Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/VPxT48Cb3bd37HREPbSoUqWY8UQ.roa
File: VPxT48Cb3bd37HREPbSoUqWY8UQ.roa (raw, json)
Hash identifier: i9PVEXcxW4/VoHWRluc4KWHxkmtr6BUFDqIYQgtvxRI=
Subject key identifier: 54:FC:53:E3:C0:9B:DD:B7:77:EC:74:44:3D:B4:A8:52:A5:98:F1:44
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 02735638
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/VPxT48Cb3bd37HREPbSoUqWY8UQ.roa
Signing time: Thu 12 May 2022 10:44:03 +0000
ROA not before: Thu 12 May 2022 10:44:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 45.15.211.0/24 maxlen: 24
80.94.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41113144 (0x2735638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: May 12 10:44:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54fc53e3c09bddb777ec74443db4a852a598f144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:4a:4f:ef:41:82:28:fd:89:f0:e2:71:8c:
91:11:7b:a5:0e:3d:05:0f:bc:f4:eb:26:fa:af:60:
54:b2:e6:75:c6:07:eb:c9:82:db:d4:8d:bd:cf:50:
c1:61:a2:93:46:3a:0f:92:d0:cd:17:83:e8:82:81:
40:a6:57:19:87:23:c4:bc:63:00:1c:a8:fc:bb:ce:
da:59:03:d6:f0:fd:04:e0:19:8e:5c:20:0b:ea:c1:
7c:fa:0e:03:f3:82:e4:69:ad:51:ed:39:f5:18:c7:
58:23:51:31:2f:82:84:87:aa:07:ac:e4:c1:58:42:
e9:f2:6e:ea:af:d3:4d:12:e2:84:e2:95:ea:ed:52:
67:74:bc:57:59:a4:47:29:e6:a0:3c:0e:8e:96:f1:
cf:64:d8:c3:5c:18:44:bc:00:d2:4f:c0:05:0e:b3:
fa:c8:94:8b:79:35:d6:b0:25:84:c8:4e:5b:b9:06:
19:fa:d4:1f:e4:3a:25:5e:d3:02:16:e7:54:98:37:
47:d9:bb:e0:b8:f3:ce:11:91:57:a9:42:28:63:f6:
ce:49:13:23:92:0b:d9:38:f3:9d:5e:de:df:9b:7c:
43:35:5b:2a:ea:ac:53:39:96:2b:eb:77:6d:d3:00:
0f:a0:4e:32:67:8a:e9:bb:e3:4f:28:6f:b9:70:02:
ac:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FC:53:E3:C0:9B:DD:B7:77:EC:74:44:3D:B4:A8:52:A5:98:F1:44
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/VPxT48Cb3bd37HREPbSoUqWY8UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.211.0/24
80.94.88.0/24
Signature Algorithm: sha256WithRSAEncryption
57:34:02:f5:b2:ff:77:4c:75:77:1b:23:37:e9:e7:e7:8c:1c:
df:70:11:1c:db:90:fd:c1:ed:32:b3:6f:3b:cd:9c:26:a2:97:
b8:27:9b:c9:38:79:e7:31:0c:0a:60:9a:6e:f1:c8:ec:7f:cd:
6d:2d:ac:e5:12:76:6a:c6:a7:83:a9:c5:6c:92:03:0b:da:da:
20:8c:d4:73:5c:f7:d1:23:ff:d2:c8:77:38:f3:61:bf:1a:10:
00:a7:9a:c0:46:e9:51:07:db:ee:8c:b5:97:80:f3:ca:a5:a4:
d9:15:53:e9:ab:ca:08:3a:50:c3:1e:d6:95:43:d3:a0:85:92:
99:5e:6f:4e:02:f6:f1:2d:03:23:3b:c7:52:e3:3b:09:b6:a0:
d1:78:34:6d:25:b3:d6:53:17:be:5d:b3:6e:88:b4:eb:46:f3:
22:15:0e:4b:d9:3c:76:ab:0c:ed:2e:2e:79:44:2c:d8:b2:bb:
7a:a2:cf:cd:2b:95:ad:e0:f1:45:68:66:a9:0b:61:f9:73:7f:
74:b1:cd:2b:a3:06:c3:69:bc:47:97:40:02:9e:66:71:51:c1:
7b:16:8e:32:19:65:2d:f7:9f:f8:07:a2:68:13:f3:4b:ae:88:
f8:be:39:3a:3c:09:14:5f:35:64:4a:a4:d5:c3:4e:3a:34:fc:
aa:c6:1c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:59 2025 by rpki-client