Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/Vt55Udu_ZvGaqTpvpG6wUwOHYiM.roa
File: Vt55Udu_ZvGaqTpvpG6wUwOHYiM.roa (raw, json)
Hash identifier: HLiGqej1Q8YxhJvgBGeQTr5Nsuo4lZp702uaXVMiC+0=
Subject key identifier: 56:DE:79:51:DB:BF:66:F1:9A:A9:3A:6F:A4:6E:B0:53:03:87:62:23
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 018C8759CBBC727862996E730BC08AB51440
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/Vt55Udu_ZvGaqTpvpG6wUwOHYiM.roa
Signing time: Wed 20 Dec 2023 13:10:58 +0000
ROA not before: Wed 20 Dec 2023 13:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5650
IP address blocks: 46.253.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:59:cb:bc:72:78:62:99:6e:73:0b:c0:8a:b5:14:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Dec 20 13:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56de7951dbbf66f19aa93a6fa46eb05303876223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:c5:27:53:0a:89:d9:70:15:4d:a6:17:d0:
cb:69:73:07:ae:d7:4d:82:dd:b3:93:f7:95:f3:c8:
a6:f5:ff:03:2b:e7:00:00:06:ed:d9:24:6d:a7:4e:
40:c4:0d:68:80:06:81:a1:b1:58:64:37:2e:10:41:
eb:4b:e9:7a:f4:a0:30:12:e9:a6:d6:f1:4f:cc:89:
27:54:95:92:35:a7:33:4c:16:f9:fa:50:a8:3a:a3:
31:f1:e3:bc:df:31:c4:74:ea:30:1f:1e:24:15:e4:
af:16:34:17:9f:2a:71:82:59:c5:4a:a2:12:11:3f:
be:05:e4:08:1b:35:4b:a5:61:2a:df:56:ae:e8:53:
28:37:25:33:69:e2:f6:64:3f:dd:35:27:8a:41:53:
31:d0:fe:e9:47:54:2e:43:e0:67:0c:82:af:c5:48:
97:0c:69:b9:73:1c:ab:86:37:aa:bf:13:b9:93:db:
94:52:52:ba:73:62:0e:23:81:0b:11:35:3d:72:7f:
2c:27:62:f3:80:18:6a:fc:07:9e:52:b6:61:fb:13:
c6:5c:30:96:93:6a:90:b6:ad:b9:8a:f3:41:d8:e4:
9c:4b:dd:f5:f8:2e:db:18:dd:db:30:1e:60:79:e0:
26:ed:db:70:73:4d:22:83:62:6e:d6:9c:21:80:ff:
56:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DE:79:51:DB:BF:66:F1:9A:A9:3A:6F:A4:6E:B0:53:03:87:62:23
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/Vt55Udu_ZvGaqTpvpG6wUwOHYiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.80.0/21
Signature Algorithm: sha256WithRSAEncryption
c9:4a:4c:cd:09:d9:72:68:d6:36:9b:c0:97:ef:ac:ef:e7:71:
54:44:d1:21:c8:2d:69:58:57:11:76:8e:af:96:bb:36:fe:4b:
6b:ab:b1:b9:dc:81:a4:0d:41:f3:32:d6:ae:4d:dd:af:c1:42:
0b:ca:65:92:35:5d:a2:09:1c:76:fe:38:04:ea:60:d8:fa:c6:
d6:10:ed:83:3c:19:6e:28:84:74:f8:4d:53:2e:da:bb:ec:33:
23:c2:da:e5:fe:74:7a:ae:34:ae:ba:17:b3:9e:98:96:94:a3:
c4:ac:07:db:f7:c8:97:f6:e1:f7:bc:37:c8:ee:a6:52:b7:e2:
97:11:0f:67:21:c9:a8:3b:a2:43:c4:53:d8:94:d9:4c:7b:75:
5f:f0:19:a9:06:fa:b0:a8:35:11:d3:68:68:af:b6:c0:ce:e7:
6a:c4:b5:2b:e5:58:9c:04:21:74:08:3a:44:bc:0b:c0:74:2f:
95:08:6f:bf:25:5f:28:d9:2c:2a:2d:d4:f1:16:dd:00:7b:0d:
3a:40:4b:d1:cf:a4:f6:6a:58:bc:3c:c1:c7:8b:fe:16:e0:c3:
c7:38:e5:24:2e:dc:f2:05:05:69:4a:29:c1:c9:fb:cb:1f:24:
02:9f:88:99:1e:82:d5:35:ea:a0:44:b6:6b:15:b2:3d:33:83:
96:44:4e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:45 2025 by rpki-client