Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/vCkTipGgGHVXVMsakEIe9qOPwRw.roa
File: vCkTipGgGHVXVMsakEIe9qOPwRw.roa (raw, json)
Hash identifier: BokJbhGCwygbyPliCPYm0exmFaodJgBRMA3n3VTKowc=
Subject key identifier: BC:29:13:8A:91:A0:18:75:57:54:CB:1A:90:42:1E:F6:A3:8F:C1:1C
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 389396EA
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/vCkTipGgGHVXVMsakEIe9qOPwRw.roa
Signing time: Sat 01 Jan 2022 05:54:26 +0000
ROA not before: Sat 01 Jan 2022 05:54:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201673
IP address blocks: 85.254.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949196522 (0x389396ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 05:54:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc29138a91a018755754cb1a90421ef6a38fc11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:88:a4:8d:ef:5e:bf:fb:3e:76:d0:74:bb:
3e:d3:13:f6:d9:cd:82:93:c2:83:81:e1:a0:a9:ea:
e3:8b:af:02:1c:e5:d5:fa:5f:d1:71:f5:eb:99:72:
2b:dc:7f:14:96:c5:e7:e0:2f:d0:9a:10:34:b1:0f:
e4:1e:06:0f:07:60:f0:dc:c6:a4:1e:da:3f:00:46:
f6:4b:20:ea:3e:7d:e0:34:cb:7f:c1:88:f9:7a:53:
74:4b:e7:05:41:c8:25:1d:8e:11:27:20:9c:f1:92:
a4:ab:b4:6e:f6:c9:a3:44:72:f4:4d:70:dc:37:55:
da:8c:61:57:ab:b8:aa:aa:0e:92:e5:55:ed:df:f2:
4c:60:dd:62:76:07:d4:42:cd:fa:72:84:4a:81:58:
6d:f2:f6:6f:e1:67:43:34:50:b6:bb:61:a0:8d:50:
42:18:3d:be:50:c6:bf:34:ef:3c:14:44:44:35:5a:
73:db:28:c3:7a:3f:9b:83:85:31:7b:cf:f6:0b:3b:
7c:cc:80:8d:f4:06:58:bb:5f:95:4c:91:c9:0e:28:
65:6a:4c:41:b9:a0:e1:e2:34:a2:7f:d8:88:a9:2d:
d3:42:71:c6:3c:b8:8a:e3:72:f9:ff:4e:dc:1a:d0:
43:c4:81:bc:e3:07:8b:64:43:bb:25:57:f1:b6:ac:
ed:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:29:13:8A:91:A0:18:75:57:54:CB:1A:90:42:1E:F6:A3:8F:C1:1C
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/vCkTipGgGHVXVMsakEIe9qOPwRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.148.0/24
Signature Algorithm: sha256WithRSAEncryption
af:82:4c:b7:fe:e8:8d:c6:59:69:85:99:e4:ed:d8:19:d1:78:
5d:8f:31:1a:5e:62:02:27:0c:72:c6:8a:5c:9b:5d:72:82:87:
e8:fd:5d:25:4a:37:1a:d4:53:c5:ab:c8:73:98:57:c0:a1:a2:
0a:19:81:e8:c3:0a:f3:9b:50:be:ff:3b:d1:71:59:7a:fe:0e:
1d:aa:38:94:fa:8c:cc:8f:52:25:d5:a6:2c:e2:a5:58:cf:5b:
c1:2f:a2:39:5b:b3:6a:ab:6d:dd:62:4d:4b:18:e9:3e:a6:93:
64:d6:9e:89:6b:fa:ed:cd:11:d8:3a:1f:dd:9c:76:35:c6:a7:
ce:c1:40:f8:6d:cf:e1:e7:8c:c3:ad:95:9e:b6:34:99:f2:22:
51:43:fe:15:04:23:cb:26:49:cd:f0:03:b1:c8:ac:b8:f1:d1:
29:92:ad:31:16:30:f6:1b:dd:8d:04:50:51:54:e4:95:06:98:
3c:7d:95:ac:3d:f5:59:44:20:04:80:c0:1b:db:ad:b0:da:0f:
6e:0a:7f:49:f3:5c:ef:0e:a8:53:05:cf:df:68:1e:55:b3:4b:
4e:3e:36:9b:92:c3:83:f1:27:7e:18:48:b2:67:2e:f2:ef:ad:
f5:e7:bf:a9:8f:40:cf:1b:c7:c3:4a:b9:18:f0:e2:fb:98:b7:
61:33:a2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:05 2025 by rpki-client