Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/bs-Ud-tqeulzuhbiH5-KkxQjav4.roa
File: bs-Ud-tqeulzuhbiH5-KkxQjav4.roa (raw, json)
Hash identifier: USy9aHM1oquGukeQGSjRaEJ5w4bbwBUxiPzLYUQiE00=
Subject key identifier: 6E:CF:94:77:EB:6A:7A:E9:73:BA:16:E2:1F:9F:8A:93:14:23:6A:FE
Certificate issuer: /CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Certificate serial: 045908AD
Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/bs-Ud-tqeulzuhbiH5-KkxQjav4.roa
Signing time: Sat 01 Jan 2022 14:07:13 +0000
ROA not before: Sat 01 Jan 2022 14:07:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2471
IP address blocks: 147.99.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72943789 (0x45908ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Validity
Not Before: Jan 1 14:07:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ecf9477eb6a7ae973ba16e21f9f8a9314236afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:aa:01:79:8b:cd:a2:a4:40:65:35:fc:51:
45:d2:e3:a7:18:3a:03:b1:76:5c:b3:5e:cc:6c:b7:
5d:af:21:5c:e6:f2:6a:53:7b:70:d2:ef:97:08:ed:
b3:48:8b:69:0b:87:3a:50:5e:09:e3:b8:8a:4b:f1:
a4:bc:ef:7f:d2:d0:6c:46:be:3a:38:22:4d:34:54:
e7:1d:73:32:e0:8f:b6:d6:68:fd:af:08:88:4c:d4:
1a:1b:1a:80:ab:fd:e8:a2:b0:f2:c7:12:49:3b:67:
34:2d:1d:ce:94:f9:0a:67:06:92:ec:58:df:23:b8:
c5:5a:cb:9e:b8:50:10:e7:aa:cf:ca:5e:6d:23:d2:
e9:31:42:0e:7d:da:11:14:b7:b7:5b:d2:f2:6d:1e:
c3:b9:8c:ab:1e:58:e7:05:b7:10:ea:28:43:d2:dc:
87:e4:3c:97:92:dd:a8:f2:7e:43:c4:33:11:74:51:
24:32:b5:a7:de:9d:e1:d2:ac:c1:e5:f2:c7:e0:52:
cc:69:45:c4:b9:57:fd:34:a6:a1:d6:20:e5:a7:d3:
af:c1:db:f1:d3:10:c6:1d:59:a9:b6:a6:05:72:72:
58:d4:bb:6e:d3:84:f8:ec:27:8b:b3:e8:b1:51:b6:
9a:c5:f0:d1:6f:88:2b:57:ed:b4:55:c3:1c:57:8d:
f2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CF:94:77:EB:6A:7A:E9:73:BA:16:E2:1F:9F:8A:93:14:23:6A:FE
X509v3 Authority Key Identifier:
keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/bs-Ud-tqeulzuhbiH5-KkxQjav4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.99.88.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:6f:c2:59:5e:05:76:1f:e5:e2:64:33:4d:5c:62:bd:4b:3d:
f2:90:b1:ed:9c:dd:20:d0:16:8e:b0:53:73:75:fa:39:fa:49:
c4:56:35:14:64:a3:28:47:3a:da:45:61:94:3e:38:b6:17:13:
36:58:03:bd:16:e6:2c:ef:73:bb:ea:7b:67:15:67:9a:7a:a3:
4a:4f:03:c6:66:30:07:3c:b2:29:bf:52:be:e8:d6:5a:7c:d1:
38:8b:af:98:af:1f:9f:8b:4e:27:09:94:c8:8c:9a:ae:8e:99:
09:aa:02:3a:81:60:06:6b:95:cc:b8:66:ee:f4:84:25:f6:09:
7d:df:9b:4e:a7:48:49:8f:07:10:47:ea:95:9a:a3:9d:4e:91:
a9:67:88:17:93:cb:53:ec:94:62:b0:37:ab:2a:14:d2:9d:88:
a0:0f:d6:1d:c6:3d:2c:c1:46:ff:09:84:1d:fe:30:67:df:3b:
d9:58:7c:c7:82:67:c4:74:89:ad:f5:51:b1:aa:42:e2:14:41:
a9:ed:9f:3c:57:af:00:da:b9:13:8d:5d:74:f6:0c:db:e9:52:
c9:fe:9f:b6:a1:44:91:5c:41:64:b0:ac:42:3e:44:f7:47:57:
eb:0c:5f:1b:58:07:9a:90:c5:41:e6:a0:28:05:18:85:8e:0f:
f5:13:ab:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:06 2025 by rpki-client