Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/YFsWQkM_caL4yTtqCjwM9o60tm4.roa
File: YFsWQkM_caL4yTtqCjwM9o60tm4.roa (raw, json)
Hash identifier: cI1qls/wwDK/ZwwAMroJ/V9hQ4T+63tVAgutKLZpTOk=
Subject key identifier: 60:5B:16:42:43:3F:71:A2:F8:C9:3B:6A:0A:3C:0C:F6:8E:B4:B6:6E
Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial: 0187110498EE9A80720A78157CC4754D3802
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/YFsWQkM_caL4yTtqCjwM9o60tm4.roa
Signing time: Fri 24 Mar 2023 00:28:46 +0000
ROA not before: Fri 24 Mar 2023 00:28:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59802
IP address blocks: 185.68.198.0/24 maxlen: 24
185.68.198.0/23 maxlen: 23
185.68.199.0/24 maxlen: 24
2a05:19c0:2::/48 maxlen: 48
2a05:19c0:2::/47 maxlen: 47
2a05:19c0:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:11:04:98:ee:9a:80:72:0a:78:15:7c:c4:75:4d:38:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Validity
Not Before: Mar 24 00:28:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=605b1642433f71a2f8c93b6a0a3c0cf68eb4b66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6b:bc:c4:d2:87:82:8f:60:92:69:f7:c3:5d:
da:60:74:f1:a8:0d:53:b8:ae:b6:b7:74:d0:eb:1e:
4f:cf:90:cf:bc:c2:41:f2:81:a3:43:dd:39:7b:ed:
3f:95:b9:3a:5e:7a:0a:98:79:3b:e6:51:fe:ae:e3:
f9:7b:18:8f:4e:61:8a:83:83:00:c9:90:3f:26:a1:
79:cf:f9:70:2a:fc:5c:9b:29:e0:79:57:14:84:13:
4a:85:90:a5:ec:31:e1:22:50:72:b1:b7:38:4c:61:
52:aa:90:b6:5b:1b:a6:b0:a9:f4:39:b3:90:90:6b:
17:39:0b:8e:22:c4:95:8d:19:48:e9:5e:7d:7d:95:
99:eb:0e:84:dd:c2:2a:ba:0e:1d:75:31:b1:ee:c1:
ce:53:31:d9:e0:08:32:cc:2b:9f:84:78:ac:f9:37:
c8:78:ab:da:c7:0d:e2:63:d0:80:6a:76:f4:05:45:
14:af:2e:2e:05:3d:73:f4:65:90:8f:c9:ae:76:84:
c9:18:f1:b0:54:c5:f0:a6:24:9f:b2:f3:16:96:91:
45:2e:54:12:2f:6a:12:10:db:71:e5:0c:56:1d:ff:
75:24:c7:c8:28:1a:27:7d:84:e0:c2:43:18:c5:20:
42:2d:52:f3:65:36:ce:f3:21:f6:8e:b6:e8:46:ab:
50:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5B:16:42:43:3F:71:A2:F8:C9:3B:6A:0A:3C:0C:F6:8E:B4:B6:6E
X509v3 Authority Key Identifier:
keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/YFsWQkM_caL4yTtqCjwM9o60tm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.198.0/23
IPv6:
2a05:19c0:2::/47
Signature Algorithm: sha256WithRSAEncryption
1c:3c:f6:d7:d4:92:a3:e8:fa:6e:6b:d9:ad:28:8c:de:8e:1e:
15:db:be:3f:9d:fa:a3:92:a2:bf:91:c9:62:48:a6:ae:77:81:
58:5f:37:de:5d:ac:bb:42:ea:7c:c8:25:05:46:d6:bd:99:13:
f7:68:0d:77:41:ad:b3:7f:04:96:21:72:1c:1e:6f:71:e1:74:
e2:4e:bc:d6:e5:88:1d:cc:8e:9d:d0:f5:66:8d:4d:8e:58:15:
06:7f:6b:bb:1d:b0:92:44:52:38:cb:c7:f5:64:14:ce:a9:08:
1e:18:ca:d3:4b:9d:d1:9c:ca:54:ac:3f:16:2e:c7:15:82:f1:
1e:f9:7c:d7:ac:35:67:6c:f4:0c:a7:02:b1:92:f6:c9:03:43:
e9:ac:b0:a2:49:7e:c0:6c:54:17:16:66:e4:2d:83:58:65:b4:
84:86:23:27:ae:84:bd:28:20:4a:38:4e:7d:53:4a:74:88:a6:
4c:84:48:77:0d:ce:c9:50:b5:3d:49:d5:75:58:4c:54:e6:86:
af:0a:0f:1b:aa:94:7e:b8:77:8a:d1:7a:ea:c2:c7:4e:cb:46:
b1:df:73:d4:a4:42:f7:62:9e:38:c6:44:b4:b1:af:2e:1c:c6:
b2:00:c9:c3:1f:5e:61:ec:a4:86:7b:5f:b9:d2:b6:06:3a:da:
d7:83:7b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:25:48 2025 by rpki-client