Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/VK1dCAAWnsxhBkg3c9XHLl8Pzbc.roa
File: VK1dCAAWnsxhBkg3c9XHLl8Pzbc.roa (raw, json)
Hash identifier: ZNQm5+EmOUK6Ma6vYftrqnG1m/bi5op3LK6pXG4joro=
Subject key identifier: 54:AD:5D:08:00:16:9E:CC:61:06:48:37:73:D5:C7:2E:5F:0F:CD:B7
Certificate issuer: /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Certificate serial: 018895229785702B081A74379D05065ED229
Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/VK1dCAAWnsxhBkg3c9XHLl8Pzbc.roa
Signing time: Wed 07 Jun 2023 09:14:12 +0000
ROA not before: Wed 07 Jun 2023 09:14:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49576
IP address blocks: 193.148.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:22:97:85:70:2b:08:1a:74:37:9d:05:06:5e:d2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Validity
Not Before: Jun 7 09:14:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54ad5d0800169ecc6106483773d5c72e5f0fcdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c7:f6:08:b4:e2:8b:e5:9f:d0:bd:f7:d3:d4:
e0:7e:ed:76:a1:31:0a:b7:e7:dd:8b:d1:c1:04:5d:
c0:24:68:f8:c9:f5:c6:82:1a:6c:41:a2:86:4a:4e:
7c:f3:25:e4:94:6f:1d:0f:f8:d3:d6:ca:63:b3:2d:
7e:05:fa:be:5a:d1:ae:88:fa:21:aa:65:10:2b:b0:
cd:e3:e6:3c:89:2e:24:3b:ac:9f:ac:ce:17:ff:f4:
7e:5f:39:04:30:b4:ca:e0:10:39:3d:07:be:7f:7d:
ac:b8:ad:e6:1e:80:02:1d:db:93:97:21:b7:de:54:
9b:5c:a8:70:07:7e:7d:e7:02:20:40:c2:51:6f:30:
d7:c9:7a:dc:94:03:ce:14:79:29:17:22:f2:35:06:
89:bd:c6:63:47:7c:a6:35:75:6f:f8:f7:8b:fb:84:
b2:a5:ad:72:cd:ea:8e:b3:2a:0c:e7:64:95:56:79:
3e:3d:f3:cf:de:90:5a:8a:c4:c2:ab:e6:16:60:51:
e8:f6:f8:f0:7b:0a:63:d8:3c:7c:91:6b:95:9c:eb:
ca:41:e8:ad:d4:99:b7:22:8b:a7:bf:12:cd:58:27:
4a:b5:d3:63:87:78:0b:8c:37:e4:e6:dd:c6:9d:3f:
2b:ea:53:ec:bb:bb:d3:ce:19:3d:41:2d:d7:d8:c7:
09:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AD:5D:08:00:16:9E:CC:61:06:48:37:73:D5:C7:2E:5F:0F:CD:B7
X509v3 Authority Key Identifier:
keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/VK1dCAAWnsxhBkg3c9XHLl8Pzbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.112.0/22
Signature Algorithm: sha256WithRSAEncryption
93:a5:da:68:cc:f6:d8:a5:d5:92:14:43:74:1a:c8:2c:24:cc:
78:28:74:84:33:70:df:d3:73:29:71:c6:9c:23:dd:b5:f3:cb:
69:c6:e4:6b:f2:27:6a:f8:35:7f:d2:59:12:69:84:ba:f8:4c:
a5:80:53:97:a7:7c:2f:95:3b:fc:b5:c3:a5:50:d1:46:4d:a6:
ed:05:a0:93:e9:a3:5f:8c:99:fd:9a:de:1a:9f:ac:2e:00:84:
4c:2b:39:47:f3:eb:97:8d:44:59:ae:06:2a:71:38:ef:ae:26:
5c:97:57:34:52:2b:cc:a4:69:c2:65:c5:c2:7f:33:0a:05:b5:
55:6e:2f:2a:56:dd:48:63:ab:1f:62:b2:2e:db:34:15:91:05:
ed:92:ba:e6:a8:86:28:95:10:5d:ed:6b:db:98:97:45:ee:b0:
17:02:1c:3c:66:c6:2d:d6:d4:a6:f3:a1:75:c4:df:d0:b7:7a:
29:fa:3c:4f:c9:04:66:a9:18:dc:cb:44:52:9d:0f:30:9c:ec:
ce:f0:fd:1a:98:03:e3:e8:21:fb:fa:09:16:f4:21:9e:40:9d:
ee:d5:d2:db:26:9d:e1:f9:27:ca:a5:11:03:d9:eb:9d:88:76:
17:a8:31:29:6f:fe:bc:0e:4f:68:45:b8:51:23:45:36:4c:3b:
e0:6a:a2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:55:58 2025 by rpki-client