Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/vRSEYveNyDrBYPx4z6iS8SslJc0.roa
File: vRSEYveNyDrBYPx4z6iS8SslJc0.roa (raw, json)
Hash identifier: nh0pYGPn/bGGtAaCgfOPYceaRgCgTm/XHJ6khvbwPoU=
Subject key identifier: BD:14:84:62:F7:8D:C8:3A:C1:60:FC:78:CF:A8:92:F1:2B:25:25:CD
Certificate issuer: /CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Certificate serial: 01856DDD3414D18A792F186C644DD116FD07
Authority key identifier: 6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/vRSEYveNyDrBYPx4z6iS8SslJc0.roa
Signing time: Sun 01 Jan 2023 15:04:51 +0000
ROA not before: Sun 01 Jan 2023 15:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204272
IP address blocks: 45.155.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:34:14:d1:8a:79:2f:18:6c:64:4d:d1:16:fd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Validity
Not Before: Jan 1 15:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd148462f78dc83ac160fc78cfa892f12b2525cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:22:88:2c:e2:5f:11:d6:3e:e0:59:56:9d:df:
26:39:5c:d8:05:c1:47:67:f8:fb:d8:aa:9f:9a:e7:
72:cc:8b:3a:63:4a:96:1b:94:e2:4a:bb:b0:94:37:
7e:75:fc:55:b9:ca:5c:50:d6:0b:42:3f:67:fb:7a:
fa:88:c5:db:b7:54:72:43:1c:a1:87:26:8a:c1:ab:
90:a8:1c:50:b4:04:98:ba:aa:2d:22:9b:7b:11:65:
ad:b6:2c:8b:50:dc:89:d0:32:2e:84:8e:18:5a:51:
fc:79:79:f4:19:fa:be:e8:c8:c4:73:51:bb:70:c9:
3a:d1:2d:a1:7d:ab:eb:1f:0a:26:ea:a3:f3:d8:e5:
91:e9:c8:d8:ce:f1:08:c7:7e:a7:1c:2f:32:ba:0c:
19:d2:8c:87:05:43:fe:c5:76:c2:d7:7e:ee:41:f2:
d2:a1:06:0b:cc:b4:0a:a0:43:7c:f0:46:ea:05:26:
ca:f5:f6:fe:6b:22:dc:37:d2:95:57:8b:5d:f4:8e:
91:aa:da:cd:03:af:ab:bf:5a:63:c1:51:01:f9:22:
59:c2:d0:e3:24:5d:81:6d:de:c1:af:3b:69:96:2a:
99:64:52:4b:72:1a:3b:0d:27:35:f6:a4:ba:ec:70:
38:e5:3d:ac:bc:15:4f:01:fd:c5:4c:94:6e:d9:c4:
bd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:14:84:62:F7:8D:C8:3A:C1:60:FC:78:CF:A8:92:F1:2B:25:25:CD
X509v3 Authority Key Identifier:
keyid:6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/vRSEYveNyDrBYPx4z6iS8SslJc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.144.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:11:06:25:5d:c2:cb:6f:e3:69:5a:53:8e:73:87:a5:cf:36:
09:fe:29:b2:95:b6:f7:91:62:16:3f:26:e3:10:ce:8e:d5:12:
26:db:bb:be:b4:13:57:3d:ed:7f:00:59:b9:90:7e:09:a9:09:
51:d6:b5:08:80:5e:d7:fa:a2:69:b6:46:c9:3b:59:f7:a9:97:
36:55:d0:8a:f2:c5:e2:0d:d4:ab:32:3a:e1:35:6a:b2:ef:b9:
f4:07:98:76:17:41:8a:bb:d2:7a:b0:56:8f:7a:c5:b9:01:04:
05:9a:7a:67:04:39:f2:8f:e6:9c:18:3d:b1:3c:6d:4f:30:75:
6c:5c:24:99:3f:f6:c8:59:00:51:e5:98:26:54:7d:ac:1a:e5:
9f:c7:08:52:9c:6e:1b:ad:45:2c:22:80:a6:29:f4:d6:28:40:
bf:67:54:f7:3c:c1:41:39:83:41:d0:2f:6c:51:f9:6a:09:76:
58:50:ab:5f:6c:fe:58:87:15:a8:3e:ea:47:06:6b:47:80:f3:
66:cf:c8:1a:68:0f:23:0a:b5:2d:31:90:ee:65:39:94:a8:ea:
34:bf:62:98:1d:1f:35:60:c0:a7:53:6e:c4:10:53:67:9d:20:
2c:8e:03:8a:36:fb:aa:f6:5f:d6:7a:32:a8:75:23:9a:11:4e:
58:b2:8e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 08:23:26 2025 by rpki-client