Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/bvB_61fnVCdkUcrev67Ib6XwI48.roa
File: bvB_61fnVCdkUcrev67Ib6XwI48.roa (raw, json)
Hash identifier: ZQiL/wE0JTa+jl6x1NvdadXJwD+phUqZjPotzaPPu4w=
Subject key identifier: 6E:F0:7F:EB:57:E7:54:27:64:51:CA:DE:BF:AE:C8:6F:A5:F0:23:8F
Certificate issuer: /CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
Certificate serial: 0189F326E134020D65809A9FC5B4816BEF12
Authority key identifier: 82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/bvB_61fnVCdkUcrev67Ib6XwI48.roa
Signing time: Mon 14 Aug 2023 08:25:58 +0000
ROA not before: Mon 14 Aug 2023 08:25:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12843
IP address blocks: 185.34.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f3:26:e1:34:02:0d:65:80:9a:9f:c5:b4:81:6b:ef:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
Validity
Not Before: Aug 14 08:25:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ef07feb57e754276451cadebfaec86fa5f0238f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:4c:90:a5:ba:9d:44:41:bd:6b:5a:74:33:
83:e3:31:58:f3:c6:52:28:b8:bb:a4:23:7b:99:8f:
5e:21:8b:8a:e5:f1:e1:e2:b6:6f:7d:c4:95:f8:f6:
cc:0f:0b:29:94:33:ab:d5:cc:ab:15:3d:58:02:64:
60:21:18:ab:9c:c9:26:ba:e1:d3:56:e2:4a:08:03:
21:81:79:19:7c:3f:a2:a6:a7:92:42:df:dd:4f:ef:
4a:59:47:c2:2c:f1:73:6b:ca:11:e7:61:9c:f5:db:
ca:61:34:53:b0:85:6f:9b:a5:bc:8b:0f:fe:75:5a:
a2:b5:f3:63:4e:6c:b4:2f:27:66:bb:7c:0d:b9:f1:
8b:e6:0d:03:6b:6a:15:7b:d8:03:20:eb:3d:98:09:
33:46:8f:dc:6f:46:e5:e0:3f:af:0d:9b:4a:48:53:
a8:9a:51:64:04:1c:e3:e3:4f:50:5a:4f:8d:9d:3e:
a8:82:fd:f0:09:cc:c1:e8:6b:fb:5e:e4:2f:74:9f:
d5:66:61:c1:1d:ee:3c:3e:d3:1b:fe:ad:a1:8a:6c:
5f:df:96:71:2d:1e:7a:c1:b0:2a:8a:68:f6:c1:61:
c9:f6:d7:d3:73:4f:fc:14:9a:b2:03:de:90:af:cd:
42:60:a2:e2:f9:67:d2:1e:84:7b:0a:85:a9:0a:95:
cf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F0:7F:EB:57:E7:54:27:64:51:CA:DE:BF:AE:C8:6F:A5:F0:23:8F
X509v3 Authority Key Identifier:
keyid:82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/bvB_61fnVCdkUcrev67Ib6XwI48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.184.0/22
Signature Algorithm: sha256WithRSAEncryption
76:00:af:9b:31:f3:6d:d9:3f:ed:95:c8:70:b5:e4:b6:62:f9:
4e:19:6a:de:17:1a:ae:82:29:ec:45:63:5c:e2:cb:a5:ea:be:
63:9f:5d:f8:d2:9e:c6:d4:dd:96:d2:19:3f:fa:cc:71:b8:b3:
40:ec:57:9a:4e:78:51:68:e8:50:d6:eb:b4:58:8f:4f:cb:78:
88:ce:44:15:1b:f0:a5:61:37:36:86:94:85:dc:8f:f1:aa:8d:
3b:67:c6:ab:b8:3c:6d:fd:b4:6c:0b:27:e9:e4:90:9c:2e:b7:
b3:72:bd:df:6d:13:e1:b0:04:f1:97:94:ef:f6:87:64:b7:bc:
96:b7:33:04:21:47:a2:6a:94:c5:31:dc:a2:1e:63:ac:72:5d:
b4:b2:be:26:5d:c3:3c:fa:fe:ef:01:de:09:11:0f:7e:ea:e3:
33:11:b7:bd:0e:a6:67:13:71:b9:6c:97:5a:f8:e9:47:b3:36:
cb:cc:06:0c:d1:a0:63:c2:ab:48:1f:34:d7:48:aa:75:aa:6b:
ed:29:40:01:4b:c6:49:93:c6:66:b0:bd:9a:cc:a7:0c:0f:b3:
29:36:6a:9d:27:5b:22:71:0f:15:dc:ab:64:83:fa:91:2d:b5:
5d:cd:80:36:db:64:12:46:e4:ae:60:4d:9d:bb:97:22:5c:15:
68:b4:0a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:56:40 2025 by rpki-client