Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/vKQ7bVJEfOVCZ74rF7rRjolkrFg.roa
File: vKQ7bVJEfOVCZ74rF7rRjolkrFg.roa (raw, json)
Hash identifier: B3G/VrjxM7UXpQuwy0/2QdyEHjkFAKvLLw5Lrk0YwqY=
Subject key identifier: BC:A4:3B:6D:52:44:7C:E5:42:67:BE:2B:17:BA:D1:8E:89:64:AC:58
Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial: 057DA454
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/vKQ7bVJEfOVCZ74rF7rRjolkrFg.roa
Signing time: Sat 01 Jan 2022 04:58:34 +0000
ROA not before: Sat 01 Jan 2022 04:58:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3217
IP address blocks: 185.218.68.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92120148 (0x57da454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
Validity
Not Before: Jan 1 04:58:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bca43b6d52447ce54267be2b17bad18e8964ac58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:3c:f1:8b:fb:fd:1c:b7:ef:94:65:34:53:
6e:39:de:67:51:aa:6b:a3:5c:b4:92:ba:82:e4:73:
77:c3:da:82:77:0b:cf:a8:32:a5:59:54:50:19:9c:
a5:2d:c0:1e:78:0c:d0:13:8e:2e:6e:99:8f:ba:9d:
2f:8c:35:19:23:f8:47:26:82:27:81:be:00:98:6e:
e7:37:7c:b7:c3:d6:50:d4:77:62:cf:74:e1:35:1c:
06:7a:f3:25:78:28:37:e5:9e:fe:23:0d:aa:d4:14:
e3:15:2d:88:c3:fa:87:42:84:16:93:2e:36:f9:7f:
eb:d2:49:78:b2:c5:4d:df:5d:c3:79:a8:6a:b3:b9:
66:77:43:f3:df:57:83:ef:da:ac:8d:5c:3a:55:15:
42:bf:80:e9:52:0c:44:f9:f1:6b:52:95:21:00:5b:
53:c5:d7:dc:63:a6:d0:02:e6:28:20:00:5d:f0:e0:
f7:cc:0e:09:f3:cd:ec:81:e0:ae:4e:f8:e7:3d:7f:
22:fe:35:0f:bc:35:3a:58:12:b3:f5:bc:88:64:85:
56:8d:78:da:e1:92:5e:16:b4:01:87:56:a3:22:ea:
b9:53:d8:c6:e5:9f:c7:4e:dd:a8:e1:ba:17:87:32:
dc:16:60:da:14:b7:1d:09:54:e4:36:ab:cb:99:a9:
ef:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A4:3B:6D:52:44:7C:E5:42:67:BE:2B:17:BA:D1:8E:89:64:AC:58
X509v3 Authority Key Identifier:
keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/vKQ7bVJEfOVCZ74rF7rRjolkrFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.68.0/23
Signature Algorithm: sha256WithRSAEncryption
55:04:7c:67:1b:9a:be:6a:80:33:10:c4:b7:23:96:60:45:16:
c9:b1:5e:7a:76:1a:3b:8e:e5:c3:73:2e:32:27:48:dc:21:27:
91:00:9a:d9:9d:ec:cb:6c:0a:30:11:3b:27:24:0c:96:b5:e9:
46:55:e1:b2:bc:aa:96:f2:3d:c7:5c:a1:c8:39:7d:c9:c5:b4:
59:a8:62:b8:0a:64:c3:c6:8e:dc:04:d0:c0:11:ca:3f:c2:a1:
25:63:9f:bb:9d:cb:8f:2d:67:03:d5:06:3c:72:8a:8f:09:5d:
8e:7d:f7:e6:04:e1:0f:c8:0f:f9:4f:df:53:69:ff:ba:d5:7c:
72:60:56:88:15:78:57:7a:5e:71:f0:54:13:1b:b0:be:53:14:
14:5e:7e:87:b9:cb:d8:42:db:46:31:99:d2:7e:4b:cb:ce:4a:
53:97:2b:fa:89:02:05:27:c7:d5:82:22:c6:c0:e3:03:b3:9d:
00:72:eb:65:9c:02:2d:58:88:fa:be:12:14:3a:af:e4:b5:b1:
81:58:b4:47:05:03:f3:28:50:ea:0e:fc:a5:e1:95:d1:f0:57:
cc:ce:9b:64:d9:36:76:2f:50:35:e3:c0:46:76:76:2a:1e:e4:
82:d9:31:0e:03:8d:91:3e:61:5e:eb:7f:78:24:23:70:71:69:
13:8a:c5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:14 2025 by rpki-client