Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/vYpUo8x49-NxBb4_OphZxyW3DvI.roa
File: vYpUo8x49-NxBb4_OphZxyW3DvI.roa (raw, json)
Hash identifier: 0rnePQK+tcJIQxmPu39XUAqiAu/lb/kOPKMpuVkbgSE=
Subject key identifier: BD:8A:54:A3:CC:78:F7:E3:71:05:BE:3F:3A:98:59:C7:25:B7:0E:F2
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B040F37197359C80AE6F6A24B2D63
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/vYpUo8x49-NxBb4_OphZxyW3DvI.roa
Signing time: Sun 01 Jan 2023 13:35:05 +0000
ROA not before: Sun 01 Jan 2023 13:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35276
IP address blocks: 194.6.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:04:0f:37:19:73:59:c8:0a:e6:f6:a2:4b:2d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd8a54a3cc78f7e37105be3f3a9859c725b70ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:59:5c:f0:5d:91:2b:2a:77:63:4e:c2:15:
2d:31:b9:5b:14:bf:47:5e:80:ee:8b:73:02:d3:ef:
3b:d0:05:ac:73:31:b7:f2:d1:a8:8d:97:0b:19:c3:
1e:29:44:a3:67:6e:57:69:e2:be:16:d1:e0:f1:3b:
ac:8a:f9:c3:19:22:d3:23:ed:c5:3d:1e:78:92:50:
1f:46:22:bb:18:44:49:ab:dd:88:57:07:ec:e2:a3:
9b:97:eb:2d:87:1e:53:9e:66:de:32:ac:60:54:56:
41:1e:6f:06:d7:be:ac:db:4d:cb:aa:49:c1:41:c7:
f8:fd:0a:1a:dd:08:27:72:8d:e9:25:53:8a:fa:9b:
5a:9e:eb:1b:9d:0c:2e:80:34:55:bf:76:e9:d4:7d:
5e:aa:69:d7:3d:3c:24:6c:b6:4f:f4:93:f4:d6:5f:
36:41:97:1b:ef:e3:73:36:ff:37:2a:8b:8f:7a:52:
1a:00:48:65:23:73:46:62:00:7c:82:5c:63:e6:45:
1b:3d:d9:ab:f2:af:f1:2d:e2:a3:63:85:eb:c2:01:
8a:f9:ac:ae:81:74:ae:97:60:43:8f:8f:cd:72:9b:
d3:42:55:cd:0d:4c:9a:2a:43:0c:39:28:22:6d:2f:
20:ba:c4:cc:e9:0b:a0:29:e2:8a:d4:35:b5:23:1c:
d9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8A:54:A3:CC:78:F7:E3:71:05:BE:3F:3A:98:59:C7:25:B7:0E:F2
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/vYpUo8x49-NxBb4_OphZxyW3DvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.179.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:20:20:c8:6d:96:36:c9:69:89:bc:d4:e3:36:9d:1a:41:e0:
2f:3f:03:9f:be:c9:81:d8:3d:a4:d8:d9:fa:c2:f9:86:53:82:
54:65:21:93:39:11:72:80:d9:60:05:3a:20:92:ea:a3:92:de:
68:0c:58:bf:46:b3:9b:d3:34:f4:88:c1:be:20:37:2e:a9:01:
36:e4:8f:f8:e2:c2:f8:66:b3:a2:e7:9c:aa:6e:a8:1b:75:c7:
6c:08:f8:eb:bf:bb:3f:d3:3a:51:c7:94:fb:d4:69:1e:aa:c4:
6b:4f:a6:0f:49:1a:0c:5e:e2:13:66:64:1a:f5:15:1c:61:5b:
f2:7b:d6:a1:10:cf:ab:74:0b:55:38:4b:6e:ea:69:c6:68:8d:
7f:40:20:1d:34:a2:48:f9:fd:5b:8b:ec:6e:22:51:76:f9:0e:
16:96:d3:0a:7e:98:d9:6d:b6:b8:79:a0:44:52:ad:4e:c8:ed:
f9:4a:d9:2d:08:6a:be:ce:a9:e5:5f:d2:fb:6c:58:06:54:43:
ba:01:21:31:21:45:08:c3:9b:ef:48:24:0d:d1:e5:eb:8c:39:
ba:e6:98:0a:9a:71:78:02:1d:f5:88:59:40:49:48:35:ca:cf:
3e:38:0a:cf:6d:c5:68:9a:e2:f7:9b:b2:8a:77:52:1d:df:ed:
9e:72:26:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:39 2025 by rpki-client