Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/VaZbceoKdufdzgN2_XPxRkzC4NQ.roa
File: VaZbceoKdufdzgN2_XPxRkzC4NQ.roa (raw, json)
Hash identifier: wgIg64VSq4tDPylxhgXxC1oWq3k0TmFzGWEEA+1opQc=
Subject key identifier: 55:A6:5B:71:EA:0A:76:E7:DD:CE:03:76:FD:73:F1:46:4C:C2:E0:D4
Certificate issuer: /CN=dd53f63f13a0c952a079f4578a10edbf6e3aa58b
Certificate serial: 01856CEF0785EF928699E1C94336741ACD59
Authority key identifier: DD:53:F6:3F:13:A0:C9:52:A0:79:F4:57:8A:10:ED:BF:6E:3A:A5:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/VaZbceoKdufdzgN2_XPxRkzC4NQ.roa
Signing time: Sun 01 Jan 2023 10:44:42 +0000
ROA not before: Sun 01 Jan 2023 10:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16314
IP address blocks: 217.116.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:07:85:ef:92:86:99:e1:c9:43:36:74:1a:cd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd53f63f13a0c952a079f4578a10edbf6e3aa58b
Validity
Not Before: Jan 1 10:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55a65b71ea0a76e7ddce0376fd73f1464cc2e0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:13:1b:dd:ff:58:0e:ed:89:86:c0:fc:f4:73:
cd:5d:58:11:aa:3b:73:76:05:13:29:40:02:0b:c3:
ed:28:a3:3f:89:08:c8:e8:ec:57:15:f1:9a:0b:23:
76:9d:00:80:49:4b:a7:e7:ed:4b:32:83:5a:11:09:
69:7d:f7:b3:11:c8:72:85:6d:04:ec:81:d1:73:1f:
a8:68:f9:5a:e9:1e:bf:bf:9e:d7:38:39:c3:ff:b8:
12:0b:d4:a9:1e:9a:fe:34:79:82:46:8a:59:d8:10:
e6:31:58:1e:dc:aa:4a:e6:14:f5:f0:f3:66:79:c3:
4e:55:e2:3f:11:8b:96:9a:7e:ef:2b:20:f1:80:a9:
54:34:c8:7a:9c:97:17:49:0c:74:91:cb:74:c5:07:
14:ec:a8:41:b9:ca:8f:9a:b1:72:df:8e:78:55:f9:
24:bd:9e:6e:74:54:62:cd:eb:06:98:81:55:df:aa:
82:09:6a:08:f3:04:2c:22:1a:94:0b:f4:07:d9:78:
2d:7d:31:4b:f8:5e:85:5e:19:33:1e:c8:21:5e:ad:
17:ec:12:39:ba:b2:b8:d7:96:8d:25:12:88:c3:a6:
98:ab:5f:fb:a0:44:f5:c6:80:af:d9:3c:35:58:65:
c6:3e:64:62:62:24:cf:6a:80:0b:a3:38:26:dc:ce:
68:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A6:5B:71:EA:0A:76:E7:DD:CE:03:76:FD:73:F1:46:4C:C2:E0:D4
X509v3 Authority Key Identifier:
keyid:DD:53:F6:3F:13:A0:C9:52:A0:79:F4:57:8A:10:ED:BF:6E:3A:A5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/VaZbceoKdufdzgN2_XPxRkzC4NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.116.64.0/20
Signature Algorithm: sha256WithRSAEncryption
7d:06:bd:f1:d4:b7:f9:ad:72:a3:b8:2f:22:5a:58:94:4b:62:
5e:3f:f9:5f:b5:f2:5e:0f:81:77:7e:0a:f0:6d:82:a3:09:25:
