Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/Bcv2wz733tiRIq21TSXKYyY0414.roa
File: Bcv2wz733tiRIq21TSXKYyY0414.roa (raw, json)
Hash identifier: duGbt6nOkcXcrg98WPL24120AXc5Fuxb5kAMT3RiHvA=
Subject key identifier: 05:CB:F6:C3:3E:F7:DE:D8:91:22:AD:B5:4D:25:CA:63:26:34:E3:5E
Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial: 0187323A4CFB58F3920585D8823711BB14A8
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/Bcv2wz733tiRIq21TSXKYyY0414.roa
Signing time: Thu 30 Mar 2023 11:14:54 +0000
ROA not before: Thu 30 Mar 2023 11:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199637
IP address blocks: 2a13:e480::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:32:3a:4c:fb:58:f3:92:05:85:d8:82:37:11:bb:14:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Validity
Not Before: Mar 30 11:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05cbf6c33ef7ded89122adb54d25ca632634e35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fe:f0:4d:dc:07:d6:3e:d7:50:f9:08:39:32:
44:28:a8:23:8c:59:12:f0:83:cd:d4:a9:d8:a5:f7:
48:75:e1:ff:be:34:9a:b4:8e:e6:40:3a:b2:3b:88:
c8:4e:ed:bb:cd:32:cf:e1:6f:68:3b:ad:eb:a0:b0:
d6:9a:59:cb:27:17:0b:45:64:d0:d9:5b:bf:ac:8c:
86:00:f0:1a:59:c1:4a:b2:b1:79:b5:0e:41:9f:0e:
76:01:01:c3:76:93:bc:f6:75:14:2f:53:59:5e:b1:
11:e7:9f:67:50:9a:67:68:bd:ee:2e:94:bd:6d:ea:
0a:11:90:34:f5:76:96:d0:55:64:0b:8b:f6:82:f4:
bb:3e:46:35:5d:15:06:51:7e:b5:df:b7:e5:91:d4:
8d:13:52:8d:07:cd:84:55:74:4a:de:bd:62:9c:b7:
93:7b:35:43:da:1e:ab:bd:b8:24:bd:48:f2:8d:6d:
f5:50:d5:b9:dc:60:f5:97:76:b6:3d:aa:bb:fa:76:
c6:72:b0:3e:c3:58:6b:80:82:d7:d8:54:a2:6c:fd:
43:8c:94:ef:93:06:01:5d:94:48:e0:c5:6c:9e:13:
68:68:ea:8f:9a:c9:f5:06:19:de:87:32:b4:a1:1d:
59:b2:d6:3e:66:eb:96:27:f7:cf:2a:4b:8f:09:63:
82:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CB:F6:C3:3E:F7:DE:D8:91:22:AD:B5:4D:25:CA:63:26:34:E3:5E
X509v3 Authority Key Identifier:
keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/Bcv2wz733tiRIq21TSXKYyY0414.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e480::/29
Signature Algorithm: sha256WithRSAEncryption
00:05:d3:e4:dd:75:72:41:c1:fd:e8:1e:1c:b8:33:e8:59:ec:
85:f0:ec:58:94:4b:8f:1c:cc:21:9b:32:75:01:96:89:a2:05:
5b:13:dd:2c:85:96:4b:7a:6d:62:ad:06:64:d7:ee:09:da:6d:
20:a7:76:b5:54:56:c4:1b:be:44:f2:0d:14:cd:f5:27:f2:70:
67:0f:ce:96:82:7e:a3:c7:fd:07:da:02:04:f6:cf:f4:fe:98:
6a:cf:d5:9a:f0:d3:2f:2b:89:ef:99:9a:10:e7:98:43:ed:92:
82:1a:67:21:a4:dd:1a:92:a0:f9:bb:f3:bd:41:88:f4:b8:66:
57:bc:a8:9c:e7:45:83:03:63:ef:17:55:0d:d5:3e:8e:47:09:
9e:21:bd:ac:ea:76:7a:73:00:f4:ef:71:ec:68:38:80:bc:b2:
c3:19:e8:60:88:2c:e9:e7:36:5f:34:33:fa:9e:33:82:29:7f:
25:3b:95:25:23:6a:23:bb:ba:13:01:fb:a2:f4:20:d8:bc:4d:
20:13:9e:ac:41:0e:ba:8c:80:b4:bd:36:96:f7:0b:36:f9:fc:
ee:31:08:66:4e:96:87:7c:6a:e0:15:01:1c:e4:ba:c9:39:0b:
7c:76:82:1c:51:de:60:a3:8c:9f:c6:52:aa:03:78:1c:d3:aa:
32:8a:e5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:30:44 2025 by rpki-client