Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/_badFwk_qMPgkd7NhHo-buRkh6U.roa
File: _badFwk_qMPgkd7NhHo-buRkh6U.roa (raw, json)
Hash identifier: fm43lHTlTLJJ8G9KQbJV3Pa1m3F7IDLaN7ausygi9kg=
Subject key identifier: FD:B6:9D:17:09:3F:A8:C3:E0:91:DE:CD:84:7A:3E:6E:E4:64:87:A5
Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial: 01870C2CF9BC171FFDC653068328CF665BDD
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/_badFwk_qMPgkd7NhHo-buRkh6U.roa
Signing time: Thu 23 Mar 2023 01:54:46 +0000
ROA not before: Thu 23 Mar 2023 01:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59802
IP address blocks: 2a05:19c0:2::/48 maxlen: 48
2a05:19c0:2::/47 maxlen: 47
2a05:19c0:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0c:2c:f9:bc:17:1f:fd:c6:53:06:83:28:cf:66:5b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Validity
Not Before: Mar 23 01:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdb69d17093fa8c3e091decd847a3e6ee46487a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:c0:52:9c:63:7c:38:b9:74:63:2c:d9:bb:
9c:14:b3:c1:8c:94:45:c9:3f:03:54:cd:e2:1e:24:
f0:7e:67:10:20:97:8e:8c:32:a5:42:02:86:a5:5b:
93:25:12:45:0f:70:d2:d5:fc:54:46:bb:8d:ff:ac:
93:33:2b:d5:97:0f:a0:de:1e:18:b1:92:0a:7d:68:
15:fe:f2:a5:f1:df:68:3c:84:ef:3d:b5:56:ca:f9:
25:5d:8c:09:33:48:a1:ba:a4:57:b6:d5:e3:32:88:
41:ba:5d:ad:41:52:5e:cf:b7:27:51:70:cb:66:34:
bf:a7:e8:5d:62:8a:b2:6f:86:c4:d8:bd:93:fd:1e:
06:da:d4:61:4a:29:6c:47:9b:9f:45:8c:64:77:71:
4a:1c:26:f0:9b:9a:a2:aa:63:65:99:09:79:0e:91:
3a:4b:d2:2b:dc:9a:a3:44:87:22:e9:d5:6b:b7:35:
27:12:8c:3b:35:6b:87:44:18:7b:aa:75:75:3b:e1:
d3:db:82:5b:ba:ee:06:0d:ea:78:48:f6:a9:38:f8:
35:20:91:c3:ad:ea:91:da:a5:ac:2b:ff:c5:81:60:
a9:5e:6a:15:fc:57:ea:8f:ce:19:fa:4e:71:d4:4d:
2e:a8:1e:03:4f:40:35:15:24:b0:41:4a:f6:1d:1e:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B6:9D:17:09:3F:A8:C3:E0:91:DE:CD:84:7A:3E:6E:E4:64:87:A5
X509v3 Authority Key Identifier:
keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/_badFwk_qMPgkd7NhHo-buRkh6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:19c0:2::/47
Signature Algorithm: sha256WithRSAEncryption
48:c2:63:30:02:e6:34:6f:cb:ae:09:27:e0:23:23:4d:63:aa:
f5:0a:03:b2:c0:94:c1:60:d2:2c:38:6b:f2:2c:57:6e:c5:49:
c1:d5:0d:3a:94:81:df:46:fb:31:f7:84:92:33:e3:c3:5c:7e:
f3:3a:f6:52:d5:60:61:71:86:5c:77:06:ed:08:31:fb:a1:f9:
a8:6f:33:e2:13:39:fd:f4:53:42:5a:29:0e:76:f6:e1:fd:4a:
0c:e9:37:e0:2b:e0:f8:fe:17:aa:11:6c:8e:69:0d:37:90:67:
50:d4:55:21:b7:57:d5:c0:68:ba:48:90:f9:65:cc:2e:37:b6:
21:83:c9:48:e2:4c:19:28:90:71:18:8f:58:55:f3:80:1f:9c:
96:98:f6:b1:6e:b3:63:98:31:89:ad:cb:cb:ea:63:5a:22:50:
bf:af:8a:94:3a:ec:b0:cb:e3:59:e3:d8:1c:3d:e4:e5:f7:64:
13:80:22:1f:a5:1c:c0:a5:c1:86:96:40:04:ec:10:c7:68:ca:
6b:17:8a:10:02:39:a4:20:89:2f:1d:ae:d1:48:ec:b8:f8:17:
f7:5a:6c:cd:4c:b6:af:1d:08:99:19:fd:ef:35:b8:c9:dc:47:
9a:d4:e1:3a:b5:57:0a:5b:8e:1e:62:04:60:a5:fe:ff:a0:8a:
7e:3b:dc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:28:09 2025 by rpki-client