Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/VoBod8Axg-nwVOWdgiZlWnTBShE.roa
File: VoBod8Axg-nwVOWdgiZlWnTBShE.roa (raw, json)
Hash identifier: wNZKwnPkz93/WjrBiqay7gg9NQ+7iwQXhq3lWrnkw+Q=
Subject key identifier: 56:80:68:77:C0:31:83:E9:F0:54:E5:9D:82:26:65:5A:74:C1:4A:11
Certificate issuer: /CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
Certificate serial: 018760C3E0DA68C32E48321669459ECAD520
Authority key identifier: 89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/VoBod8Axg-nwVOWdgiZlWnTBShE.roa
Signing time: Sat 08 Apr 2023 12:07:42 +0000
ROA not before: Sat 08 Apr 2023 12:07:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50643
IP address blocks: 195.191.200.0/23 maxlen: 23
2001:678:b4c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:60:c3:e0:da:68:c3:2e:48:32:16:69:45:9e:ca:d5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
Validity
Not Before: Apr 8 12:07:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56806877c03183e9f054e59d8226655a74c14a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b8:fe:22:01:69:53:98:ff:0b:db:90:dd:91:
69:ff:e8:45:83:5c:5d:2c:6c:45:44:c7:b0:c2:e3:
43:b2:27:ec:dc:ab:7f:2b:92:93:1b:4c:9b:27:cd:
35:d8:5c:34:c0:f9:72:d7:07:a8:79:e8:7c:39:67:
97:c5:c6:a6:67:4d:6b:6e:e2:9e:cf:11:7d:91:b1:
15:eb:c5:82:92:07:93:3d:6b:66:0e:e5:36:50:73:
a0:79:37:5f:ba:93:77:38:1b:30:c3:21:1c:a1:c2:
9a:f7:04:25:64:1f:26:a3:a7:8e:72:df:e5:b6:fe:
97:4b:cd:4f:91:b8:f7:5e:30:82:5f:3b:f7:3d:5f:
ee:85:d8:a7:29:69:b8:68:db:37:b0:43:70:00:cf:
17:d1:90:7c:b5:61:54:df:16:ca:b1:a9:11:59:ef:
cc:ff:4f:34:6d:a1:fb:6b:56:4e:a7:f2:a2:65:c7:
db:7e:49:0d:8e:73:8f:9f:1f:70:66:5f:a3:4c:ed:
ac:ca:c9:6e:c3:2f:d3:22:57:b9:4c:dc:a0:f7:0c:
3d:48:45:2f:cf:0c:15:91:16:15:e9:9e:96:17:b4:
81:50:50:c2:41:ef:3f:a0:03:19:0d:f0:ae:10:a6:
cd:c3:a1:f4:3e:84:44:58:77:96:fb:61:d3:42:48:
70:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:80:68:77:C0:31:83:E9:F0:54:E5:9D:82:26:65:5A:74:C1:4A:11
X509v3 Authority Key Identifier:
keyid:89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/VoBod8Axg-nwVOWdgiZlWnTBShE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.200.0/23
IPv6:
2001:678:b4c::/48
Signature Algorithm: sha256WithRSAEncryption
26:b1:00:e1:6a:68:5e:ec:e3:bd:d4:7b:70:9c:5a:4c:c4:a6:
4e:e0:c0:56:c4:85:46:00:36:d4:4e:01:6a:b2:f6:50:80:31:
60:15:66:fe:92:47:de:be:35:2b:8c:62:8e:7d:06:c5:15:c8:
ca:37:de:36:9b:34:3e:9d:01:81:38:26:5c:5f:a6:6a:2d:4a:
5e:37:1f:24:08:34:8e:ee:2c:e5:bd:4e:91:92:ae:ca:2d:9b:
5c:23:bc:6b:8b:58:c4:b8:7b:2a:ca:e3:23:26:da:39:96:74:
f8:3e:24:60:6c:62:73:90:70:9c:57:7c:9d:9d:cc:b7:dc:90:
07:b3:80:95:12:9e:ab:ca:95:07:6b:a8:f3:04:1d:68:9e:79:
f2:a0:84:19:cb:61:82:73:47:9f:be:9b:9d:6f:5f:d7:fd:db:
69:5f:b5:02:7a:b3:0a:8b:8d:60:f5:68:94:59:b3:2c:7d:eb:
18:aa:d3:79:c4:1c:88:e1:95:e3:8d:fa:80:c2:0d:c4:1b:fc:
a1:f7:d2:13:8a:39:55:38:56:11:7c:8b:52:5a:8f:5b:59:e7:
e8:14:d2:81:fd:19:50:3b:10:b2:e4:d4:d9:58:03:45:0a:1f:
4e:fe:b1:28:a1:3b:9e:47:ca:d5:58:12:e8:67:f6:5e:0a:73:
43:30:85:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:27 2025 by rpki-client