Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/VvWBkcgo4DUx2pSo631jdg4o1ok.roa
File: VvWBkcgo4DUx2pSo631jdg4o1ok.roa (raw, json)
Hash identifier: XOW/0N0MET8bsG26J4W/1FNUKm3Ir9Ys9SAPrImkJD4=
Subject key identifier: 56:F5:81:91:C8:28:E0:35:31:DA:94:A8:EB:7D:63:76:0E:28:D6:89
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185EAF26A8B8696FB45421E179B12D8BD2B
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/VvWBkcgo4DUx2pSo631jdg4o1ok.roa
Signing time: Wed 25 Jan 2023 22:00:33 +0000
ROA not before: Wed 25 Jan 2023 22:00:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211851
IP address blocks: 45.154.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ea:f2:6a:8b:86:96:fb:45:42:1e:17:9b:12:d8:bd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 25 22:00:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56f58191c828e03531da94a8eb7d63760e28d689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:20:6b:45:9c:42:c4:2e:2c:86:64:ed:2b:
5a:f8:82:c9:a0:14:68:de:84:86:9f:d8:a5:aa:51:
71:dc:21:5d:24:7d:cb:73:ee:23:11:fb:48:92:9e:
8b:5d:39:de:ba:ce:75:de:ac:e7:6d:ac:46:4b:a4:
aa:ff:9a:18:b7:ff:5b:17:71:6b:35:00:ce:59:e1:
05:f1:e9:93:94:fd:00:fb:52:72:75:39:56:cf:36:
c1:25:b1:af:e6:36:5d:2d:0f:7c:c5:be:dd:ea:30:
03:9b:24:66:4d:e3:09:63:f6:3f:f6:c2:ee:68:6a:
0e:c0:54:77:05:aa:3f:ba:33:b9:fe:be:4f:2f:58:
66:f0:1a:1b:56:0d:4a:7c:af:0c:7f:11:1d:29:1d:
37:a5:45:62:ee:84:f2:1c:eb:08:ea:0c:06:5c:a2:
80:50:fd:ce:99:06:14:d5:5d:f2:fc:60:c5:db:cc:
03:5a:5a:e9:31:73:75:c3:cd:8c:7c:47:a6:b5:d1:
bb:cd:61:18:19:41:9b:1f:82:d9:9a:ba:71:71:8f:
c0:75:08:d2:92:60:ab:7a:88:d2:b7:1d:7b:b1:7f:
62:c2:d4:c2:68:b6:51:c8:3d:78:f2:79:9a:6c:40:
b1:33:d1:6f:b9:24:87:30:3d:b6:83:66:b9:ca:ed:
13:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F5:81:91:C8:28:E0:35:31:DA:94:A8:EB:7D:63:76:0E:28:D6:89
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/VvWBkcgo4DUx2pSo631jdg4o1ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.99.0/24
Signature Algorithm: sha256WithRSAEncryption
54:36:31:bf:40:f7:08:6d:00:40:71:69:f7:24:fb:88:24:47:
24:5a:7a:36:6c:6a:e7:72:3d:7f:73:21:d9:0d:e1:5b:99:88:
c0:69:0d:45:2a:5b:b7:ed:ce:97:20:52:fe:94:20:d1:bc:0c:
f9:cc:d4:6b:e0:50:88:75:9f:b6:6d:8b:38:b3:75:a5:0b:c4:
0c:64:18:52:dd:28:a4:00:c9:75:dc:97:76:23:c7:4a:ce:40:
0b:4e:1a:cd:bb:0d:f6:26:13:2e:b9:86:03:fb:e1:6e:8c:5b:
cc:5d:7f:15:43:31:6f:44:13:77:ea:b4:07:29:5d:db:c5:b2:
ed:6a:99:51:ed:61:a2:06:81:c4:ef:bd:7c:23:c5:e9:d7:95:
c4:12:2f:81:5c:98:c2:60:b3:2c:49:55:79:a9:a6:47:b4:bc:
26:57:f4:1c:4f:b2:b4:6a:0c:a4:17:05:d7:53:84:4b:e4:f4:
ba:8f:76:ba:6b:8e:f2:e7:c5:eb:80:41:2e:63:a7:77:ae:74:
14:f4:cb:89:3e:e5:5f:18:cf:51:32:c9:62:73:38:81:59:b0:
85:76:b4:78:4b:76:3f:48:e3:26:4e:de:b2:63:52:67:63:c0:
d8:b5:9c:c3:93:0e:5a:38:b0:64:63:da:26:1c:8a:e4:98:9e:
07:c7:ff:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:46 2025 by rpki-client