Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VzDsq-u5H95j0rUqKmVO_QgDGjQ.roa
File: VzDsq-u5H95j0rUqKmVO_QgDGjQ.roa (raw, json)
Hash identifier: xtSRvls/3ny1R5QFxBt1/iX1vUnRgCcYbPpdGCtcmaM=
Subject key identifier: 57:30:EC:AB:EB:B9:1F:DE:63:D2:B5:2A:2A:65:4E:FD:08:03:1A:34
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 01856F14E7F144295EEE25FE7F84AADB92D6
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VzDsq-u5H95j0rUqKmVO_QgDGjQ.roa
Signing time: Sun 01 Jan 2023 20:45:19 +0000
ROA not before: Sun 01 Jan 2023 20:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140947
IP address blocks: 185.104.33.0/24 maxlen: 24
185.104.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:e7:f1:44:29:5e:ee:25:fe:7f:84:aa:db:92:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Jan 1 20:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5730ecabebb91fde63d2b52a2a654efd08031a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:ff:34:64:83:f1:f4:90:f2:3f:09:36:30:
86:8e:97:69:98:28:3d:bc:59:0d:14:25:7d:17:9b:
5d:33:76:14:a3:76:ed:78:25:98:c3:a7:ac:b4:04:
b6:11:d6:05:d1:56:d4:04:ca:24:ae:54:ea:98:60:
87:34:a0:03:e5:68:02:db:f7:95:2a:eb:37:64:a8:
f3:c1:98:dc:b7:c9:46:b0:28:07:cc:8d:70:1a:ca:
3f:8f:bf:b2:26:b3:0e:7d:cc:45:6a:9a:2f:30:24:
1a:9e:3f:52:36:7e:af:cf:74:70:94:bc:c5:4e:d6:
c5:cd:61:1c:fc:8b:88:5e:3a:95:dc:09:4e:9c:33:
0a:5c:0b:8e:0e:9d:f3:5c:9e:f9:72:35:20:15:29:
97:78:5b:ec:81:43:95:7a:ec:36:c2:06:b6:0e:85:
97:c7:78:b5:d7:41:a1:a0:d4:b2:61:6d:07:a6:d8:
a4:12:12:9e:b3:da:ec:54:f0:f6:bc:47:9a:22:3d:
ce:c4:4b:6d:5f:91:b6:9c:19:b7:34:96:65:d1:1f:
e8:9b:1c:1e:16:39:bc:64:fd:9a:d9:d3:4d:16:ab:
64:2e:83:87:0d:0f:dd:89:fa:d5:5d:16:e6:60:83:
ff:0c:67:a9:78:50:b3:c9:50:9c:83:b7:4f:45:75:
f3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:30:EC:AB:EB:B9:1F:DE:63:D2:B5:2A:2A:65:4E:FD:08:03:1A:34
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VzDsq-u5H95j0rUqKmVO_QgDGjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.33.0/24
185.104.39.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c4:99:db:13:48:7c:87:0e:61:93:bb:e1:7f:71:59:fd:b4:
57:53:d9:99:5e:45:a6:43:53:96:09:33:81:9f:e1:23:68:89:
95:a0:3f:9d:d9:f4:3d:04:e2:c8:8a:74:1e:9c:9e:04:76:40:
ae:7d:a8:07:20:23:0a:58:51:e3:d5:16:19:70:14:29:d3:c6:
cd:0f:cf:cb:2e:f2:ba:5c:8d:74:ae:21:4c:ce:c7:24:94:4e:
d0:d3:80:2b:b7:b8:ef:fb:f3:6b:ae:35:45:b2:44:f6:a5:35:
dd:9f:e6:a1:bc:39:b2:df:81:60:55:ff:01:25:05:f4:48:b3:
88:1d:20:f6:48:3d:72:a0:53:64:21:6b:6d:9f:04:8d:82:48:
0d:d1:77:96:eb:42:c4:c4:36:38:f4:1d:a3:5e:fd:e8:11:8f:
8f:4a:48:27:5e:62:e9:89:3e:42:b3:5a:13:f4:eb:ac:af:97:
84:15:cd:96:9b:5a:2b:1f:67:86:b8:f4:ad:e9:6c:bf:97:9c:
59:71:fc:2e:b2:a3:47:17:49:49:69:d5:e9:82:03:d0:9b:55:
84:4d:36:de:f3:aa:b4:14:a3:fb:d6:a5:45:ac:8a:97:9c:80:
0f:3f:8a:0d:c6:91:64:38:29:29:50:a2:33:22:cd:30:31:bc:
79:59:28:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:00 2025 by rpki-client