Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/_oBcef8Wwehhe6Lz69xPo0cb2j8.roa
File: _oBcef8Wwehhe6Lz69xPo0cb2j8.roa (raw, json)
Hash identifier: A3PAGLxRbz/7X4r988Cd/aHBb3rdg+T5In+Cmj6oGIk=
Subject key identifier: FE:80:5C:79:FF:16:C1:E8:61:7B:A2:F3:EB:DC:4F:A3:47:1B:DA:3F
Certificate issuer: /CN=39805a05b8d9f0dfc43834c664d624715439f0d5
Certificate serial: 018571278A1BBAF038FC38F532FECCC2856F
Authority key identifier: 39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/_oBcef8Wwehhe6Lz69xPo0cb2j8.roa
Signing time: Mon 02 Jan 2023 06:24:54 +0000
ROA not before: Mon 02 Jan 2023 06:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201370
IP address blocks: 185.68.252.0/22 maxlen: 22
2001:16f7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:8a:1b:ba:f0:38:fc:38:f5:32:fe:cc:c2:85:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39805a05b8d9f0dfc43834c664d624715439f0d5
Validity
Not Before: Jan 2 06:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe805c79ff16c1e8617ba2f3ebdc4fa3471bda3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e6:fa:e4:fe:24:75:f2:bd:56:41:81:9f:66:
53:54:3a:9f:09:de:ed:8c:c8:81:4c:94:3f:10:5f:
d6:81:51:bc:fc:5c:78:9c:be:a2:0c:3f:fa:46:55:
23:47:a6:d4:f3:5b:e0:7a:ca:29:3a:fc:c2:64:f3:
47:b6:53:5b:59:62:c9:66:09:b1:03:9f:21:4a:06:
aa:76:26:85:8d:b9:05:83:9e:e1:09:95:3e:5d:2a:
29:e2:92:49:74:83:57:b0:02:29:97:f8:0f:35:cc:
70:f5:90:5f:ba:f5:4b:70:a8:35:b2:1d:94:23:a7:
76:ef:2e:0e:0e:78:93:9f:a7:1d:aa:98:a6:bd:e7:
ad:35:c1:88:4e:74:36:e6:da:1e:73:c8:da:da:a8:
80:d8:6e:c3:9b:f2:03:8d:72:ff:0b:f4:60:82:e9:
55:c7:cb:9b:72:e6:6d:92:73:b5:32:16:25:05:9b:
00:62:d3:57:8e:f0:19:44:70:52:60:e7:65:01:83:
dd:46:8d:16:4d:4c:f8:4d:2c:8f:21:bb:2d:9c:6c:
2c:b1:9e:b6:e7:f7:6b:f5:b4:1c:7c:da:aa:db:59:
94:e2:e4:29:12:8a:24:15:6b:89:e6:a5:7c:f8:0f:
9e:ba:fb:ee:b0:f0:c6:a5:d1:7a:ed:24:ac:5c:13:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:80:5C:79:FF:16:C1:E8:61:7B:A2:F3:EB:DC:4F:A3:47:1B:DA:3F
X509v3 Authority Key Identifier:
keyid:39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/_oBcef8Wwehhe6Lz69xPo0cb2j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.252.0/22
IPv6:
2001:16f7::/32
Signature Algorithm: sha256WithRSAEncryption
01:06:d7:65:09:1c:35:89:9d:18:ed:0d:c6:61:c3:78:ba:f1:
d0:56:dd:d9:d0:33:43:fd:ad:25:f7:a3:5e:44:2f:10:eb:fe:
e8:e2:f9:ca:70:be:0e:28:16:c5:f4:72:29:20:eb:b7:39:a7:
44:ad:5b:ae:cb:57:e0:d1:5e:bd:94:e2:3a:4a:68:a2:d9:8f:
06:a2:07:62:10:55:03:5a:bf:33:ab:1b:f6:33:73:71:cb:00:
4c:64:c1:9c:ea:9b:06:60:da:c0:35:1f:39:f3:c8:92:95:46:
dc:4c:d4:2b:ad:84:b8:ed:de:9c:4e:e4:e3:20:a0:f3:42:ab:
88:9b:3f:e6:85:89:b6:5c:f8:cb:b4:8c:d4:ef:96:24:bb:dc:
2f:79:e8:35:98:ee:c8:d7:0d:a6:71:d0:8f:fc:df:33:1b:e6:
93:52:c3:6f:ef:bd:57:c3:1e:b9:b0:bc:f8:f8:1c:c2:5a:0c:
53:8b:3a:35:5e:20:1b:b4:06:e1:33:f4:b3:d0:f3:af:85:14:
f4:29:66:cd:e8:4a:a0:c0:5f:eb:ed:bd:32:e7:74:9a:9e:de:
f6:41:2a:5e:fd:e2:dc:f6:25:f7:31:b3:11:57:94:f0:4b:af:
9c:a0:cb:83:f1:26:b4:90:32:b9:52:a5:26:dd:f2:13:2f:58:
06:0c:9e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:37 2025 by rpki-client