f4:62:6b:08:a1:fd:27:b7:42:85:e2:f8:59:39:dd:77:9b:e4:
ec:15:a7:20:58:09:4c:87:bd:66:22:63:b0:c8:c7:b9:44:29:
41:77:72:c2:99:2e:a4:fd:6d:68:63:5e:4e:57:59:dc:30:09:
22:9e:84:dd:fd:dc:53:de:1e:5f:5e:45:b9:92:4c:44:01:db:
22:43:96:82:55:e7:b6:3a:24:5f:29:c2:07:29:05:50:4d:92:
63:c9:d2:34:0d:4f:53:1a:86:54:da:96:16:f5:47:8c:fc:13:
47:ef:5e:39:96:3c:da:7e:2a:8d:c1:ae:e4:cd:b1:d6:a0:e3:
85:a5:02:1e:37:4c:03:eb:cb:b0:27:85:99:2e:74:63:d7:fd:
2b:61:79:9e:7f:2a:6a:a6:bf:07:49:7f:e3:19:e8:d7:5b:d5:
41:7c:43:8e:22:67:95:9e:a0:91:d5:4b:00:d1:20:8d:0f:2c:
77:92:94:38:fe:f6:12:3a:12:c7:b9:4d:74:61:3c:63:95:f0:
0e:2a:04:6c:cf:b2:ff:05:40:4a:35:b2:6e:3b:6c:30:3e:61:
66:02:76:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVs7weF75KGmeHJQzZ0Gs1ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNTNmNjNmMTNhMGM5NTJhMDc5ZjQ1NzhhMTBlZGJmNmUz
YWE1OGIwHhcNMjMwMTAxMTA0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWE2NWI3MWVhMGE3NmU3ZGRjZTAzNzZmZDczZjE0NjRjYzJlMGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxMb3f9YDu2JhsD89HPNXVgRqjtz
dgUTKUACC8PtKKM/iQjI6OxXFfGaCyN2nQCASUun5+1LMoNaEQlpffezEchyhW0E
7IHRcx+oaPla6R6/v57XODnD/7gSC9SpHpr+NHmCRopZ2BDmMVge3KpK5hT18PNm
ecNOVeI/EYuWmn7vKyDxgKlUNMh6nJcXSQx0kct0xQcU7KhBucqPmrFy3454Vfkk
vZ5udFRizesGmIFV36qCCWoI8wQsIhqUC/QH2XgtfTFL+F6FXhkzHsghXq0X7BI5
urK415aNJRKIw6aYq1/7oET1xoCv2Tw1WGXGPmRiYiTPaoALozgm3M5oAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFWmW3HqCnbn3c4Ddv1z8UZMwuDUMB8GA1UdIwQY
MBaAFN1T9j8ToMlSoHn0V4oQ7b9uOqWLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1ZQMlB4T2d5VktnZWZSWGloRHR2MjQ2cFlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xYzQ0NGQtMDU4ZC00NzVjLWFiZmYt
NWNkZmExMTdhZWM2LzEvVmFaYmNlb0tkdWZkemdOMl9YUHhSa3pDNE5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xYzQ0NGQtMDU4ZC00NzVjLWFiZmYtNWNkZmExMTdhZWM2
LzEvM1ZQMlB4T2d5VktnZWZSWGloRHR2MjQ2cFlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2XRAMA0G
CSqGSIb3DQEBCwUAA4IBAQB9Br3x1Lf5rXKjuC8iWliUS2JeP/lftfJeD4F3fgrw
bYKjCSX0YmsIof0nt0KF4vhZOd13m+TsFacgWAlMh71mImOwyMe5RClBd3LCmS6k
/W1oY15OV1ncMAkinoTd/dxT3h5fXkW5kkxEAdsiQ5aCVee2OiRfKcIHKQVQTZJj
ydI0DU9TGoZU2pYW9UeM/BNH7145ljzafiqNwa7kzbHWoOOFpQIeN0wD68uwJ4WZ
LnRj1/0rYXmefypqpr8HSX/jGejXW9VBfEOOImeVnqCR1UsA0SCNDyx3kpQ4/vYS
OhLHuU10YTxjlfAOKgRsz7L/BUBKNbJuO2wwPmFmAnbP
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:31 2025 by rpki-client