Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/BVJXKKb5F4VScszgFZmAx8AKhD8.roa
File: BVJXKKb5F4VScszgFZmAx8AKhD8.roa (raw, json)
Hash identifier: Flbf9DzBmGd7ogWXRMiOWjJTp6zVHNlDxZydmWrUEYk=
Subject key identifier: 05:52:57:28:A6:F9:17:85:52:72:CC:E0:15:99:80:C7:C0:0A:84:3F
Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial: 01856F9DAACAAB02AA94C6F6164B3D139D63
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/BVJXKKb5F4VScszgFZmAx8AKhD8.roa
Signing time: Sun 01 Jan 2023 23:14:41 +0000
ROA not before: Sun 01 Jan 2023 23:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1930
IP address blocks: 192.84.13.0/24 maxlen: 24
192.84.15.0/24 maxlen: 24
192.138.204.0/24 maxlen: 24
192.92.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:aa:ca:ab:02:aa:94:c6:f6:16:4b:3d:13:9d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Validity
Not Before: Jan 1 23:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05525728a6f917855272cce0159980c7c00a843f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:59:4c:a3:03:4a:55:c1:d5:63:e9:7a:95:
10:ef:0f:4a:4e:a3:fc:46:6b:7f:63:a3:9b:0f:c0:
a1:82:cb:5e:2d:fc:1b:e5:30:0c:2d:8e:6e:c5:a8:
bd:78:1e:d1:39:dd:a5:28:69:f9:bb:e3:d8:e8:ba:
ef:b0:95:dc:ae:08:37:35:81:37:16:b3:45:26:d7:
c3:4a:95:76:66:ca:0a:71:ac:5c:81:88:89:2d:1f:
5c:b1:73:d7:b9:75:b5:20:da:0b:df:77:5a:37:d9:
65:2c:11:fd:94:20:42:10:c3:1e:64:02:6c:56:fa:
12:e0:08:a9:36:ee:c1:d7:02:64:24:ad:36:da:d9:
67:47:a0:c0:e1:ce:86:c1:0d:58:90:9a:d9:22:7e:
d1:e2:2b:04:ae:fb:e1:69:c9:e5:f1:fd:8f:6e:18:
97:70:24:3d:5d:34:ec:d2:ae:42:de:4c:b5:6c:08:
91:4c:ae:98:0d:3a:08:51:56:8c:40:f3:37:fd:ca:
8d:bf:c7:a9:43:84:3d:ee:07:b2:c9:9e:a3:bb:05:
98:ab:0b:4a:f4:26:8c:71:b0:40:ba:be:34:b2:da:
b6:53:12:00:73:85:b9:23:af:f6:4f:64:6f:03:b7:
d4:6f:73:66:53:f4:53:2c:ba:70:83:3f:de:e7:42:
57:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:52:57:28:A6:F9:17:85:52:72:CC:E0:15:99:80:C7:C0:0A:84:3F
X509v3 Authority Key Identifier:
keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/BVJXKKb5F4VScszgFZmAx8AKhD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.84.13.0/24
192.84.15.0/24
192.92.144.0/24
192.138.204.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:3f:09:a0:84:d2:09:d6:1a:93:d4:ac:bd:9d:ae:a9:0d:49:
f6:85:d0:a9:c1:3a:23:b7:9e:0a:82:5a:a5:05:06:ef:fe:c7:
7a:b5:42:dc:9e:8b:e7:0e:09:36:6a:35:f2:a9:af:7f:94:f1:
9e:97:c4:da:c2:77:7a:a0:d6:76:46:56:d6:2c:39:05:ba:f8:
7d:50:83:1c:15:16:5c:f0:fa:53:c6:a1:85:8f:c1:ae:04:2c:
cd:f6:53:df:e1:8e:a8:0f:69:11:1e:08:04:cf:c7:f9:6d:32:
92:02:6e:20:90:e8:3f:8e:9b:d1:72:c3:23:b2:66:77:df:87:
5b:36:2d:6d:6d:7e:8d:57:58:bb:f7:ab:88:40:8a:da:ad:14:
5b:f1:ec:a1:39:72:7f:7a:72:b7:32:8f:a1:19:76:f8:c6:c6:
df:37:2c:e9:51:8a:dc:a6:a8:a1:16:06:e7:bd:c7:f4:42:51:
23:b0:fb:0c:c2:fd:13:c5:fe:87:f2:d4:f7:d9:4d:10:01:65:
13:75:6f:e2:bb:ff:9b:2d:86:87:95:d8:d6:f9:fb:03:8d:1a:
4a:57:62:c1:f4:ee:95:2b:08:7a:3e:d6:8f:11:68:f2:05:51:
87:66:e6:ac:74:09:50:dc:17:12:b2:62:43:4b:8e:a3:a6:4b:
82:69:85:58
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVvnarKqwKqlMb2Fks9E51jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYjI3MmRhMWQ4MTI2YjUxNzE5ZTVhMzQ1Njg4MGFkZmE4
ODljYTMwHhcNMjMwMTAxMjMxNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTUyNTcyOGE2ZjkxNzg1NTI3MmNjZTAxNTk5ODBjN2MwMGE4NDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWRZTKMDSlXB1WPpepUQ7w9KTqP8
Rmt/Y6ObD8ChgsteLfwb5TAMLY5uxai9eB7ROd2lKGn5u+PY6LrvsJXcrgg3NYE3
FrNFJtfDSpV2ZsoKcaxcgYiJLR9csXPXuXW1INoL33daN9llLBH9lCBCEMMeZAJs
VvoS4AipNu7B1wJkJK022tlnR6DA4c6GwQ1YkJrZIn7R4isErvvhacnl8f2PbhiX
cCQ9XTTs0q5C3ky1bAiRTK6YDToIUVaMQPM3/cqNv8epQ4Q97geyyZ6juwWYqwtK
9CaMcbBAur40stq2UxIAc4W5I6/2T2RvA7fUb3NmU/RTLLpwgz/e50JXAQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAVSVyim+ReFUnLM4BWZgMfACoQ/MB8GA1UdIwQY
MBaAFGyyctodgSa1Fxnlo0VogK36iJyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkxKeTJoMkJKclVYR2VXalJXaUFyZnFJbktNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hM2M1YTItNTE0OS00MTg2LWIzMDkt
Y2ZkY2I1N2I1ZTFkLzEvQlZKWEtLYjVGNFZTY3N6Z0ZabUF4OEFLaEQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hM2M1YTItNTE0OS00MTg2LWIzMDktY2ZkY2I1N2I1ZTFk
LzEvYkxKeTJoMkJKclVYR2VXalJXaUFyZnFJbktNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwFQNAwQA
wFQPAwQAwFyQAwQAwIrMMA0GCSqGSIb3DQEBCwUAA4IBAQCgPwmghNIJ1hqT1Ky9
na6pDUn2hdCpwTojt54KglqlBQbv/sd6tULcnovnDgk2ajXyqa9/lPGel8Tawnd6
oNZ2RlbWLDkFuvh9UIMcFRZc8PpTxqGFj8GuBCzN9lPf4Y6oD2kRHggEz8f5bTKS
Am4gkOg/jpvRcsMjsmZ334dbNi1tbX6NV1i796uIQIrarRRb8eyhOXJ/enK3Mo+h
GXb4xsbfNyzpUYrcpqihFgbnvcf0QlEjsPsMwv0Txf6H8tT32U0QAWUTdW/iu/+b
LYaHldjW+fsDjRpKV2LB9O6VKwh6PtaPEWjyBVGHZuasdAlQ3BcSsmJDS46jpkuC
aYVY
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:46:58 2025 by rpki-client