Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/BvSVTbc13HlSbu4d6QbPn5cvkec.roa
File: BvSVTbc13HlSbu4d6QbPn5cvkec.roa (raw, json)
Hash identifier: VxFiZMcU901q63F56ETrnyMwy37UxKOapocdmZ7jxSI=
Subject key identifier: 06:F4:95:4D:B7:35:DC:79:52:6E:EE:1D:E9:06:CF:9F:97:2F:91:E7
Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial: 035005
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/BvSVTbc13HlSbu4d6QbPn5cvkec.roa
Signing time: Wed 25 May 2022 13:55:15 +0000
ROA not before: Wed 25 May 2022 13:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205993
IP address blocks: 185.199.228.0/23 maxlen: 23
185.199.230.0/23 maxlen: 23
2a0a:a4c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217093 (0x35005)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389755423f832a528c93136110f0fe4b10453582
Validity
Not Before: May 25 13:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06f4954db735dc79526eee1de906cf9f972f91e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:cb:30:72:ca:06:bb:d7:25:37:2e:24:a9:
6b:10:90:c4:f9:12:72:3f:61:f2:e0:b3:62:81:bd:
9c:4d:a8:21:f8:6e:23:79:2c:b3:dd:88:83:12:9b:
11:6a:93:eb:be:f1:ef:ae:3a:d9:19:e3:c2:b7:91:
56:52:de:e4:48:48:4a:d6:14:5b:e5:e7:11:24:bc:
dc:c0:ac:ff:5c:07:e9:75:7d:84:90:5d:39:b5:4d:
f5:75:40:b1:d4:54:f4:d1:c8:0a:ce:eb:5c:57:f9:
65:e4:32:eb:4b:74:2d:ac:07:7d:37:86:2f:75:01:
3c:2e:6e:f5:95:91:15:67:03:f4:09:01:8e:48:e3:
dd:84:5c:64:06:da:6a:97:89:18:ad:92:3a:b4:23:
03:5f:39:32:9a:fa:53:c7:69:da:b1:6a:71:c4:f9:
21:f8:2c:ba:37:ef:d9:e1:15:27:2f:49:1d:db:57:
cb:5d:83:b9:cf:3a:4f:d1:2d:b0:00:46:c8:9a:15:
60:f5:81:63:59:1b:39:2e:7a:e1:97:a1:6c:8b:77:
eb:2e:5f:b3:23:db:be:be:a3:3c:7c:44:49:ae:97:
18:56:1f:cd:95:ca:28:58:1b:71:cd:3f:f7:7c:6a:
59:c8:86:93:ac:47:3d:13:c7:b5:38:1d:f0:05:73:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F4:95:4D:B7:35:DC:79:52:6E:EE:1D:E9:06:CF:9F:97:2F:91:E7
X509v3 Authority Key Identifier:
keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/BvSVTbc13HlSbu4d6QbPn5cvkec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.228.0/22
IPv6:
2a0a:a4c0::/29
Signature Algorithm: sha256WithRSAEncryption
65:52:08:c6:4f:a7:63:dd:36:16:55:7b:43:84:25:6e:de:29:
f7:af:46:0d:ec:b2:6b:9d:ac:8b:f5:1c:0d:6b:82:cf:0b:92:
08:64:ca:f8:6c:97:24:5a:cd:aa:9e:a8:4c:c0:cf:01:9c:ae:
0a:a7:29:ba:90:ca:84:78:c7:19:ea:29:3b:41:1f:df:82:5f:
8e:80:b6:21:ea:b9:82:b9:a0:e9:85:0d:1b:35:b6:92:3b:0d:
9a:64:1a:76:4b:b4:87:8f:d8:a5:53:d3:0b:d4:a2:fc:82:73:
d7:59:0b:d1:d9:11:bf:f9:07:0e:50:7f:77:9a:76:57:29:6f:
e0:88:0f:f8:ee:49:06:85:fb:45:5c:7f:f1:47:95:83:cf:2f:
f5:4d:a2:a5:ec:7f:0e:7f:70:a8:f9:90:31:e9:e8:b2:b9:43:
f3:ba:cb:46:d6:b4:aa:60:12:ef:8a:00:08:c4:3d:bd:e6:4f:
d1:ab:cc:8c:bc:76:97:07:c6:9c:c0:5b:ec:c6:26:d4:4e:05:
f6:96:38:cd:ee:62:b3:3c:4c:4d:48:59:b5:da:04:30:23:48:
92:d4:cd:4e:1f:18:ac:79:31:94:86:a8:2c:44:2a:88:67:bf:
56:1c:b8:60:07:f7:84:da:74:17:fc:71:f1:d7:b3:5c:a4:ee:
e8:6d:48:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:01 2025 by rpki-client