Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/BfkrTyiTPiPBE2MNfj0Y1ho-1Uk.roa
File: BfkrTyiTPiPBE2MNfj0Y1ho-1Uk.roa (raw, json)
Hash identifier: NpL53qU6tZJM2+ytMk08htn+iXey2hA/prhhs8nJxbY=
Subject key identifier: 05:F9:2B:4F:28:93:3E:23:C1:13:63:0D:7E:3D:18:D6:1A:3E:D5:49
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 0AFB4C4C
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/BfkrTyiTPiPBE2MNfj0Y1ho-1Uk.roa
Signing time: Sat 01 Jan 2022 13:02:46 +0000
ROA not before: Sat 01 Jan 2022 13:02:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38996
IP address blocks: 213.87.56.0/22 maxlen: 22
213.87.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184241228 (0xafb4c4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 1 13:02:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05f92b4f28933e23c113630d7e3d18d61a3ed549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:72:74:26:12:e9:ed:83:34:da:18:7a:d6:
bf:45:5b:3d:57:44:02:5d:86:8f:c6:12:a7:13:46:
03:5f:46:e5:ef:fe:51:b7:51:1a:72:f9:9d:6b:70:
da:33:6b:6a:c5:f5:3d:da:49:0b:63:c2:21:35:f4:
a2:0c:24:f6:6c:98:2c:93:27:2f:4f:39:b5:16:b1:
8d:e4:41:6e:f6:06:c1:20:1d:ac:ae:c8:f3:20:2e:
9a:e0:85:86:44:19:7d:b7:45:ab:cd:09:e2:ad:37:
b9:f7:28:9e:01:08:24:35:bc:2b:96:6d:b9:f0:b2:
78:14:54:67:c7:59:e8:a6:e6:09:34:28:61:9e:e4:
39:01:d1:90:9b:0f:86:2a:1b:f2:e3:69:10:67:97:
42:0e:b3:f6:21:f1:0b:40:38:0a:22:20:c8:76:0e:
fa:b5:b1:d4:c0:99:10:96:7c:98:31:05:a3:c3:1c:
17:b4:34:76:ce:cd:6a:a4:f5:78:3c:28:c8:6f:b6:
40:48:b6:56:c2:69:34:10:47:cd:6a:0d:82:16:01:
ca:08:ef:c1:d4:99:e3:18:55:58:4b:7f:d7:29:6a:
66:c9:10:82:3e:9f:16:01:ac:70:09:f3:5d:fe:31:
cf:8e:63:b5:dc:72:4e:d9:ec:b1:59:df:e6:ad:2a:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F9:2B:4F:28:93:3E:23:C1:13:63:0D:7E:3D:18:D6:1A:3E:D5:49
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/BfkrTyiTPiPBE2MNfj0Y1ho-1Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.87.56.0/21
Signature Algorithm: sha256WithRSAEncryption
64:81:f0:39:5b:84:e9:c9:c3:98:cc:bb:b5:f0:f8:1e:b5:b3:
d5:fa:95:60:23:50:16:30:8a:39:59:52:16:74:26:f7:f4:03:
4f:24:da:ed:a0:02:de:5e:ca:7a:04:3b:cd:b8:bf:bd:35:79:
05:66:a8:cb:7e:18:df:a1:50:27:89:da:58:b5:31:0d:ba:79:
2b:e7:43:73:84:bd:93:cf:5d:35:ab:55:fc:bc:4c:26:90:95:
58:ef:e3:7c:ed:64:3b:2a:2c:07:02:eb:c6:82:2b:7d:6a:ea:
d9:d8:34:89:60:0f:f8:5a:ce:2c:8e:27:15:93:d6:69:53:c6:
21:99:09:04:22:59:03:4a:e2:a5:5f:ff:20:b4:4a:9f:49:42:
14:40:6c:cc:1b:72:80:17:12:51:cd:89:a0:7a:fa:16:39:f4:
63:95:42:6c:4a:5c:f6:2c:76:c5:9e:45:33:9b:6a:e5:5d:28:
cc:7d:99:84:d0:8d:5d:be:e3:8a:f4:a0:f4:d4:14:90:5f:8b:
5d:0d:b1:e1:12:a6:ed:69:e8:68:19:a5:e4:44:b9:82:d5:de:
29:4d:d4:a8:d3:30:80:42:7b:e8:24:69:a8:a0:cd:8c:50:eb:
1d:81:7c:db:11:ca:0e:d7:5a:b2:23:3e:7c:22:48:8f:b5:31:
ad:d1:e1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:47:11 2025 by rpki-client