Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/VRwar7EAYm8LUXYfLoIZIPVOyLs.roa
File: VRwar7EAYm8LUXYfLoIZIPVOyLs.roa (raw, json)
Hash identifier: IjvZt4lzOYmGSdLZt8e7M/ReZ/jg2BdXnCBCuKQTzFY=
Subject key identifier: 55:1C:1A:AF:B1:00:62:6F:0B:51:76:1F:2E:82:19:20:F5:4E:C8:BB
Certificate issuer: /CN=0013ca9a0ae71b10d29dba0cb3ecab5f10df5179
Certificate serial: 5D0C99
Authority key identifier: 00:13:CA:9A:0A:E7:1B:10:D2:9D:BA:0C:B3:EC:AB:5F:10:DF:51:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/VRwar7EAYm8LUXYfLoIZIPVOyLs.roa
Signing time: Mon 13 Jun 2022 11:31:14 +0000
ROA not before: Mon 13 Jun 2022 11:31:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39425
IP address blocks: 37.156.37.0/24 maxlen: 24
89.40.133.0/24 maxlen: 27
89.43.240.0/23 maxlen: 23
89.43.245.0/24 maxlen: 24
89.43.246.0/24 maxlen: 24
89.43.242.0/23 maxlen: 23
89.43.244.0/24 maxlen: 24
89.43.247.0/24 maxlen: 24
188.241.121.0/24 maxlen: 24
89.37.186.0/23 maxlen: 23
92.114.88.0/22 maxlen: 22
94.176.186.0/23 maxlen: 23
89.35.4.0/23 maxlen: 23
188.241.111.0/24 maxlen: 24
89.46.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6098073 (0x5d0c99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0013ca9a0ae71b10d29dba0cb3ecab5f10df5179
Validity
Not Before: Jun 13 11:31:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=551c1aafb100626f0b51761f2e821920f54ec8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:9b:4c:21:ff:38:99:ef:02:af:ff:7f:3f:
45:74:16:7a:b2:e5:9f:7d:8d:3c:d7:ef:97:d6:fd:
38:fd:a8:8e:01:35:25:fa:4d:f1:24:b7:e5:4a:13:
ff:73:1d:f2:52:ee:4f:e9:49:99:7b:a9:77:7d:65:
c4:87:6f:1f:d5:3f:f0:ca:92:48:07:31:33:67:d9:
14:ac:b2:6a:a4:e8:c5:46:f3:b9:aa:c2:8c:6a:c5:
ae:53:3e:bc:7f:6f:3b:25:81:0b:fc:9b:b3:96:c6:
5f:5a:82:69:6f:d3:1b:4c:7a:fb:58:74:ac:b4:cc:
8e:95:5c:0b:6f:15:d8:c0:c5:54:60:85:97:fa:68:
da:5d:c3:57:5d:a1:bd:37:ed:3b:ca:e9:f7:43:4a:
fb:39:d6:92:d8:29:f6:69:6b:d9:0b:ab:5d:78:5b:
66:4e:29:d6:fb:9f:26:0b:68:85:04:29:95:66:b8:
b7:22:1e:17:3c:21:ac:3e:e6:c4:a0:ef:77:fd:65:
56:16:7a:2f:b9:99:29:3a:fd:f8:d9:87:eb:ab:13:
d5:15:df:b1:68:1a:59:97:ac:61:34:92:0f:0f:5f:
0d:95:b6:63:ea:bf:3d:d1:1f:2f:b4:cd:9f:f3:9a:
3f:d3:9e:66:43:ab:b3:70:90:9c:b5:57:fa:52:26:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1C:1A:AF:B1:00:62:6F:0B:51:76:1F:2E:82:19:20:F5:4E:C8:BB
X509v3 Authority Key Identifier:
keyid:00:13:CA:9A:0A:E7:1B:10:D2:9D:BA:0C:B3:EC:AB:5F:10:DF:51:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/VRwar7EAYm8LUXYfLoIZIPVOyLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.37.0/24
89.35.4.0/23
89.37.186.0/23
89.40.133.0/24
89.43.240.0/21
89.46.24.0/21
92.114.88.0/22
94.176.186.0/23
188.241.111.0/24
188.241.121.0/24
Signature Algorithm: sha256WithRSAEncryption
84:5c:b3:8e:2a:f6:cf:20:4b:d8:57:5e:8b:ec:cf:22:18:60:
23:a4:e1:14:f9:ba:cf:73:83:d0:ae:58:d3:a7:82:ff:c8:c7:
c9:0c:ff:a0:4b:28:4e:92:ef:b2:7d:33:74:42:5c:13:c8:5f:
bf:56:14:ef:9e:13:84:b7:d5:a1:53:85:0d:1f:29:e7:74:9b:
e9:ad:52:ae:ae:e4:9b:40:bc:b9:17:37:05:37:e6:6f:dc:da:
11:14:71:09:88:20:ed:d6:22:a7:73:2e:5e:b0:c5:7e:a2:89:
e5:82:e7:6e:ef:74:9d:29:aa:da:1e:dd:a5:8c:60:ee:f5:91:
62:a3:93:37:24:41:f7:a5:ff:2e:44:59:84:cf:2f:d3:31:13:
de:92:d3:dd:c8:ff:bd:82:01:8c:f4:60:66:3e:b0:0e:ff:67:
5b:0a:0d:28:52:50:1a:17:44:0e:51:1e:47:dc:55:e1:6a:13:
4f:68:c0:1e:05:86:6c:5f:c8:11:a8:e0:86:e6:e6:a9:43:ca:
a0:03:b9:2b:0e:30:4b:4a:29:7b:79:4e:c3:ca:07:7a:95:3a:
34:0f:29:83:c8:50:6d:47:8f:fe:77:0a:4f:c7:b7:6b:d2:37:
6a:92:f2:76:93:b3:30:a9:75:c7:d3:58:ac:e4:6b:9f:a5:48:
ea:36:e8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:25 2025 by rpki-client