 109.207.105.0/24 maxlen: 24
176.126.56.0/22 maxlen: 22
176.126.57.0/24 maxlen: 24
91.198.97.0/24 maxlen: 24
2001:67c:778::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:86:09:a3:c0:3c:d4:71:10:4d:f2:6f:f5:21:78:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Oct 31 11:37:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04149299f3762cae0d43b49e01aeee1f9dd7a356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a7:77:2d:2d:73:50:f8:ec:60:c9:3e:fb:b3:
a6:96:74:18:4a:be:a0:1f:23:7d:f1:08:9e:83:b9:
c6:25:1c:15:15:c8:b2:b9:5b:ef:a6:37:f4:de:28:
ae:ba:f2:0c:bd:33:8f:e2:b3:a4:75:2b:c2:bb:ac:
9d:e4:3d:51:46:ba:97:60:84:d6:e8:a2:e8:36:94:
cf:8c:d3:f5:8c:5e:93:f6:7a:6f:79:77:ee:bb:8b:
d0:e3:82:24:d6:d4:6b:21:f1:e9:54:1c:28:d4:9d:
c4:70:58:9a:7c:aa:d2:78:c5:dc:08:5a:c7:0d:2b:
29:23:70:35:bf:4a:2b:26:0e:0d:e5:2c:47:2a:4e:
26:d8:9f:98:e1:66:d0:0b:94:03:41:03:06:23:03:
d7:37:c9:3c:f1:54:c8:7a:e3:32:f6:09:6b:3e:78:
cb:d3:f2:d9:73:b7:a1:91:a1:0f:5c:4c:8b:9a:f8:
82:53:0a:70:76:90:52:b3:d6:f2:93:cc:2a:98:ee:
3f:92:32:69:1e:97:a3:b3:bb:3b:b6:c6:a1:43:35:
ea:3b:8b:84:10:2d:a6:00:c1:59:fb:46:ed:7b:4b:
9a:3d:49:25:30:52:18:d7:50:b0:e7:c9:8c:01:79:
61:fb:75:c6:b7:17:82:b3:7b:df:31:c4:60:d5:fe:
64:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:14:92:99:F3:76:2C:AE:0D:43:B4:9E:01:AE:EE:1F:9D:D7:A3:56
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/BBSSmfN2LK4NQ7SeAa7uH53Xo1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.97.0/24
109.207.105.0/24
176.126.56.0/22
IPv6:
2001:67c:778::/48
Signature Algorithm: sha256WithRSAEncryption
21:e1:bc:7d:6d:d1:d4:b5:d4:c7:d1:be:fd:45:87:e1:8f:b7:
43:d5:f7:a3:7d:12:b9:df:9d:1e:33:cc:7a:fe:ae:c1:84:99:
8e:a5:ef:40:60:1f:b2:dc:df:00:53:da:b1:56:81:6e:4b:c3:
dc:45:33:ce:72:04:ec:77:08:f3:b8:36:95:7c:23:68:3e:52:
fc:a0:97:fb:db:d5:3e:aa:23:d3:b6:81:71:b2:ef:e7:28:1c:
53:9e:a1:60:e8:92:07:03:28:ea:19:fb:5c:b6:ad:6d:d5:9d:
0a:1a:dc:28:ee:27:90:37:f9:62:a7:15:5f:b3:1d:a1:c1:a5:
0c:0f:45:b1:fc:85:74:d0:fa:c5:70:5f:db:42:82:f4:db:26:
4f:30:cd:5b:b7:05:36:18:78:f6:f0:ed:5a:f3:f8:d1:5f:89:
80:e9:8b:d9:d0:cf:6e:27:4a:32:c1:1d:22:99:c0:51:37:cc:
df:e5:9b:ea:7a:a6:3b:ee:52:b2:16:05:8d:5d:c0:54:e7:b2:
0f:bd:7b:25:03:12:f1:df:c6:a6:96:b9:2e:9c:a5:6c:7b:99:
af:3c:61:f4:a4:c9:b6:6d:22:35:7d:9a:40:59:77:28:18:ac:
f9:12:59:db:e6:a6:74:be:36:5e:5e:68:c0:37:46:c4:13:5d:
f5:26:f6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:24 2025 by rpki-client