Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/_VHo63TZG9kKdgbA4ZWzUCx58ZY.roa
File: _VHo63TZG9kKdgbA4ZWzUCx58ZY.roa (raw, json)
Hash identifier: ghItOaaDQw+q17Aqbu+mCphm/ecZq7il6qCNkbpoAm0=
Subject key identifier: FD:51:E8:EB:74:D9:1B:D9:0A:76:06:C0:E1:95:B3:50:2C:79:F1:96
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0185735624D3051A064EAD359699F4CC09E5
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/_VHo63TZG9kKdgbA4ZWzUCx58ZY.roa
Signing time: Mon 02 Jan 2023 16:35:03 +0000
ROA not before: Mon 02 Jan 2023 16:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51174
IP address blocks: 82.222.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:24:d3:05:1a:06:4e:ad:35:96:99:f4:cc:09:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 2 16:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd51e8eb74d91bd90a7606c0e195b3502c79f196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c1:8b:e5:21:87:c2:8a:29:b6:4e:0e:ba:39:
7e:35:fd:89:39:78:b9:5f:89:d0:d3:54:fc:14:98:
d3:6d:a9:df:63:f9:a5:95:dd:32:73:7e:ec:7f:19:
a1:3b:ce:bb:7c:86:40:89:fc:c5:1a:19:db:6a:55:
5b:c1:f1:a3:b4:f0:c3:53:f8:8b:0c:63:00:87:5a:
d4:e9:c8:39:b8:21:eb:89:fc:6b:38:08:d1:2c:bd:
9d:68:aa:50:9a:b7:8a:34:f8:cc:97:31:87:e0:99:
73:5d:90:b4:7f:9c:56:5c:bd:41:53:49:ea:2e:51:
ff:7d:dc:f9:a6:87:e5:0d:b5:6e:f3:71:f7:3b:49:
3f:2c:01:eb:18:c1:2c:1e:ec:ab:cb:b1:5a:65:42:
4e:d6:6f:fb:4f:fc:fe:f5:4f:a8:55:df:73:1c:c8:
05:3e:97:d1:3b:b3:be:bb:ef:b0:9d:99:bf:fe:a1:
f9:ba:c7:9a:89:58:0b:a2:bd:83:75:fb:bd:f8:b2:
99:b1:c4:d2:d8:89:c6:14:e8:75:a2:cc:fe:ef:44:
ca:55:ac:4c:9f:c7:b8:b7:f2:21:0c:83:89:6f:49:
03:d1:48:95:82:98:ae:cb:0e:9d:35:6c:03:38:5f:
f9:8c:b1:18:56:58:b6:57:0c:2d:d8:5d:39:2d:7d:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:51:E8:EB:74:D9:1B:D9:0A:76:06:C0:E1:95:B3:50:2C:79:F1:96
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/_VHo63TZG9kKdgbA4ZWzUCx58ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.222.128.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:70:a5:86:97:cb:f7:a3:ad:87:ac:3c:f5:64:e4:8e:e5:b4:
e1:a3:c8:f6:42:cf:85:39:c2:95:96:89:73:b0:3f:d4:f5:fb:
ac:18:5d:c4:5c:d6:fb:2d:a1:87:e5:20:ce:57:45:f0:eb:06:
bc:03:fa:e8:47:18:b8:43:68:24:fc:1c:2d:96:fe:03:a1:62:
01:69:97:72:7f:b5:63:94:c6:00:87:9f:9e:a6:fc:bc:25:fb:
6e:d9:ae:a7:4e:88:69:e1:8d:9e:2a:06:e1:d2:37:5d:2f:98:
3b:0e:e0:9b:9a:b9:45:6e:52:a6:50:f8:4b:9d:c9:58:2f:55:
2b:a2:34:18:05:93:78:32:38:38:9d:33:97:80:b6:e5:7d:6c:
01:3e:8a:4a:60:09:8f:f9:49:a5:92:95:17:b1:11:df:78:f6:
e1:2d:52:dc:bb:28:2a:c7:c6:09:8d:45:e8:17:91:86:69:fd:
62:04:0a:b7:d6:aa:22:3c:ec:11:28:ed:7b:43:5d:01:43:19:
58:7b:60:87:7a:aa:c7:c6:16:6b:97:1e:d8:b5:21:65:e7:2e:
e5:d6:39:77:20:50:aa:87:cd:3c:d5:c8:42:ba:26:4c:38:4f:
df:f1:9a:c0:d1:5e:fb:02:70:6b:f4:27:57:54:e9:84:fc:64:
97:7c:51:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:52:43 2025 by rpki-client