Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/vW7V147xBLETWifOk1eWWL2owkc.roa
File: vW7V147xBLETWifOk1eWWL2owkc.roa (raw, json)
Hash identifier: bIhMsuWmnRDCDuPooMnQv1NP5p5Ve6ddboLqOLHdz/E=
Subject key identifier: BD:6E:D5:D7:8E:F1:04:B1:13:5A:27:CE:93:57:96:58:BD:A8:C2:47
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 018A9AA48DEEE94CA639FDA98B92FE7F0DCF
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/vW7V147xBLETWifOk1eWWL2owkc.roa
Signing time: Fri 15 Sep 2023 20:59:50 +0000
ROA not before: Fri 15 Sep 2023 20:59:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202163
IP address blocks: 185.51.13.0/24 maxlen: 24
185.51.14.0/24 maxlen: 24
185.51.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9a:a4:8d:ee:e9:4c:a6:39:fd:a9:8b:92:fe:7f:0d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Sep 15 20:59:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd6ed5d78ef104b1135a27ce93579658bda8c247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:28:df:d9:72:a1:49:b5:a2:37:a9:39:a3:
e1:b9:f5:4e:8b:16:a2:ad:b5:11:9d:e1:3d:8a:29:
88:b6:9f:fe:56:ed:81:57:79:38:ee:e1:a4:40:52:
1d:0a:81:79:f2:00:a3:9e:93:60:86:0e:23:98:57:
f6:48:61:d0:6c:18:4b:67:1e:27:b5:e2:a8:a4:d6:
20:99:f6:c9:dc:cc:9e:46:ce:49:19:72:5e:d8:14:
99:36:ef:70:b2:49:38:f7:64:5a:7a:67:da:cb:50:
bf:10:a6:45:5b:dd:65:ff:5a:4e:db:46:19:e3:4e:
39:ac:cf:cb:27:40:43:53:21:73:14:0e:47:3b:e0:
be:df:35:8d:d4:24:67:29:2a:12:10:e3:ca:43:c9:
b0:1c:b9:cf:83:8e:b4:de:47:00:b7:c9:1c:49:b7:
d7:85:4e:ce:fb:c1:d1:81:b1:0f:d5:e6:82:13:e8:
d0:81:23:d2:cf:54:3b:24:c0:b7:e3:1e:89:1c:9c:
e0:07:0c:1f:fb:33:63:80:25:85:b8:74:5f:81:d1:
0e:39:88:21:8c:74:75:a1:92:a1:34:6b:68:f8:9b:
88:97:d0:b5:59:2e:fb:f7:be:96:a7:40:3b:82:5c:
b6:d4:47:d3:b5:00:e7:23:30:30:75:c5:0d:70:2d:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6E:D5:D7:8E:F1:04:B1:13:5A:27:CE:93:57:96:58:BD:A8:C2:47
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/vW7V147xBLETWifOk1eWWL2owkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.13.0-185.51.15.255
Signature Algorithm: sha256WithRSAEncryption
17:b7:5f:69:df:30:5e:de:73:fe:0b:fd:46:18:98:40:c5:04:
47:5c:72:70:34:a5:84:ea:48:6d:2a:80:fd:3c:56:15:7e:b5:
e0:52:eb:95:19:7f:2a:c4:e1:02:68:89:1b:48:9a:9f:0f:e8:
35:49:24:26:9f:07:f4:3e:3f:fe:13:ed:18:95:d7:88:30:cc:
d8:c1:a1:c7:7d:99:02:d2:37:2b:ca:ab:cf:a2:6a:49:9e:43:
1a:e4:47:e9:b8:1c:9b:88:d3:60:16:f3:50:47:5e:50:ce:95:
c5:49:8a:d9:a9:ca:ab:71:90:2e:b6:85:de:46:64:ac:03:7e:
b0:de:86:10:67:07:e5:08:70:ae:68:e2:26:af:27:61:29:bb:
3e:3d:69:c9:4c:18:b6:db:e4:00:d6:5a:4f:21:37:bd:79:35:
63:e3:f4:79:68:37:23:58:89:6b:a2:c6:63:d6:32:25:e8:1e:
25:26:33:29:d5:fa:16:bf:f3:b7:66:96:02:bd:35:9f:28:06:
68:11:0d:5e:29:d3:38:19:bd:aa:61:b6:62:a1:79:84:41:ac:
0b:ed:89:b6:08:67:0d:02:c4:4c:a1:a3:64:32:f0:db:b8:2c:
78:d8:db:26:e0:d5:99:ef:e6:c3:79:ef:95:55:60:e6:cc:d4:
c9:ea:a6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:24 2025 by rpki-client