Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/vsVJW6nXr9kbRPJjFRyFLXa4uk0.roa
File: vsVJW6nXr9kbRPJjFRyFLXa4uk0.roa (raw, json)
Hash identifier: 3jYP8oKyVsBfZQIX8NGB0Ne1jND3Yks9Z0b8Wa/Mrk0=
Subject key identifier: BE:C5:49:5B:A9:D7:AF:D9:1B:44:F2:63:15:1C:85:2D:76:B8:BA:4D
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B0136D861F616B70861EDFE963870
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/vsVJW6nXr9kbRPJjFRyFLXa4uk0.roa
Signing time: Sun 01 Jan 2023 13:35:04 +0000
ROA not before: Sun 01 Jan 2023 13:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29166
IP address blocks: 195.65.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:01:36:d8:61:f6:16:b7:08:61:ed:fe:96:38:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bec5495ba9d7afd91b44f263151c852d76b8ba4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fc:88:ae:56:f8:b4:97:22:e0:e1:c7:7b:a5:
22:5f:16:e5:33:cd:9f:6a:95:49:e8:4a:27:c3:a7:
01:48:c5:6c:70:88:e3:9b:2f:19:7e:a2:28:aa:6a:
4e:42:c7:0d:83:40:58:cd:52:70:c2:bb:a2:00:17:
d3:e0:9d:52:8a:ac:1f:7f:45:88:41:6b:62:71:70:
82:88:6c:ed:10:7e:8b:6b:85:3b:32:2b:00:ce:90:
1c:ff:80:db:1b:a2:fe:25:9a:6d:a1:9e:6c:9a:96:
34:db:7a:4e:5c:00:75:74:30:a7:3d:21:a6:7d:fa:
4b:f3:58:db:ca:6a:28:2e:2c:29:c2:4a:66:ad:80:
05:1b:66:87:b4:ba:34:91:e5:4c:01:f5:07:2e:e3:
71:ea:82:83:b6:79:87:a2:37:11:80:73:85:a1:57:
4e:4b:38:be:f3:97:b1:d3:17:b6:1b:32:f8:b8:fb:
da:d2:15:8f:3c:20:a1:ed:82:b4:f2:97:35:be:92:
21:33:b7:fb:56:ed:85:cb:7f:76:51:28:cc:ff:37:
0a:a8:d0:c6:78:2d:d3:c6:49:07:53:5e:db:ac:55:
66:36:b8:5c:97:6e:37:01:a0:ab:af:d7:8d:68:1d:
9f:8d:f7:7b:b8:6d:d3:f1:0f:30:44:bc:64:20:56:
bf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C5:49:5B:A9:D7:AF:D9:1B:44:F2:63:15:1C:85:2D:76:B8:BA:4D
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/vsVJW6nXr9kbRPJjFRyFLXa4uk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.148.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:dd:40:10:b3:7a:19:8f:69:0d:5c:e9:7e:a8:0f:4c:96:46:
c5:a7:96:d0:f5:89:e6:11:50:19:92:6e:8d:d7:8e:b2:c6:cc:
fb:03:dd:6f:e8:b0:f3:f4:d2:6c:d7:2d:b8:ec:73:94:5a:b7:
12:f3:79:e3:06:4b:eb:d0:19:15:3a:e1:24:d8:8c:01:bb:c0:
a3:e6:ec:e4:0c:8d:0d:0c:bd:d9:76:c0:60:f8:31:ef:90:f8:
8b:e1:02:4c:a8:d1:de:8b:d9:fc:b1:39:c5:6a:03:73:5e:0b:
8f:5e:dc:99:7a:2c:68:55:50:04:08:e6:c5:dd:ed:54:0e:be:
1d:08:7b:ad:35:49:6f:1e:b0:ad:9c:e7:6b:db:e7:82:21:12:
bd:f1:1a:d3:59:78:63:1a:6a:6f:25:2a:74:36:fd:a4:c2:dc:
88:de:7f:c9:08:1e:d8:bf:21:47:29:3c:7d:f7:11:78:9c:00:
3e:94:4f:87:f4:33:ba:bd:4e:05:89:92:a9:a3:e1:66:83:2a:
6e:e0:3e:71:04:44:a0:d6:54:b2:fc:f9:87:46:84:66:b6:63:
17:74:3a:8c:a8:b8:99:22:28:5e:40:80:ea:c8:f4:a3:9d:0d:
ab:ef:12:35:bc:a9:4e:54:22:c5:b4:5e:da:ac:a3:32:f4:56:
8f:cc:bd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:36:45 2025 by rpki-client