Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/vEb9g5s8sK9qEOpXVMgIb1vzerE.roa
File: vEb9g5s8sK9qEOpXVMgIb1vzerE.roa (raw, json)
Hash identifier: xWECx1hUa1jOAOVjZJn3/DagpI5JsKU5dUt67Adm7qE=
Subject key identifier: BC:46:FD:83:9B:3C:B0:AF:6A:10:EA:57:54:C8:08:6F:5B:F3:7A:B1
Certificate issuer: /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial: 06EF4A3E
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/vEb9g5s8sK9qEOpXVMgIb1vzerE.roa
Signing time: Fri 01 Jul 2022 15:48:25 +0000
ROA not before: Fri 01 Jul 2022 15:48:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209810
IP address blocks: 85.92.96.0/22 maxlen: 23
194.31.188.0/22 maxlen: 22
89.190.128.0/22 maxlen: 22
2a09:1980::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116345406 (0x6ef4a3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Validity
Not Before: Jul 1 15:48:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc46fd839b3cb0af6a10ea5754c8086f5bf37ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b5:83:ab:a6:b2:09:f5:55:35:a9:9a:20:2b:
38:69:61:92:fd:50:64:ad:c8:45:50:67:a1:fb:30:
11:e3:20:33:92:df:b5:8e:4d:8f:1d:8c:ce:3f:fd:
f2:f4:e0:6f:c5:db:18:cf:ae:61:2d:1d:39:42:fc:
e8:64:59:5a:55:db:7e:d0:9d:dd:ad:9f:1d:dd:82:
06:5f:48:bd:f9:77:fc:dd:cb:00:70:c4:61:af:69:
b7:d6:f5:27:d1:62:d0:08:ae:bd:56:70:98:17:1d:
7d:2c:03:56:3b:86:5a:e4:02:92:d0:03:0c:40:7b:
83:47:80:32:88:64:da:03:66:3c:29:29:41:eb:c7:
a9:dc:88:9e:ae:f3:dc:6c:c4:04:9b:fa:5b:a6:ab:
6d:4d:a4:43:fa:20:75:b5:94:55:2b:35:d5:c6:49:
60:2e:39:77:e2:26:b7:97:be:47:31:f3:b8:d1:c7:
e5:f9:6f:74:42:d2:28:ad:a0:ef:fc:48:a5:5e:33:
f8:72:fb:64:05:c2:3a:49:9e:d9:86:e3:14:41:eb:
22:a1:33:cb:65:04:6d:49:37:90:0a:fc:3f:79:07:
be:5b:b8:22:08:14:5e:76:74:06:03:c8:62:6c:13:
f5:c1:af:8e:6e:c0:b9:45:89:42:47:9d:e1:1c:67:
67:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:46:FD:83:9B:3C:B0:AF:6A:10:EA:57:54:C8:08:6F:5B:F3:7A:B1
X509v3 Authority Key Identifier:
keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/vEb9g5s8sK9qEOpXVMgIb1vzerE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.96.0/22
89.190.128.0/22
194.31.188.0/22
IPv6:
2a09:1980::/29
Signature Algorithm: sha256WithRSAEncryption
7a:c0:1d:9d:58:67:ba:4a:dd:17:0c:ad:b5:c9:ba:47:08:49:
96:c0:02:7a:8a:9b:b5:3c:06:5e:a6:c8:e3:31:72:8e:22:dc:
d5:47:44:aa:54:d5:65:8c:20:ec:45:ec:48:b3:6e:26:90:85:
f8:27:65:d9:17:10:24:80:69:58:91:02:23:99:f3:a7:14:65:
d8:83:44:10:41:7d:6d:14:56:d5:8e:90:a2:88:62:fa:d3:c7:
c5:d3:26:29:85:21:56:14:95:e6:51:b2:e9:b5:d5:7c:d7:83:
e9:d5:61:46:21:e4:fc:cd:b0:96:c2:27:eb:68:d2:f2:be:10:
50:e2:d3:e9:53:79:29:5a:fd:6f:0b:c5:2f:6d:49:1c:c3:ad:
d8:0a:d8:a9:0b:f7:7a:3e:7a:b9:61:06:84:d0:b5:cc:a3:22:
79:21:43:e4:59:a5:96:d9:fe:ac:79:30:ff:ee:c4:05:7e:15:
66:91:e3:4a:73:75:cf:e0:a2:a3:9a:05:f7:03:5b:97:bd:c6:
f3:7e:09:a2:ea:0e:05:0b:96:d2:cc:57:46:27:8f:d2:12:75:
54:56:d0:47:fc:5d:68:b5:ef:8d:1b:84:9b:c4:29:3c:7b:c3:
b7:93:54:cf:29:08:07:e3:6d:4f:4e:69:7d:21:97:dd:f9:e7:
29:d5:b7:17
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:48 2025 by rpki-client