Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/VN-L2uiM0--wMMETagpCFoI3ugY.roa
File: VN-L2uiM0--wMMETagpCFoI3ugY.roa (raw, json)
Hash identifier: mlE11naW0d4g9ha1qxytH6kiTR7GJVdWX/rL5djNAVM=
Subject key identifier: 54:DF:8B:DA:E8:8C:D3:EF:B0:30:C1:13:6A:0A:42:16:82:37:BA:06
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0189B9AB9AC2EDD64D819D2B313438DA165F
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/VN-L2uiM0--wMMETagpCFoI3ugY.roa
Signing time: Thu 03 Aug 2023 04:32:58 +0000
ROA not before: Thu 03 Aug 2023 04:32:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 141.226.246.0/24 maxlen: 24
141.226.244.0/24 maxlen: 24
141.226.247.0/24 maxlen: 24
213.137.80.0/24 maxlen: 24
213.137.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b9:ab:9a:c2:ed:d6:4d:81:9d:2b:31:34:38:da:16:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Aug 3 04:32:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54df8bdae88cd3efb030c1136a0a42168237ba06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:19:c5:c3:a8:da:19:1e:a9:7f:6f:58:59:
35:7f:13:68:c9:fb:31:4b:73:81:0b:0e:93:72:b6:
2f:f0:27:0d:51:8b:37:cf:47:aa:25:e9:9b:c6:85:
d3:2e:c9:88:87:90:59:67:79:0a:63:2b:6f:c1:5e:
89:13:20:7e:bb:88:26:80:b0:d8:ed:64:e4:0e:6e:
94:55:3d:ec:21:c0:76:ff:80:f2:b1:91:00:df:7a:
8a:71:a9:03:c9:3a:d8:d7:f6:13:e7:c4:c3:6d:c4:
97:be:ef:31:a2:3f:04:51:b3:d5:2d:1f:ad:a3:a3:
a3:d7:70:41:1c:bf:fd:2c:1f:f7:24:99:37:d9:63:
d2:11:1d:f8:82:ae:fc:76:c2:c5:94:69:e8:f2:6d:
f0:2a:e8:04:ff:02:23:fa:5e:81:96:2a:03:e2:f9:
2c:04:93:c9:ec:b9:16:c6:52:a3:87:eb:fb:61:05:
32:1d:6f:cb:58:76:5f:1a:ea:5a:ed:2d:a6:f8:f5:
39:c1:3b:4b:c5:1e:fb:26:ed:da:f3:87:7b:81:9c:
51:1d:8d:b5:08:22:ca:0e:f9:65:12:82:06:d1:ad:
f2:7b:8d:ce:36:ad:d2:86:a0:2e:14:4f:f2:0f:56:
e9:c2:1e:fb:b4:a6:cd:89:f8:e8:ae:df:06:7f:95:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DF:8B:DA:E8:8C:D3:EF:B0:30:C1:13:6A:0A:42:16:82:37:BA:06
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/VN-L2uiM0--wMMETagpCFoI3ugY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.244.0/24
141.226.246.0/23
213.137.80.0/24
213.137.84.0/22
Signature Algorithm: sha256WithRSAEncryption
80:71:01:b2:8b:2f:b6:b9:70:a2:12:af:0d:71:78:f4:ba:3f:
b6:72:6f:06:7c:fd:b9:4a:ca:ab:37:df:62:e3:9a:df:ae:a0:
4a:c9:bf:d7:c8:2c:85:30:41:b2:40:df:98:93:cb:28:50:cf:
2e:28:71:4f:62:02:a6:1e:a0:8a:15:f1:6c:f1:ad:e5:a2:08:
2d:a1:74:f0:3e:5f:f9:33:bd:b0:1e:24:a6:dd:ab:11:c3:61:
2c:c4:96:a3:20:8e:8b:8e:b1:cf:70:3e:c1:98:42:b1:d3:23:
7d:01:34:e5:93:6c:75:09:f0:6f:aa:fc:2f:cb:c7:5f:9f:a9:
45:dd:f5:0b:38:1a:6f:24:30:d3:04:37:37:af:20:55:3b:6b:
f3:65:68:1b:0f:86:fd:f4:80:d7:e2:b2:be:6a:68:06:23:c1:
0d:2e:3c:ee:a8:cc:9c:23:bb:78:18:5f:9a:32:b2:4d:55:c1:
98:d8:2f:80:d0:f5:25:f3:cd:6e:bc:9a:fe:a4:83:0b:e5:f0:
7d:92:d7:25:6e:90:6f:19:f3:c8:89:36:e4:5d:0a:ac:b9:db:
3c:97:66:37:b3:ba:5b:19:2d:6a:b4:b5:3b:b4:f7:30:26:78:
6c:55:26:bf:83:e0:fb:d4:1f:c5:db:da:7d:ff:03:5e:7d:f4:
70:f0:74:f7
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYm5q5rC7dZNgZ0rMTQ42hZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjMwODAzMDQzMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGRmOGJkYWU4OGNkM2VmYjAzMGMxMTM2YTBhNDIxNjgyMzdiYTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiIZxcOo2hkeqX9vWFk1fxNoyfsx
S3OBCw6TcrYv8CcNUYs3z0eqJembxoXTLsmIh5BZZ3kKYytvwV6JEyB+u4gmgLDY
7WTkDm6UVT3sIcB2/4DysZEA33qKcakDyTrY1/YT58TDbcSXvu8xoj8EUbPVLR+t
o6Oj13BBHL/9LB/3JJk32WPSER34gq78dsLFlGno8m3wKugE/wIj+l6BlioD4vks
BJPJ7LkWxlKjh+v7YQUyHW/LWHZfGupa7S2m+PU5wTtLxR77Ju3a84d7gZxRHY21
CCLKDvllEoIG0a3ye43ONq3ShqAuFE/yD1bpwh77tKbNifjort8Gf5XN/QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFTfi9rojNPvsDDBE2oKQhaCN7oGMB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvVk4tTDJ1aU0wLS13TU1FVGFncENGb0kzdWdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAjeL0AwQB
jeL2AwQA1YlQAwQC1YlUMA0GCSqGSIb3DQEBCwUAA4IBAQCAcQGyiy+2uXCiEq8N
cXj0uj+2cm8GfP25SsqrN99i45rfrqBKyb/XyCyFMEGyQN+Yk8soUM8uKHFPYgKm
HqCKFfFs8a3loggtoXTwPl/5M72wHiSm3asRw2EsxJajII6LjrHPcD7BmEKx0yN9
ATTlk2x1CfBvqvwvy8dfn6lF3fULOBpvJDDTBDc3ryBVO2vzZWgbD4b99IDX4rK+
amgGI8ENLjzuqMycI7t4GF+aMrJNVcGY2C+A0PUl881uvJr+pIML5fB9ktclbpBv
GfPIiTbkXQqsuds8l2Y3s7pbGS1qtLU7tPcwJnhsVSa/g+D71B/F29p9/wNeffRw
8HT3
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:00 2025 by rpki-client