Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/VRP2nqVtdii3CLz468-pfVOC9O0.roa
File: VRP2nqVtdii3CLz468-pfVOC9O0.roa (raw, json)
Hash identifier: TR9fKi14CxXB/5kl9/hCx6CtN6jiFhsQRAi5tqt23lI=
Subject key identifier: 55:13:F6:9E:A5:6D:76:28:B7:08:BC:F8:EB:CF:A9:7D:53:82:F4:ED
Certificate issuer: /CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Certificate serial: 0185708CDD06DE2B7147AEC88F2935D621F4
Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/VRP2nqVtdii3CLz468-pfVOC9O0.roa
Signing time: Mon 02 Jan 2023 03:35:57 +0000
ROA not before: Mon 02 Jan 2023 03:35:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197116
IP address blocks: 94.126.224.0/21 maxlen: 24
2a11:f400::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:dd:06:de:2b:71:47:ae:c8:8f:29:35:d6:21:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Validity
Not Before: Jan 2 03:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5513f69ea56d7628b708bcf8ebcfa97d5382f4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ec:c3:6c:bb:47:8d:05:61:a5:42:85:a0:25:
0a:5b:b4:51:e7:96:c0:f1:0c:7c:b9:63:59:4e:c2:
e9:e1:4f:b9:14:e1:19:81:5c:b7:42:90:d7:39:79:
82:a7:75:55:a6:5f:3c:80:7e:cd:4b:24:93:cb:9c:
17:a9:12:65:ec:3b:12:13:cc:9c:9c:7b:a5:a0:16:
b4:15:53:0e:5a:47:f9:82:ab:10:ef:3b:4a:e9:42:
da:f1:1b:74:35:fd:51:0d:4e:79:12:6e:5c:65:14:
51:7c:dd:c2:98:32:1a:3a:61:17:58:5a:36:00:61:
25:2c:e4:d0:b3:6d:44:01:48:a3:ad:7e:97:b3:c0:
51:f8:74:52:66:6d:ab:43:eb:c4:5f:af:a0:dc:7c:
86:7a:8e:b3:8a:60:1d:50:a8:86:a6:4c:d2:06:8a:
8b:bf:89:bd:ae:c7:8b:88:04:1f:38:85:13:72:07:
bd:6f:72:49:fa:44:93:e0:18:8f:92:61:fc:d0:75:
b3:ca:53:3c:5b:45:a6:74:76:21:2e:54:7c:14:c4:
b8:62:da:7a:8e:1d:23:3b:9f:5b:b3:86:58:4b:2b:
59:cd:58:7f:bc:e4:c0:de:a5:71:e3:7c:48:67:71:
30:e1:0b:03:63:00:18:60:4d:b2:df:7d:0a:4a:db:
c5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:13:F6:9E:A5:6D:76:28:B7:08:BC:F8:EB:CF:A9:7D:53:82:F4:ED
X509v3 Authority Key Identifier:
keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/VRP2nqVtdii3CLz468-pfVOC9O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.224.0/21
IPv6:
2a11:f400::/32
Signature Algorithm: sha256WithRSAEncryption
54:d5:98:f4:02:60:52:46:d6:1a:d7:4b:73:3b:fd:19:29:28:
7d:60:cb:5f:15:6b:fa:09:1c:42:d6:20:c3:da:06:ca:7f:a5:
ca:95:ad:ca:18:e4:cd:08:4b:fd:64:9e:08:91:a7:0b:a6:eb:
ea:d3:4e:65:fa:e5:15:6a:5f:1c:45:76:42:a7:58:d4:7c:cf:
b6:5d:d5:00:b3:61:4b:87:84:c9:5a:8f:6d:5d:04:be:98:72:
40:8f:84:bf:1f:69:86:ad:e4:d1:57:3a:57:85:89:90:d3:af:
68:eb:c4:86:aa:d8:d6:91:c7:d9:58:7d:a7:8c:b2:af:e2:dd:
0d:73:71:12:21:da:41:b7:0b:5f:eb:a6:4e:08:ae:f3:67:29:
f7:7c:39:d4:75:68:6f:6d:19:31:5f:58:50:30:cb:40:a0:31:
90:34:87:ef:f2:eb:72:f9:2a:4f:08:07:a7:39:2e:f7:d4:93:
aa:fe:f8:8e:8a:22:4d:21:5e:15:b5:f0:74:a7:1a:06:c7:fc:
1a:b5:18:1b:3e:ba:41:3f:93:7f:64:88:a4:b0:a0:f5:ee:f6:
d4:30:d0:ab:24:f7:b0:9d:85:9b:bd:ec:ed:3e:62:57:dc:2b:
a3:31:ab:07:f2:e3:f7:8c:ed:f1:46:d8:ef:3b:cf:1f:ce:06:
91:09:f2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:37:15 2025 by rpki-client