Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/VxbiFVcfSd0KWFFsLyZ0RCHKDS8.roa
File: VxbiFVcfSd0KWFFsLyZ0RCHKDS8.roa (raw, json)
Hash identifier: CkDEUwyty5Mt8Ns31ICorq0z+eweFvqRWrKxq6+aIIQ=
Subject key identifier: 57:16:E2:15:57:1F:49:DD:0A:58:51:6C:2F:26:74:44:21:CA:0D:2F
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 01857169B3756F61CC70DF924D311B2CBF7B
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/VxbiFVcfSd0KWFFsLyZ0RCHKDS8.roa
Signing time: Mon 02 Jan 2023 07:37:10 +0000
ROA not before: Mon 02 Jan 2023 07:37:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30981
IP address blocks: 164.40.164.0/24 maxlen: 24
164.40.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:b3:75:6f:61:cc:70:df:92:4d:31:1b:2c:bf:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Jan 2 07:37:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5716e215571f49dd0a58516c2f26744421ca0d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:92:17:b6:5c:cd:10:b6:6b:26:b1:86:2d:08:
eb:7d:fc:d8:37:6d:21:7f:b6:2e:3b:9d:eb:ec:90:
e5:fa:d6:7c:ff:93:ed:1e:13:f9:7b:70:d1:6b:53:
62:30:a6:25:f1:f8:3c:1d:b1:06:d0:2c:e5:b2:8d:
11:bd:47:6b:2f:d5:cc:54:7f:ba:31:ca:b1:9a:ad:
62:68:45:4f:15:6a:3a:d3:f6:ca:30:dc:57:81:51:
19:31:f0:1a:8b:b7:80:31:e2:46:53:67:46:0b:f0:
1c:12:74:07:2e:33:46:25:25:56:c9:2b:4a:ba:e7:
53:4a:f1:52:00:1c:6d:6f:bc:81:ab:98:95:5a:7c:
62:ac:57:a6:8b:fe:12:f4:39:39:90:c5:ed:52:9c:
c8:a7:91:9a:61:53:0c:71:eb:4a:e3:6c:fe:ae:61:
24:73:df:8f:63:72:97:44:7c:90:2c:f0:8d:12:a1:
b6:e8:32:18:1e:a5:9b:2d:63:29:fe:ee:db:c3:17:
da:30:c5:61:60:00:44:04:9f:2e:76:d3:ea:0f:15:
dc:76:f4:98:be:4b:b4:9c:30:54:3f:04:7b:72:ba:
e6:30:66:40:56:d6:8c:87:ae:d0:cb:68:eb:2a:25:
0d:48:43:a1:9b:a1:5d:e4:7f:33:91:ee:d3:69:a4:
da:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:16:E2:15:57:1F:49:DD:0A:58:51:6C:2F:26:74:44:21:CA:0D:2F
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/VxbiFVcfSd0KWFFsLyZ0RCHKDS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.40.163.0-164.40.164.255
Signature Algorithm: sha256WithRSAEncryption
ac:4a:3e:ca:4d:fa:01:43:93:af:c2:fc:56:b4:b6:04:72:ca:
ef:cb:da:4e:8e:15:12:c8:84:ba:3e:14:ea:3f:7b:c9:9f:a5:
62:55:66:e2:57:bf:16:1b:64:e7:a7:92:45:80:d5:c5:32:81:
f7:8d:7a:19:81:de:c4:57:5c:03:aa:91:2b:0a:38:0c:d9:99:
19:9c:31:fc:2f:e6:d8:82:e5:98:90:a7:b9:77:51:62:0f:26:
9b:91:4b:98:3b:4d:08:af:be:19:41:5b:12:be:ab:1d:bf:0d:
df:27:f4:8d:b4:ad:be:60:5a:ea:2d:62:5b:b0:d8:c5:a9:e5:
c8:fa:b8:70:0a:10:8d:3e:5e:09:d4:b2:cb:5a:0c:c1:be:09:
73:b2:f1:38:4e:ca:02:5e:38:62:64:80:a3:ca:d0:d8:80:81:
48:f2:cf:50:58:24:68:ce:2b:91:18:b0:1b:16:2a:34:db:3a:
c9:1e:ff:26:c7:33:f5:a2:25:94:9c:b6:6e:0f:13:a9:9e:8a:
98:26:85:58:07:50:78:57:93:2b:36:a4:0b:74:34:19:71:bc:
1c:c7:c3:57:b3:7c:27:13:ad:ac:c5:85:e5:1a:65:f9:f8:37:
fb:6e:16:59:18:cd:2d:d2:67:d5:e2:93:1f:24:30:59:34:3d:
3b:5a:13:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:39:16 2025 by rpki-client