Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/vWExorEGPb9Ahn87yQieTdcTHB4.roa
File: vWExorEGPb9Ahn87yQieTdcTHB4.roa (raw, json)
Hash identifier: 0Dlabqo4CC0MsfZz5erRTQPt9mfVJT9u4fbG4aG+8NA=
Subject key identifier: BD:61:31:A2:B1:06:3D:BF:40:86:7F:3B:C9:08:9E:4D:D7:13:1C:1E
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 018684D91CF096C1DFCC6D857C3204405E96
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/vWExorEGPb9Ahn87yQieTdcTHB4.roa
Signing time: Fri 24 Feb 2023 19:14:26 +0000
ROA not before: Fri 24 Feb 2023 19:14:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199746
IP address blocks: 81.95.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:84:d9:1c:f0:96:c1:df:cc:6d:85:7c:32:04:40:5e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Feb 24 19:14:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd6131a2b1063dbf40867f3bc9089e4dd7131c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:d8:8d:b4:95:f8:e8:a7:f6:e4:12:5a:5e:
cf:52:40:bf:4d:76:5b:19:94:f1:8a:9b:19:03:b1:
fe:2f:ae:56:2f:fb:8b:7e:1f:a1:c1:69:6a:a7:d0:
c6:a0:85:1c:2b:fe:5d:25:3c:0e:4a:e9:41:ad:55:
4d:57:f6:2f:6a:f8:e9:16:75:be:e2:5a:4b:0d:77:
d5:43:88:1b:d3:1e:4d:73:d6:59:d8:fe:dc:ef:5a:
3a:5e:b1:fe:f4:ec:af:08:49:90:c3:ef:8e:1b:10:
5a:61:0a:71:53:d5:fc:e3:69:4d:b1:17:6a:6d:a5:
86:16:e0:fe:c7:dd:0b:d7:dc:b8:13:ed:fb:f4:ca:
68:99:a1:1b:17:a2:d5:fb:c6:4c:d3:4c:79:9a:67:
b2:4b:60:c1:1b:32:40:42:51:99:f1:96:2e:78:e6:
07:9e:a9:e8:84:a6:dc:b5:ef:ba:a7:48:80:bb:08:
6a:12:13:0e:c1:78:cb:c3:ca:63:19:3e:58:50:a1:
1b:01:bb:66:20:6f:d9:7f:73:8d:0a:79:f9:d9:cc:
fe:17:55:7e:9e:ed:e6:81:8f:0e:7a:87:fb:28:8e:
e5:2e:4a:e0:77:00:56:af:6c:8a:64:2d:a2:29:88:
78:1d:cd:6b:51:a2:a1:54:45:47:6a:fc:f7:94:8e:
d4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:61:31:A2:B1:06:3D:BF:40:86:7F:3B:C9:08:9E:4D:D7:13:1C:1E
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/vWExorEGPb9Ahn87yQieTdcTHB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.95.39.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:00:8a:96:f9:28:48:be:b2:2f:69:63:93:0d:6e:38:cc:0b:
59:b4:11:44:ab:8d:0b:ae:ef:e7:32:53:0a:0b:2f:f8:27:07:
db:af:52:06:4b:b4:80:ef:a5:12:ff:97:f5:76:6a:0c:1a:f5:
80:58:a8:75:39:e1:b5:e9:b9:94:d1:df:8a:9a:a7:56:49:25:
c2:11:ef:d0:47:fd:74:01:6d:82:38:4d:41:0d:1a:f2:a1:4f:
dd:f9:f2:81:fc:e2:7d:f0:05:47:e1:12:84:ad:82:c6:18:44:
70:8b:ce:95:ee:32:ef:ed:e3:dc:88:66:02:69:28:24:2a:73:
64:86:42:61:3a:e3:1d:8b:57:ae:f2:1d:56:bc:50:ca:39:43:
34:6d:5d:a1:8d:99:4e:36:88:c2:a0:a5:5a:5b:42:e4:0d:5d:
dd:11:06:8a:ee:3a:7a:57:96:b4:4d:a8:41:7c:f5:2a:58:0b:
9f:14:73:16:e3:f5:93:a3:31:a4:a1:f7:1f:cd:60:f8:cc:ec:
a6:99:d0:b0:d5:7a:75:cb:83:6f:45:79:b8:e0:38:6d:10:ae:
27:9e:01:bc:72:e7:4c:6b:01:eb:ec:28:38:4f:17:e2:7a:c2:
d5:3c:1d:71:43:3e:1d:73:2b:ff:16:ed:00:6f:eb:38:11:b6:
10:1d:26:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:12 2025 by rpki-client