Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/VbWOXdG7UEd98E_9wfe6xxZG_No.roa
File: VbWOXdG7UEd98E_9wfe6xxZG_No.roa (raw, json)
Hash identifier: Wovw38rL47mP0XqSvzo8H+tH8FcqMrz6kD/umfqbFzM=
Subject key identifier: 55:B5:8E:5D:D1:BB:50:47:7D:F0:4F:FD:C1:F7:BA:C7:16:46:FC:DA
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 018C9107D90DC768C8AC7CA8DE7744D4BF97
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/VbWOXdG7UEd98E_9wfe6xxZG_No.roa
Signing time: Fri 22 Dec 2023 10:17:39 +0000
ROA not before: Fri 22 Dec 2023 10:17:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20640
IP address blocks: 217.173.128.0/19 maxlen: 23
2001:4b88::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:91:07:d9:0d:c7:68:c8:ac:7c:a8:de:77:44:d4:bf:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Dec 22 10:17:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55b58e5dd1bb50477df04ffdc1f7bac71646fcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:4d:be:c2:42:a9:41:04:ff:d3:e7:11:e8:
bb:1d:79:e2:8f:3d:15:34:ae:db:7c:ca:a7:ac:49:
3b:a9:5d:3b:96:cf:db:60:8f:70:1b:a6:1d:46:b1:
05:fe:62:4d:d0:37:7d:7e:1e:65:3d:1a:bc:a5:98:
09:88:51:98:78:8c:11:2e:02:54:a5:4a:a4:ed:4b:
da:c8:d0:01:0e:88:39:50:34:20:d0:bf:b6:1a:e2:
0c:a4:20:39:b0:0f:c7:df:da:7d:79:81:37:66:25:
8a:f4:91:db:96:51:97:66:ec:26:60:0d:da:8d:98:
ae:64:c9:89:3d:57:3a:8b:19:6a:d0:20:d4:76:20:
d8:fe:3c:7d:80:15:a6:24:4b:c7:3b:8d:7a:5e:a3:
41:58:ff:c8:30:4d:30:8c:25:d8:d5:ac:a7:30:71:
e6:30:96:18:12:be:08:c3:c3:c2:26:b5:d4:5a:16:
e9:d6:02:f2:fa:17:e1:8c:3e:af:d8:4f:71:b4:d7:
f6:8f:96:2e:8e:7d:fe:d6:97:8b:9f:ef:12:84:a6:
43:c9:63:fc:e8:9c:33:fe:4c:a0:b5:41:0a:9a:94:
f8:6e:17:28:f0:3c:0d:b2:e5:58:91:64:61:1e:f9:
02:ed:e2:86:cc:76:d5:30:24:c1:78:1c:41:ca:90:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B5:8E:5D:D1:BB:50:47:7D:F0:4F:FD:C1:F7:BA:C7:16:46:FC:DA
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/VbWOXdG7UEd98E_9wfe6xxZG_No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.173.128.0/19
IPv6:
2001:4b88::/32
Signature Algorithm: sha256WithRSAEncryption
93:d2:8e:af:b8:30:21:ab:ed:2e:74:d8:43:ae:88:29:2a:58:
3b:05:10:b8:49:28:34:d7:7d:f5:42:1d:7b:72:d6:38:13:28:
66:44:68:eb:3b:9a:41:7d:03:01:ae:ad:e0:77:17:ba:77:93:
64:64:9c:29:16:cc:9e:61:3b:7c:c7:b6:05:4b:20:dc:dd:ad:
a6:51:f5:75:7f:88:2e:b7:8d:0a:56:dd:66:ca:3c:2a:05:06:
9e:ec:b7:20:44:09:86:55:b3:c1:60:48:bb:92:0f:95:94:b6:
cd:1f:ae:46:a2:27:46:62:22:2d:29:c1:15:06:90:41:cc:18:
0f:7c:20:ac:ba:c5:19:59:76:82:4e:f8:2c:4f:4a:50:b9:30:
3a:9a:a6:50:af:80:87:d3:ad:ef:1b:1e:27:28:52:07:ed:92:
c9:40:20:b0:33:a8:4e:6d:e8:d2:60:1d:f8:26:3b:fe:31:a3:
48:3f:a1:16:5c:22:0f:c6:de:2c:5b:dc:60:de:20:58:32:d8:
43:3c:90:90:a5:a5:ae:78:a3:e7:a4:0c:b4:1d:8b:f8:3e:8c:
25:56:e9:3a:09:be:4c:01:cc:ea:ea:41:2d:d3:1b:da:2f:e1:
d3:af:da:ef:10:98:90:22:f4:bb:b4:15:35:34:bf:27:c6:8f:
77:6c:63:d6
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYyRB9kNx2jIrHyo3ndE1L+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDcwYWYwZDg5ZDc4NWJhMThiYTYxN2RjMDllM2Y3MmM1
OTk2ZjMwHhcNMjMxMjIyMTAxNzM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWI1OGU1ZGQxYmI1MDQ3N2RmMDRmZmRjMWY3YmFjNzE2NDZmY2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5xNvsJCqUEE/9PnEei7HXnijz0V
NK7bfMqnrEk7qV07ls/bYI9wG6YdRrEF/mJN0Dd9fh5lPRq8pZgJiFGYeIwRLgJU
pUqk7UvayNABDog5UDQg0L+2GuIMpCA5sA/H39p9eYE3ZiWK9JHbllGXZuwmYA3a
jZiuZMmJPVc6ixlq0CDUdiDY/jx9gBWmJEvHO416XqNBWP/IME0wjCXY1aynMHHm
MJYYEr4Iw8PCJrXUWhbp1gLy+hfhjD6v2E9xtNf2j5Yujn3+1peLn+8ShKZDyWP8
6Jwz/kygtUEKmpT4bhco8DwNsuVYkWRhHvkC7eKGzHbVMCTBeBxBypCFCQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFW1jl3Ru1BHffBP/cH3uscWRvzaMB8GA1UdIwQY
MBaAFIRHCvDYnXhboYumF9wJ4/csWZbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVjSzhOaWRlRnVoaTZZWDNBbmo5eXhabHZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82NjBmMWQtNTc1My00NTE2LTgwMDIt
ZTc2ZTNlMjkzZTAyLzEvVmJXT1hkRzdVRWQ5OEVfOXdmZTZ4eFpHX05vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82NjBmMWQtNTc1My00NTE2LTgwMDItZTc2ZTNlMjkzZTAy
LzEvaEVjSzhOaWRlRnVoaTZZWDNBbmo5eXhabHZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF2a2AMA0E
AgACMAcDBQAgAUuIMA0GCSqGSIb3DQEBCwUAA4IBAQCT0o6vuDAhq+0udNhDrogp
Klg7BRC4SSg01331Qh17ctY4EyhmRGjrO5pBfQMBrq3gdxe6d5NkZJwpFsyeYTt8
x7YFSyDc3a2mUfV1f4gut40KVt1myjwqBQae7LcgRAmGVbPBYEi7kg+VlLbNH65G
oidGYiItKcEVBpBBzBgPfCCsusUZWXaCTvgsT0pQuTA6mqZQr4CH063vGx4nKFIH
7ZLJQCCwM6hObejSYB34Jjv+MaNIP6EWXCIPxt4sW9xg3iBYMthDPJCQpaWueKPn
pAy0HYv4PowlVuk6Cb5MAczq6kEt0xvaL+HTr9rvEJiQIvS7tBU1NL8nxo93bGPW
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:42 2025 by rpki-client