Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/AAC0BHkjzJqfkAmuxxX213CiLsI.roa
File: AAC0BHkjzJqfkAmuxxX213CiLsI.roa (raw, json)
Hash identifier: N10g9RqjsRByC6owhYWMulsSIMARwy4r6zLoZuAmcJk=
Subject key identifier: 00:00:B4:04:79:23:CC:9A:9F:90:09:AE:C7:15:F6:D7:70:A2:2E:C2
Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial: 01870F9AF81EB7866EC91625AFAD3F6C4ED5
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/AAC0BHkjzJqfkAmuxxX213CiLsI.roa
Signing time: Thu 23 Mar 2023 17:53:46 +0000
ROA not before: Thu 23 Mar 2023 17:53:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59802
IP address blocks: 185.68.198.0/23 maxlen: 23
2a05:19c0:2::/48 maxlen: 48
2a05:19c0:2::/47 maxlen: 47
2a05:19c0:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0f:9a:f8:1e:b7:86:6e:c9:16:25:af:ad:3f:6c:4e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Validity
Not Before: Mar 23 17:53:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0000b4047923cc9a9f9009aec715f6d770a22ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a2:03:d0:c0:55:ae:22:68:2f:c5:63:e1:37:
9f:b1:1e:44:72:71:2b:6a:a9:a6:69:61:a3:e4:40:
69:5d:4e:a5:b9:21:f0:d2:c1:5d:81:67:37:76:fb:
bc:9c:eb:35:44:55:95:04:62:8a:4f:2c:54:00:b1:
92:03:56:d3:53:a9:33:90:d2:42:c7:37:04:47:1a:
0d:47:91:0b:b6:11:84:dd:0b:92:0a:cc:d4:9b:67:
82:b1:1f:13:de:f7:57:2a:09:cc:d2:a6:d0:c0:1d:
d2:d7:2c:52:51:85:7e:ec:71:9d:8f:77:a4:b8:e2:
77:31:1e:7c:35:54:93:10:c8:92:6a:07:9c:69:9e:
a8:9d:79:a6:db:ec:e9:8a:6c:28:29:57:05:82:e7:
a7:da:a9:4e:92:db:9e:5b:8c:56:a0:99:7e:e8:36:
2a:6b:87:50:a9:7a:da:63:92:e0:a4:1c:e7:6f:99:
b2:45:d2:d8:12:6b:ea:08:e3:b6:24:e7:ba:ec:af:
cd:0e:d7:48:00:11:71:9b:d6:41:38:38:82:8b:ba:
50:e2:cd:8e:b4:10:e6:97:72:aa:c1:20:1f:74:ec:
b3:7e:60:ba:9d:80:23:25:6f:dd:58:fe:8b:71:e9:
16:bf:da:30:90:6b:fe:6e:f4:7f:56:35:61:68:3f:
b6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:00:B4:04:79:23:CC:9A:9F:90:09:AE:C7:15:F6:D7:70:A2:2E:C2
X509v3 Authority Key Identifier:
keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/AAC0BHkjzJqfkAmuxxX213CiLsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.198.0/23
IPv6:
2a05:19c0:2::/47
Signature Algorithm: sha256WithRSAEncryption
0c:b8:f8:19:24:09:b1:ff:e5:e7:14:b2:fa:60:dd:30:2f:dd:
0e:cc:09:de:16:de:19:89:5f:ab:dd:92:61:f1:a0:e1:d9:17:
aa:2c:1d:26:90:61:7d:24:04:58:15:db:9f:12:49:8a:9d:cd:
e3:00:44:52:ce:75:b9:93:92:bf:57:f3:cc:e7:d4:62:be:00:
1c:c5:1e:96:6a:23:47:6a:28:29:2a:f5:a5:cf:49:e1:7f:27:
1e:4e:24:f8:08:55:fe:9b:78:dc:c9:16:83:7c:89:40:36:51:
e0:cd:9e:cd:3d:7c:e2:88:be:78:66:9b:9a:53:f7:01:d3:9a:
9a:10:22:03:9f:ca:d3:c4:4d:5c:eb:75:ee:86:30:e4:05:26:
e2:be:ae:d9:c6:e7:13:60:ff:d0:15:dd:77:12:10:3d:80:00:
5c:9c:e2:b0:21:2e:f2:10:c5:8e:0c:5b:e6:80:43:55:5a:5f:
c1:f7:18:d3:35:16:84:37:a7:fa:cb:0e:cc:11:57:c0:8e:fc:
85:dc:7d:92:f7:af:0a:0c:b4:85:2c:aa:12:a7:45:e3:81:69:
09:bd:3c:f8:35:b1:4e:19:7a:df:a5:a3:a8:e3:fe:17:b1:46:
35:6b:ee:81:b8:c4:38:28:0f:7c:35:13:9e:a9:4a:be:da:4d:
fa:5a:11:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:59:38 2025 by rpki-client