Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/vOTlUrggiGnrXNC5N6wtXGWAaZc.roa
File: vOTlUrggiGnrXNC5N6wtXGWAaZc.roa (raw, json)
Hash identifier: p56HyI8WT1lbjVUgyXncMrZvvXuLEkUvfSmZqV6O7cg=
Subject key identifier: BC:E4:E5:52:B8:20:88:69:EB:5C:D0:B9:37:AC:2D:5C:65:80:69:97
Certificate issuer: /CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Certificate serial: 01856B9C6710C5A245CD99F03FA7548DFDBF
Authority key identifier: DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/vOTlUrggiGnrXNC5N6wtXGWAaZc.roa
Signing time: Sun 01 Jan 2023 04:34:50 +0000
ROA not before: Sun 01 Jan 2023 04:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60605
IP address blocks: 185.25.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:9c:67:10:c5:a2:45:cd:99:f0:3f:a7:54:8d:fd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Validity
Not Before: Jan 1 04:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bce4e552b8208869eb5cd0b937ac2d5c65806997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8d:81:26:51:ed:fd:1a:c6:87:5a:27:cf:e6:
97:c1:49:0d:92:08:4b:50:de:64:e8:a0:f2:3b:05:
b3:3a:56:58:40:df:7c:4a:a6:42:d6:e5:f9:ee:7c:
02:65:89:06:88:a9:2b:e5:d2:56:0e:a0:0c:9a:52:
ff:1f:5f:bc:53:9d:e7:b5:cc:4c:50:fc:b8:3e:f0:
1b:8c:b0:ff:18:de:30:c7:a4:c1:44:fb:e2:3c:a4:
79:55:b8:f8:16:3d:4b:e7:e2:72:d0:41:f9:88:9f:
4d:a6:c1:2f:f7:3d:23:04:51:78:40:a4:72:f6:a0:
17:07:80:08:df:a9:84:7c:b7:1a:6c:af:c0:f2:8c:
1c:47:c2:22:c9:0e:9f:fe:42:f8:d8:c7:17:74:32:
2d:fe:9f:37:fb:24:47:9f:ac:8d:e9:8d:14:bd:5c:
a8:93:a8:3d:70:f5:a2:c3:49:e4:e7:f7:55:6f:15:
88:5c:06:cb:b5:ed:ba:d0:4b:05:ea:b1:bc:ad:6d:
bc:5d:4b:45:be:e1:e6:89:ad:36:70:06:a8:a6:85:
1b:9b:de:e7:ab:a1:d4:94:ab:3b:d0:8d:ff:49:f6:
8e:6f:1c:2c:f1:6a:3a:0e:30:11:ef:2f:ae:52:ef:
79:28:cf:b5:c3:fb:84:e7:26:67:b3:ca:d1:96:02:
a4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E4:E5:52:B8:20:88:69:EB:5C:D0:B9:37:AC:2D:5C:65:80:69:97
X509v3 Authority Key Identifier:
keyid:DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/vOTlUrggiGnrXNC5N6wtXGWAaZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.172.0/22
Signature Algorithm: sha256WithRSAEncryption
35:01:bb:c0:1a:e0:0f:aa:8a:19:0e:b2:6a:3f:8d:83:e1:6a:
e8:7b:d9:18:9e:7c:83:68:ec:7d:7a:8c:5a:19:d6:83:d1:ea:
4c:0f:cb:e2:91:c1:fe:05:48:dc:02:d4:4f:40:4d:78:92:52:
d1:66:55:9b:8d:7b:aa:81:c3:18:4a:16:48:ef:f5:14:1b:5e:
c7:dc:88:6f:73:6d:8f:87:89:c5:9b:0b:bd:8a:5c:22:6e:fd:
2b:7d:7a:8d:da:72:7c:1b:da:51:a8:15:4d:a3:98:ea:15:18:
2a:b3:33:32:d4:00:b1:0c:34:0d:3e:d8:74:82:48:a2:77:b0:
b3:cf:f6:15:16:94:81:38:62:cf:cf:cb:5b:0f:e0:a8:70:af:
8c:15:0b:69:5e:34:a4:d4:0f:1c:3a:c0:b7:21:f4:c0:f5:f5:
dd:38:80:64:ef:35:c6:c3:41:a8:51:5c:fd:7d:f9:75:17:ec:
3b:83:aa:08:e1:6a:ea:f8:2b:78:01:de:e3:f0:ae:7b:c8:ad:
55:fc:9e:65:10:eb:37:76:84:dd:91:71:af:b7:12:e7:b4:4f:
da:6e:2d:dc:22:1b:b3:1f:f7:c6:91:4b:56:d1:26:c3:26:3c:
97:03:21:99:4f:f9:b3:5b:15:83:70:7d:99:c8:1c:20:2e:df:
00:a8:c4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:55:55 2025 by rpki-client