Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/vwy7k6PRAYk0FMhOoFfBGa_fHPA.roa
File: vwy7k6PRAYk0FMhOoFfBGa_fHPA.roa (raw, json)
Hash identifier: xCN7LvhnDCJtZjTv2mzrCtPIHElPhkB/aI+AQ9iHQN4=
Subject key identifier: BF:0C:BB:93:A3:D1:01:89:34:14:C8:4E:A0:57:C1:19:AF:DF:1C:F0
Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial: 0187116110AFB2FEB4FEDD4CA351660CECFC
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/vwy7k6PRAYk0FMhOoFfBGa_fHPA.roa
Signing time: Fri 24 Mar 2023 02:09:46 +0000
ROA not before: Fri 24 Mar 2023 02:09:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59802
IP address blocks: 185.68.198.0/23 maxlen: 24
2a05:19c0:2::/47 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:11:61:10:af:b2:fe:b4:fe:dd:4c:a3:51:66:0c:ec:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Validity
Not Before: Mar 24 02:09:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf0cbb93a3d101893414c84ea057c119afdf1cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:cc:37:ed:c8:87:4f:b9:08:31:49:ba:d7:
8e:9e:ab:00:1d:d0:92:bf:67:b1:58:e7:a6:20:5c:
d6:0c:8d:d2:e9:71:1e:36:e1:53:39:27:8f:3d:b4:
9f:e4:0b:bb:67:ea:40:56:74:5b:6b:9e:ce:20:27:
15:51:64:c8:28:c8:93:5e:ce:65:d7:35:8c:11:53:
a7:cf:40:39:5f:de:59:49:73:72:f1:27:fe:79:86:
6d:87:2d:ed:99:dd:73:4c:86:47:6c:dd:ca:73:2d:
b2:3c:5a:f2:c3:f2:e6:a1:1f:18:ec:de:3a:c1:c9:
e3:db:20:25:99:a0:a3:7c:79:ff:ce:d1:a1:99:6f:
64:59:5a:64:41:9d:ae:e1:8f:7b:d3:70:2c:af:dd:
9f:9f:26:95:09:d1:84:80:51:8a:8f:36:5a:04:ce:
69:68:8f:3f:a6:fd:bc:9f:02:8b:81:a2:c2:e2:a8:
6c:46:53:c7:95:0d:84:68:82:76:93:28:6f:62:d1:
63:c7:d5:f4:18:e5:73:fe:67:f6:c7:16:6c:f5:bc:
60:4f:3d:c0:7c:ed:70:5b:be:cc:34:1b:59:27:48:
bd:a3:e3:f0:29:9f:cb:f2:1e:e8:04:bc:98:08:fd:
81:3d:2b:42:8d:f6:4a:d0:16:15:46:cd:04:a4:4c:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0C:BB:93:A3:D1:01:89:34:14:C8:4E:A0:57:C1:19:AF:DF:1C:F0
X509v3 Authority Key Identifier:
keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/vwy7k6PRAYk0FMhOoFfBGa_fHPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.198.0/23
IPv6:
2a05:19c0:2::/47
Signature Algorithm: sha256WithRSAEncryption
7b:15:46:16:36:c5:5a:ad:f4:e2:48:2d:eb:69:45:22:dc:e8:
0f:4c:59:85:8a:83:cc:4e:82:c9:9c:04:8c:a9:df:99:ee:c3:
8e:a1:95:d2:f3:03:6d:fb:ed:24:f2:5b:8e:f6:5c:c8:27:c1:
9f:fe:b8:cb:87:66:20:b0:ca:5e:3e:38:45:c3:c5:02:5e:b3:
6a:c0:f4:61:58:cb:df:54:a1:76:28:93:ad:5a:9f:63:9b:59:
cb:31:4f:3f:60:c7:63:ee:67:db:0c:0f:34:ac:96:94:66:cc:
4c:08:6b:84:98:aa:08:b1:91:b1:fc:25:1c:28:59:3b:13:9b:
7d:c8:6b:fe:a7:fb:8f:00:f0:f1:6a:88:a0:35:f7:e2:09:92:
f1:f3:e4:46:12:bf:0b:80:f3:5a:9e:ff:22:b7:60:14:78:96:
74:ef:a7:e9:4a:56:08:23:04:3a:49:4e:1f:68:b4:38:da:a6:
28:61:d9:d5:5d:b6:c7:bd:d2:0f:29:74:a3:fd:c5:a5:6d:ee:
8f:6d:11:2d:5c:f0:d7:56:67:b5:e0:08:a8:9d:c8:3c:d4:3f:
6b:d5:52:fe:7f:70:c2:23:f7:f3:01:87:2a:b7:3f:4a:3c:f1:
6e:31:81:54:b8:e0:97:72:44:1d:61:a3:65:7c:f5:a0:7a:72:
d7:af:02:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:33:00 2025 by rpki-client