Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/vPgHglib6xpaVtu9BzJMXPodqcQ.roa
File: vPgHglib6xpaVtu9BzJMXPodqcQ.roa (raw, json)
Hash identifier: Q1EzALS66y245dEwm8h5SoaLw455MIUdETQyX5yZHAo=
Subject key identifier: BC:F8:07:82:58:9B:EB:1A:5A:56:DB:BD:07:32:4C:5C:FA:1D:A9:C4
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 0475F8C7
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/vPgHglib6xpaVtu9BzJMXPodqcQ.roa
Signing time: Sat 01 Jan 2022 15:01:52 +0000
ROA not before: Sat 01 Jan 2022 15:01:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57768
IP address blocks: 185.46.177.0/24 maxlen: 24
185.46.176.0/22 maxlen: 22
185.46.176.0/24 maxlen: 24
185.46.179.0/24 maxlen: 24
185.46.178.0/24 maxlen: 24
5.187.8.0/24 maxlen: 24
5.187.8.0/21 maxlen: 21
5.187.10.0/24 maxlen: 24
5.187.9.0/24 maxlen: 24
5.187.11.0/24 maxlen: 24
5.187.13.0/24 maxlen: 24
5.187.15.0/24 maxlen: 24
5.187.14.0/24 maxlen: 24
5.187.12.0/24 maxlen: 24
37.75.131.0/24 maxlen: 24
37.75.132.0/24 maxlen: 24
37.75.128.0/24 maxlen: 24
37.75.128.0/21 maxlen: 21
37.75.130.0/24 maxlen: 24
37.75.129.0/24 maxlen: 24
37.75.135.0/24 maxlen: 24
37.75.134.0/24 maxlen: 24
37.75.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74840263 (0x475f8c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Jan 1 15:01:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcf80782589beb1a5a56dbbd07324c5cfa1da9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:b7:f4:40:e4:fa:f7:eb:44:9e:57:cf:4a:
4a:75:47:75:4b:51:02:1d:34:68:42:f4:21:00:e5:
55:f5:8e:2f:15:18:bb:d5:b4:6f:24:0b:79:77:34:
bb:83:50:10:44:dd:5c:86:54:97:d7:60:e2:9f:ac:
fc:75:1d:1e:69:d1:6f:2e:ea:ce:1f:a1:67:55:47:
e1:51:4d:c7:c3:bd:df:51:3f:66:ca:fd:12:24:11:
b6:1c:a2:2e:29:60:85:c9:a6:e4:93:72:a1:18:32:
4b:b7:e9:93:ae:fa:87:4c:e6:d6:1d:fa:0e:ae:28:
dd:05:74:26:94:2c:31:76:82:70:dc:5f:09:87:76:
ce:13:59:10:2e:7f:84:a9:25:a5:df:bc:ab:54:2a:
13:51:69:da:83:9b:b5:5a:7a:4b:e1:fd:dc:88:68:
e6:7b:f0:51:89:51:cd:b7:2f:d7:f2:50:53:b8:de:
10:6f:0d:30:cd:2e:ef:ea:28:96:6b:84:d6:a8:db:
61:49:45:44:69:57:3f:cd:0d:8f:16:e6:87:90:08:
a6:3a:14:4a:ae:4a:ca:a0:2f:18:9c:2c:0b:a3:65:
78:4b:cc:94:83:db:78:50:d2:07:13:8c:12:04:42:
e8:35:08:8b:56:e0:eb:43:09:d5:6c:84:a5:fc:03:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F8:07:82:58:9B:EB:1A:5A:56:DB:BD:07:32:4C:5C:FA:1D:A9:C4
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/vPgHglib6xpaVtu9BzJMXPodqcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.8.0/21
37.75.128.0/21
185.46.176.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:d6:1e:7d:97:4e:2c:78:c8:6f:d0:89:ce:83:b8:63:94:e1:
da:9c:d6:7f:92:90:ae:38:b8:51:50:64:30:fb:86:79:8d:a5:
28:98:b7:ab:de:49:40:1e:a3:69:9c:45:a6:ea:98:57:00:08:
7c:c4:79:80:7a:92:89:a0:c0:1b:91:dd:9a:2d:dd:8d:66:27:
e6:f0:3b:32:e8:b5:4b:76:d3:13:65:a3:f6:36:4f:95:08:07:
67:54:3d:41:9a:33:2a:4c:19:47:44:58:e4:4b:47:41:f3:d8:
bc:4e:7d:c6:1e:d3:43:25:26:bc:74:1d:da:27:c8:b5:96:87:
23:0c:ed:0d:95:51:3c:af:ba:41:9d:ae:16:0c:16:85:aa:3f:
52:22:08:7c:69:15:a8:8c:1b:43:38:8e:28:9a:71:f6:f2:b7:
33:67:ee:7d:3e:88:b1:8e:5c:70:e8:13:bc:9a:2a:44:f4:4f:
ad:11:20:62:76:8b:28:1c:ae:7d:e1:f1:26:59:40:17:96:39:
29:42:f1:0f:5c:80:08:5b:5d:ab:9e:da:d0:95:99:ce:62:8a:
71:4a:bf:d9:2c:5d:09:a8:eb:ba:cb:86:27:ec:6f:89:d5:f2:
77:bb:e5:61:4d:e3:0a:e8:93:da:68:15:e0:11:a6:04:c7:48:
28:f8:e2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:06 2025 by rpki-client