Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/VmNLVJaIvn0EyzoDkX0xRPP4xIw.roa
File: VmNLVJaIvn0EyzoDkX0xRPP4xIw.roa (raw, json)
Hash identifier: tZXIY5NL0elUOCw5Q3+1lK3BpzuMplf1Z63deZrOhAw=
Subject key identifier: 56:63:4B:54:96:88:BE:7D:04:CB:3A:03:91:7D:31:44:F3:F8:C4:8C
Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial: 08CBF480
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/VmNLVJaIvn0EyzoDkX0xRPP4xIw.roa
Signing time: Sat 01 Jan 2022 03:52:43 +0000
ROA not before: Sat 01 Jan 2022 03:52:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25091
IP address blocks: 94.158.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147584128 (0x8cbf480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Validity
Not Before: Jan 1 03:52:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56634b549688be7d04cb3a03917d3144f3f8c48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:c4:0b:0c:f1:18:e0:7a:5c:7d:a2:12:46:
eb:fc:0c:c0:11:bf:d7:c2:ba:eb:c1:87:f8:11:15:
ef:b6:41:94:d9:8d:39:a6:99:7e:89:b8:64:1c:19:
f7:96:fd:f2:c0:de:66:f1:4f:14:79:be:2b:81:e0:
ca:d0:a6:75:6b:e3:47:7f:43:5c:3e:73:42:a8:08:
b8:12:fc:44:af:b8:38:87:1f:ba:e6:4f:94:de:d3:
46:69:3d:d8:8f:74:a9:da:f6:27:e0:20:4d:fd:bd:
17:f7:83:f4:e6:9a:64:93:a7:36:bd:4a:2b:7e:48:
8f:f5:56:89:b7:6b:9c:b2:95:1d:76:be:44:4e:ef:
9c:56:e0:75:7a:8e:0b:11:18:a6:de:dc:13:5a:19:
b7:0c:e9:f3:5d:f3:f7:cb:34:4a:09:9e:f2:57:88:
2f:e6:19:4f:63:8d:ce:a6:8a:03:38:ad:3f:7e:c9:
a7:f3:5c:26:c9:a1:5a:af:df:24:4a:ee:4b:a1:f3:
f3:6c:00:f9:9f:41:68:81:51:f1:8a:11:fc:e7:4e:
c7:ae:16:8e:55:43:78:fe:89:cf:58:19:b7:a9:b6:
24:51:58:77:b7:ac:2b:d4:fa:4c:80:60:9e:9b:54:
3f:e2:cd:c2:42:d1:59:83:65:d2:cf:ef:42:42:19:
54:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:63:4B:54:96:88:BE:7D:04:CB:3A:03:91:7D:31:44:F3:F8:C4:8C
X509v3 Authority Key Identifier:
keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/VmNLVJaIvn0EyzoDkX0xRPP4xIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.28.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:ed:7b:43:4d:00:0d:e1:cb:ab:e5:a7:f4:5b:ec:88:c6:ec:
d0:a6:20:64:ab:c6:53:1e:c2:7d:4c:59:05:99:37:a4:4c:c9:
88:91:5a:f5:89:ab:14:ed:3a:59:e3:c1:3c:1b:43:f9:be:b1:
74:1e:0b:2c:94:6a:cb:e2:f8:e4:5b:35:a7:06:c4:f9:6b:e1:
0e:ca:58:e3:de:f8:3d:a7:d2:89:cf:60:25:87:82:9d:a7:a5:
80:ea:24:fb:4e:47:4e:57:bd:85:ef:33:e5:07:ec:42:a8:a6:
d1:a5:f3:04:2b:01:b9:21:e5:98:7c:7a:ec:b9:45:c5:76:c4:
86:8c:7a:6b:e3:7c:79:31:8b:91:86:7a:67:a2:02:14:95:c7:
0d:52:ee:c7:72:39:c9:94:13:1d:59:91:6a:4b:d8:fe:65:53:
b6:9c:d9:73:82:05:07:de:c7:37:b4:9f:88:e2:51:da:f0:dd:
aa:29:47:72:30:41:df:2d:6b:5c:37:b8:95:55:50:d2:f2:65:
3b:bc:42:ac:64:d4:82:2f:0e:d1:bb:d1:c2:91:91:3b:c9:22:
da:67:d0:c9:a9:b9:9b:d7:86:4d:b4:d0:cb:18:4f:c8:0e:c1:
5e:b9:34:d7:f2:50:c7:39:2c:37:74:85:63:2c:28:d5:73:14:
00:eb:e9:21
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECMv0gDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MjFlYjQwN2Y3NmNmYTVjN2RhMTUyMTgzOTdiM2M0MzE3NzYyYWMwMB4XDTIyMDEw
MTAzNTI0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTY2MzRiNTQ5Njg4
YmU3ZDA0Y2IzYTAzOTE3ZDMxNDRmM2Y4YzQ4YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKYfxAsM8Rjgelx9ohJG6/wMwBG/18K668GH+BEV77ZBlNmN
OaaZfom4ZBwZ95b98sDeZvFPFHm+K4HgytCmdWvjR39DXD5zQqgIuBL8RK+4OIcf
uuZPlN7TRmk92I90qdr2J+AgTf29F/eD9OaaZJOnNr1KK35Ij/VWibdrnLKVHXa+
RE7vnFbgdXqOCxEYpt7cE1oZtwzp813z98s0Sgme8leIL+YZT2ONzqaKAzitP37J
p/NcJsmhWq/fJEruS6Hz82wA+Z9BaIFR8YoR/OdOx64WjlVDeP6Jz1gZt6m2JFFY
d7esK9T6TIBgnptUP+LNwkLRWYNl0s/vQkIZVJUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRWY0tUloi+fQTLOgORfTFE8/jEjDAfBgNVHSMEGDAWgBSiHrQH92z6XH2h
Uhg5ezxDF3YqwDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29oNjBCX2RzLWx4OW9WSVlPWHM4UXhkMktzQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDUvOThiMjc4LTA2OGEtNDY4Zi1hY2Q3LTI2Y2QzODcxZjM2NS8x
L1ZtTkxWSmFJdm4wRXl6b0RrWDB4UlBQNHhJdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUv
OThiMjc4LTA2OGEtNDY4Zi1hY2Q3LTI2Y2QzODcxZjM2NS8xL29oNjBCX2RzLWx4
OW9WSVlPWHM4UXhkMktzQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAl6eHDANBgkqhkiG9w0BAQsFAAOC
AQEAK+17Q00ADeHLq+Wn9FvsiMbs0KYgZKvGUx7CfUxZBZk3pEzJiJFa9YmrFO06
WePBPBtD+b6xdB4LLJRqy+L45Fs1pwbE+WvhDspY4974PafSic9gJYeCnaelgOok
+05HTle9he8z5QfsQqim0aXzBCsBuSHlmHx67LlFxXbEhox6a+N8eTGLkYZ6Z6IC
FJXHDVLux3I5yZQTHVmRakvY/mVTtpzZc4IFB97HN7SfiOJR2vDdqilHcjBB3y1r
XDe4lVVQ0vJlO7xCrGTUgi8O0bvRwpGRO8ki2mfQyam5m9eGTbTQyxhPyA7BXrk0
1/JQxzksN3SFYywo1XMUAOvpIQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:48 2025 by rpki-client