Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/VfFitsEiXUdQq8b3vqugnYHHy_8.roa
File: VfFitsEiXUdQq8b3vqugnYHHy_8.roa (raw, json)
Hash identifier: GJwVbe/b+eJMOdM8aWCKlwtdZNzMLv8mlCfDW/e4Eu4=
Subject key identifier: 55:F1:62:B6:C1:22:5D:47:50:AB:C6:F7:BE:AB:A0:9D:81:C7:CB:FF
Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial: 018A54C07D8F81B3A41066147BACFECDF486
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/VfFitsEiXUdQq8b3vqugnYHHy_8.roa
Signing time: Sat 02 Sep 2023 07:16:55 +0000
ROA not before: Sat 02 Sep 2023 07:16:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 216.245.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:54:c0:7d:8f:81:b3:a4:10:66:14:7b:ac:fe:cd:f4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Validity
Not Before: Sep 2 07:16:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55f162b6c1225d4750abc6f7beaba09d81c7cbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f3:2f:9e:9b:53:e9:a7:9d:6b:93:8f:ac:25:
20:8a:27:79:61:2c:3d:6c:d1:13:49:5c:68:f4:18:
64:58:46:89:6e:f9:b6:ec:ec:0d:ad:c8:6f:46:0b:
98:72:20:67:eb:62:6c:57:ab:5a:4f:a8:34:fa:b8:
05:47:5d:3a:5a:5a:72:c1:98:f9:7a:ff:cb:de:61:
2d:8f:21:70:a2:f2:53:87:e5:8d:9f:58:f3:99:60:
42:8a:1e:bf:5a:d6:8b:79:bc:dc:30:f9:3e:5e:a6:
c4:7f:c2:ce:9b:56:ba:6a:d2:04:90:b3:14:6a:56:
37:38:e0:e9:4a:e4:ca:d6:bf:1d:04:8a:8c:72:7b:
c8:e7:49:01:5d:c5:06:b8:51:bf:3b:1a:a4:24:78:
bd:54:03:f4:10:d8:8d:a6:b5:ab:99:4a:f1:08:0c:
e5:64:e4:4a:1b:e4:a3:f0:df:1a:c5:cb:bb:f2:bd:
77:5f:f2:bf:5c:ea:d7:ec:af:9a:6e:2e:19:40:3e:
39:09:6d:e0:49:37:07:e1:14:b7:2f:68:5a:cd:1f:
20:b2:58:4a:80:27:ed:a9:56:f9:a0:83:8a:f7:1b:
3d:da:66:30:42:12:e4:54:59:34:4a:49:bd:cb:47:
9e:1a:e2:dc:65:a8:1a:2c:26:82:f0:06:eb:40:f6:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F1:62:B6:C1:22:5D:47:50:AB:C6:F7:BE:AB:A0:9D:81:C7:CB:FF
X509v3 Authority Key Identifier:
keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/VfFitsEiXUdQq8b3vqugnYHHy_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.245.80.0/24
Signature Algorithm: sha256WithRSAEncryption
81:14:5c:b9:9e:49:c9:a7:8d:0f:b0:be:fe:3f:db:18:5d:94:
59:16:9f:66:14:9d:db:31:f2:b9:94:a7:b9:25:47:bf:1c:7a:
41:6a:b6:c3:89:b3:4d:e9:5b:7d:7c:e5:0d:7b:58:fc:f4:85:
b9:bf:83:c1:11:b7:c3:9c:d1:05:25:7e:dd:29:71:d6:55:a8:
a4:30:75:48:71:90:33:1f:19:f4:51:91:a6:06:62:34:77:09:
75:e6:89:d5:79:26:1e:9c:31:b4:07:2c:16:48:b5:4b:46:9a:
9b:e9:ba:ab:47:3d:cf:50:9f:5e:17:6a:f3:ee:f3:ea:3d:a7:
47:d0:bb:01:1a:0d:b5:cb:12:39:53:11:d1:ef:69:22:fc:7c:
8f:22:d8:ec:49:fd:73:3b:64:54:d9:a5:e2:0a:ce:e1:9d:32:
a7:49:89:90:93:65:14:17:d2:79:05:b5:c1:e3:37:5a:01:61:
12:08:38:6e:f7:6f:3e:ad:0e:cd:a7:25:c2:6f:f8:54:d0:0a:
77:41:05:cb:ec:ca:88:d4:d9:6e:f2:64:c9:08:16:11:95:ea:
45:19:1d:cb:91:fb:94:b0:97:6e:44:48:89:8a:30:f9:e4:6c:
33:76:65:5e:48:a9:d8:a7:33:7d:eb:f1:3b:b2:ff:4a:2d:4c:
eb:4b:2e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:48:06 2025 by rpki-client