Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/vQ_tqrshdPvIGNx7-NQwqjyJufs.roa
File: vQ_tqrshdPvIGNx7-NQwqjyJufs.roa (raw, json)
Hash identifier: Y5koMa5bzJFA5CFPQWa+pV3gFnaPwK2bJf6pVpjPnAM=
Subject key identifier: BD:0F:ED:AA:BB:21:74:FB:C8:18:DC:7B:F8:D4:30:AA:3C:89:B9:FB
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 3465DF4B
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/vQ_tqrshdPvIGNx7-NQwqjyJufs.roa
Signing time: Sat 01 Jan 2022 10:56:48 +0000
ROA not before: Sat 01 Jan 2022 10:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201029
IP address blocks: 185.77.77.0/24 maxlen: 24
185.77.76.0/24 maxlen: 24
2a00:8dc0:ff00::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 879091531 (0x3465df4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Jan 1 10:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd0fedaabb2174fbc818dc7bf8d430aa3c89b9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:16:30:c0:7d:b1:1f:f6:2a:f7:73:17:b2:8e:
75:32:d4:a2:1c:7e:40:ea:74:81:1a:a5:ce:f8:22:
23:a2:98:5c:34:f8:85:f1:61:03:d3:3a:07:a4:85:
5d:0c:1d:55:97:13:35:b0:ab:25:c0:01:cc:eb:9e:
05:76:aa:11:67:3a:23:43:23:fa:df:91:8d:06:55:
34:07:5a:d4:ef:58:83:6a:e2:4d:2e:76:9b:26:9a:
14:60:67:9b:eb:94:0f:4b:f6:03:73:af:36:33:e8:
83:14:9d:57:0c:9c:4a:ea:69:6e:13:c5:6d:b8:f9:
32:4f:21:f9:3a:69:6d:13:1f:bc:4e:13:9a:aa:1c:
2f:a4:12:84:e0:3f:94:ac:06:f4:cb:f8:c3:6d:b8:
67:32:27:1e:b2:f3:42:b7:4f:1a:57:b1:eb:4d:b7:
d2:db:23:91:54:86:63:2d:d9:5e:83:e8:db:3b:28:
99:d1:a2:6a:4c:ba:d7:87:dd:77:ac:01:b3:54:eb:
39:f0:9d:9a:1c:fe:e2:ca:cb:8d:1f:6a:5a:3e:9e:
b3:48:a8:7d:e6:d1:6c:35:77:40:e0:5e:2d:7e:9d:
4d:d5:a6:dd:9e:41:6d:36:e7:dd:1b:06:4d:92:af:
38:3b:17:d4:bf:7d:7d:b5:3e:5d:19:5e:7a:a6:59:
29:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0F:ED:AA:BB:21:74:FB:C8:18:DC:7B:F8:D4:30:AA:3C:89:B9:FB
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/vQ_tqrshdPvIGNx7-NQwqjyJufs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.76.0/23
IPv6:
2a00:8dc0:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
75:af:3e:14:79:be:7a:bf:f6:87:8b:60:88:d6:3a:48:68:a0:
32:d3:2e:c9:73:2d:13:04:9e:17:c5:57:ea:33:13:f6:bd:ae:
3e:77:1e:2f:45:68:b7:8a:c3:08:a9:bb:51:88:e7:17:34:1d:
c0:78:6a:9c:5f:41:44:91:7c:66:4a:bd:00:1f:70:22:ff:7e:
c6:46:bc:be:2b:35:d0:52:6b:b8:86:a9:2d:d3:5b:d9:32:8d:
48:c4:c2:c5:2b:d1:3f:a6:b8:3e:63:4a:d7:23:b2:e5:30:8e:
b3:18:74:ac:ca:2a:36:d6:86:1b:4b:e5:fd:b3:85:d8:61:ea:
4c:b7:02:f5:ee:ff:fc:24:0b:77:21:5e:68:f6:30:fa:e7:b4:
f3:76:cc:82:83:b6:b7:67:79:0b:38:f0:89:df:f7:85:c4:4f:
e4:d3:9e:5b:b0:6b:2c:81:6c:92:63:03:75:34:ba:35:46:07:
c7:7f:9b:79:54:6e:e8:0d:00:49:a3:1b:22:95:89:3f:28:4d:
86:97:53:cb:12:35:52:51:c8:8c:e1:ed:18:0f:cd:63:38:53:
5c:68:2d:85:1c:dc:f9:06:40:40:78:22:6d:93:9f:79:3a:88:
bb:96:1b:f5:57:69:2e:76:10:b0:26:68:59:4b:12:fa:02:92:
cc:0c:3f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:49 2025 by rpki-client