Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/VQcnCKPF02nfN6pfdlZXQRZWNeM.roa
File: VQcnCKPF02nfN6pfdlZXQRZWNeM.roa (raw, json)
Hash identifier: H1pjewkEBxozikdNwjl63h/H6FNWsw5C5i5oyHJJDzI=
Subject key identifier: 55:07:27:08:A3:C5:D3:69:DF:37:AA:5F:76:56:57:41:16:56:35:E3
Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial: 0186F480CC9580FC28F78706173AADA98166
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/VQcnCKPF02nfN6pfdlZXQRZWNeM.roa
Signing time: Sat 18 Mar 2023 11:35:27 +0000
ROA not before: Sat 18 Mar 2023 11:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204544
IP address blocks: 45.129.36.0/24 maxlen: 24
45.129.36.0/22 maxlen: 22
185.53.141.0/24 maxlen: 24
185.53.140.0/22 maxlen: 22
185.53.140.0/24 maxlen: 24
185.53.143.0/24 maxlen: 24
185.53.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f4:80:cc:95:80:fc:28:f7:87:06:17:3a:ad:a9:81:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Validity
Not Before: Mar 18 11:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55072708a3c5d369df37aa5f76565741165635e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e6:8e:d7:1e:e3:af:98:88:63:21:f2:ea:70:
c2:d5:9a:a7:31:b6:b5:18:60:4a:d4:79:b4:37:50:
76:c2:e6:8b:fa:76:a2:be:0c:04:50:24:60:8b:81:
fc:f8:37:24:67:66:9e:d5:1b:14:a4:b6:d0:3b:43:
73:62:4d:6b:40:28:8d:78:4c:d0:a3:a3:eb:68:ed:
3f:f3:45:90:c7:cf:76:23:37:da:77:05:5a:cd:83:
81:d9:1b:8f:a8:8a:7a:d9:f2:f0:fe:c9:22:0a:49:
0f:13:15:ce:bd:20:99:24:7c:08:30:73:8a:48:5a:
31:9c:2c:fe:87:87:97:34:7d:15:21:ce:27:62:ab:
03:e5:58:5c:c2:2b:80:5e:5f:f7:3c:2c:89:6c:bc:
fb:41:3a:cf:b1:7e:55:9e:80:71:9b:87:76:4c:e1:
e6:c2:fe:c3:ce:d4:42:74:c0:04:3c:a7:ea:1b:d8:
f3:7b:bf:46:fc:8f:5b:70:11:22:60:ee:c4:e9:50:
04:c2:52:fa:36:aa:aa:56:bc:7d:94:c3:96:3b:eb:
47:07:aa:de:08:bf:df:36:58:df:09:76:94:ff:e5:
1c:7c:61:ed:aa:a2:2f:ef:a4:b6:9f:7d:2f:3c:e6:
a7:ce:c1:bd:00:75:86:f0:1d:75:b8:aa:eb:ef:e8:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:07:27:08:A3:C5:D3:69:DF:37:AA:5F:76:56:57:41:16:56:35:E3
X509v3 Authority Key Identifier:
keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/VQcnCKPF02nfN6pfdlZXQRZWNeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.36.0/22
185.53.140.0/22
Signature Algorithm: sha256WithRSAEncryption
41:98:df:a9:59:6b:98:42:6b:30:93:74:49:34:73:a4:94:a2:
24:0b:61:63:92:3e:93:fb:c7:be:25:46:ce:b5:e6:f1:70:37:
4f:90:31:4f:69:5b:38:7a:41:cb:43:b4:47:1f:db:98:07:7e:
ef:48:5d:f3:3e:0c:a8:39:c4:24:3e:b8:89:2c:1d:1c:50:26:
2d:da:78:9c:33:af:b2:69:d7:29:aa:c0:f6:d8:82:88:73:3e:
9b:bb:54:43:af:f4:32:ad:10:c2:32:08:40:13:a9:84:e6:f8:
19:ec:87:4f:fe:f5:7e:a7:1f:25:0a:8f:04:54:2d:dd:aa:71:
39:bf:af:c3:00:88:b5:82:c6:95:77:69:93:8f:d5:e1:31:eb:
53:84:19:0d:cb:33:f3:3b:a8:48:15:c7:31:e2:6d:e6:30:f7:
92:2b:14:ec:89:dc:0d:02:11:73:62:6c:d8:95:d3:3c:b7:89:
8f:f5:04:e6:86:be:61:fb:ee:b9:37:4a:6a:c4:51:e3:bf:0b:
53:dc:6b:06:df:20:1b:80:87:fa:54:c6:7f:71:61:eb:f9:cb:
fa:ed:6e:93:54:bf:6d:e6:ca:07:6a:e3:02:27:75:4e:70:54:
f8:25:11:07:4a:27:90:86:eb:20:5f:72:7d:5b:c5:3e:31:f6:
d6:38:6f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:42:48 2025 by rpki-client