Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/7-BthjjcXXKA5EH9_Fc87BSBMuY.roa
File: 7-BthjjcXXKA5EH9_Fc87BSBMuY.roa (raw, json)
Hash identifier: qm8xpC4euT5mVeoXbGpuVTffcEwndSEfcaNa/oGAqg0=
Subject key identifier: EF:E0:6D:86:38:DC:5D:72:80:E4:41:FD:FC:57:3C:EC:14:81:32:E6
Certificate issuer: /CN=913836859c6ce1869340edf1f273709b8094d9d4
Certificate serial: 01856C6EEB1403585594FD3ADDD3C0CE9BD7
Authority key identifier: 91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/7-BthjjcXXKA5EH9_Fc87BSBMuY.roa
Signing time: Sun 01 Jan 2023 08:24:46 +0000
ROA not before: Sun 01 Jan 2023 08:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200727
IP address blocks: 185.98.68.0/22 maxlen: 22
2a00:7bc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:eb:14:03:58:55:94:fd:3a:dd:d3:c0:ce:9b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913836859c6ce1869340edf1f273709b8094d9d4
Validity
Not Before: Jan 1 08:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efe06d8638dc5d7280e441fdfc573cec148132e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:63:02:71:94:cb:48:97:5b:a3:5f:69:24:db:
9b:9a:a9:42:c7:e7:a0:3e:35:dc:bc:6e:af:ce:8b:
d2:a8:96:ca:c2:24:e5:61:2c:b4:2a:af:5e:4b:75:
b6:bc:d7:80:b8:f2:97:72:7f:9a:16:99:65:2a:d4:
71:4a:9c:d3:bd:1d:de:6a:17:c3:65:e6:0d:1b:27:
46:b3:8c:48:b7:24:44:cd:6c:35:80:43:ea:53:37:
46:83:cc:76:8e:cd:12:f3:08:cd:6f:9f:32:c3:9e:
24:cd:58:8d:68:11:d8:98:6c:8b:f2:06:dc:09:1b:
8c:a3:f4:cc:f7:bb:77:c8:b2:6f:ba:79:33:d1:a6:
6b:cd:eb:4f:35:ab:c3:b6:50:65:42:77:dc:fe:ac:
5f:ea:48:0e:e2:ef:38:01:54:d9:a9:63:78:70:9c:
f4:ae:42:07:80:37:a6:7f:20:3d:2a:19:bb:f9:6a:
b4:26:f4:5a:7c:17:5a:e8:02:3d:00:1f:43:2a:0d:
12:52:ea:ec:37:4c:af:15:0d:c6:f8:0b:b6:d8:de:
46:18:57:8a:e7:d6:87:32:02:2d:92:7b:d4:1f:14:
d3:b4:98:5f:af:c4:6b:67:76:05:44:43:6e:14:8a:
c7:93:fa:d1:a1:62:2c:a2:76:c3:80:ac:21:86:16:
f3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E0:6D:86:38:DC:5D:72:80:E4:41:FD:FC:57:3C:EC:14:81:32:E6
X509v3 Authority Key Identifier:
keyid:91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/7-BthjjcXXKA5EH9_Fc87BSBMuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.68.0/22
IPv6:
2a00:7bc0::/32
Signature Algorithm: sha256WithRSAEncryption
1d:52:f5:bb:79:0f:82:98:3f:31:d4:9d:71:2c:87:1e:d4:89:
c5:a1:47:a8:04:cd:74:33:55:64:e7:22:c6:7b:6c:80:3b:66:
c2:26:d0:ff:97:2f:3b:6e:ae:58:33:5f:56:f1:76:5c:ab:4d:
89:8c:ef:58:a3:5f:1c:b3:aa:af:45:3a:02:5a:f9:38:63:e8:
99:d4:b8:18:ad:13:07:8c:58:c7:d4:0d:94:e1:91:08:e5:d7:
1d:18:76:81:c6:01:cb:1a:fe:f0:25:02:d4:fc:39:30:27:64:
e9:d8:25:3d:d6:9d:44:76:dc:75:5f:e4:dc:88:48:5a:43:19:
da:b8:df:fe:8a:76:77:b4:e8:fc:f8:ce:e5:d5:23:78:02:0a:
79:da:63:3c:6e:85:3f:30:da:90:5a:2c:24:06:c9:6a:71:ce:
86:37:7a:ec:6a:8d:07:7b:b3:e9:41:89:76:51:17:df:58:86:
94:4c:24:8a:a2:87:8c:a9:04:41:ae:ed:ef:56:f2:3e:c2:8b:
78:45:a6:27:46:4b:2e:30:9e:aa:6d:06:f5:41:bd:27:a1:99:
9f:0a:26:8d:32:bd:f5:ad:49:09:3f:f9:9c:ba:e4:df:de:00:
b5:b9:e9:f7:23:a0:76:f9:8e:5a:b9:40:2b:b7:5f:5d:b2:d8:
6a:32:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:22:33 2025 by rpki-client