Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/VluQmg66eJAhbO_u-CTxhuSOtoA.roa
File: VluQmg66eJAhbO_u-CTxhuSOtoA.roa (raw, json)
Hash identifier: CxKzeBIrd4Dn/LCZ567hMsy2Hofg58b/Wf9YkULuIec=
Subject key identifier: 56:5B:90:9A:0E:BA:78:90:21:6C:EF:EE:F8:24:F1:86:E4:8E:B6:80
Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial: 06F169E4
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/VluQmg66eJAhbO_u-CTxhuSOtoA.roa
Signing time: Sat 01 Jan 2022 12:01:12 +0000
ROA not before: Sat 01 Jan 2022 12:01:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42106
IP address blocks: 185.231.222.0/24 maxlen: 24
185.231.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116484580 (0x6f169e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Validity
Not Before: Jan 1 12:01:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=565b909a0eba7890216cefeef824f186e48eb680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:f7:34:aa:e3:c8:83:44:fa:f1:06:5a:b8:
04:87:83:64:ba:63:11:d5:bf:f8:7b:4c:7b:ae:14:
2d:31:67:3e:e0:6f:af:3e:b8:c6:d7:83:a7:ac:56:
43:47:a0:9f:a5:fd:e5:8a:3b:b1:5e:b0:8a:c3:99:
06:7d:95:e1:c0:2c:eb:3b:d8:24:1c:ad:70:2a:f5:
21:05:3a:9f:6c:8d:71:b0:14:56:1b:8a:a8:35:19:
95:4e:81:f1:9b:58:5c:99:5c:59:cd:4a:d5:eb:7d:
80:83:ae:0e:45:06:49:42:37:f5:07:c8:6f:02:95:
c1:89:d6:50:64:30:5c:52:39:f6:ed:38:96:19:de:
c5:2b:49:16:a6:ad:9d:b7:d6:01:76:c7:c1:ef:d2:
d8:57:0c:e6:e7:c3:2e:e2:b6:c4:a0:23:3d:bc:9a:
ac:84:c8:c7:94:80:01:1f:57:32:60:8d:ac:90:86:
95:04:b9:fd:1c:1c:cf:c0:ed:24:98:6a:b4:a4:4f:
c4:60:6f:c4:82:b6:b3:8a:67:85:69:80:54:82:54:
fb:03:57:b0:09:95:32:98:e6:3e:2f:02:ec:2f:7e:
5b:79:b9:3e:57:9f:cf:88:fa:f3:d1:b8:c5:3c:ee:
73:92:00:d6:e0:d8:16:4a:cb:8d:04:a5:3d:b1:04:
86:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5B:90:9A:0E:BA:78:90:21:6C:EF:EE:F8:24:F1:86:E4:8E:B6:80
X509v3 Authority Key Identifier:
keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/VluQmg66eJAhbO_u-CTxhuSOtoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.222.0/23
Signature Algorithm: sha256WithRSAEncryption
54:8c:b5:cf:ab:fe:b6:8f:38:2b:93:f9:9b:34:f6:2a:4d:b6:
53:34:5f:19:df:2f:b8:84:f6:d1:b0:83:5e:26:15:c9:b4:60:
94:87:b3:74:b1:25:fd:15:9c:9c:39:22:3c:0d:c5:48:b0:a4:
47:e3:e0:b2:f9:f9:fd:bf:a5:73:63:61:c2:7e:3f:64:2f:db:
6d:f5:17:2d:6b:a7:47:7b:13:42:27:a5:0f:2b:55:b7:b6:8b:
f9:9d:b2:63:ed:0e:79:b9:1f:12:1d:a7:ec:bf:66:2e:0b:e3:
9d:7c:de:41:75:7b:f8:4b:2c:88:f5:ad:bd:7c:2a:d5:3e:ef:
43:38:74:97:b4:82:04:8d:dd:ac:a6:ba:e6:4b:51:48:96:78:
d0:8c:69:84:cd:e3:bb:64:ac:6d:24:59:10:c7:0a:9d:61:49:
ad:a0:6c:a2:25:b4:71:83:e5:c0:fa:2d:f3:29:ba:0f:11:13:
27:61:d9:aa:a8:fd:f6:8d:20:e0:18:95:04:3e:db:f1:d1:94:
7a:5f:a1:51:e1:0e:8f:6d:50:46:50:33:b3:9d:b8:76:d2:b3:
0c:a5:e8:50:7a:a0:ca:7c:e8:2e:a7:ae:00:d6:2b:11:dd:bb:
7a:21:b9:5f:fa:56:9f:a4:a1:21:7a:ba:a7:8a:40:52:b8:69:
3f:ab:9a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:32 2025 by rpki-client